We, CAMPUS 02 University of Applied Sciences (abbr. CAMPUS 02 UAS), Körblergasse 126, 8010 Graz, Austria, process the following data categories by automated means during your employment at our university of applied sciences, for the purpose of concluding and fulfilling your teaching contract, and in accordance with legal or contractual obligations:

Master data (e.g. gender, name, title, date of birth); address data; contact details; main occupation including social security certificate; data regarding education and training; and contract and bank details.

In addition, we might process the following data categories:

• Information provided by you during your application
  e.g. CVs

• Data generated as part of course unit organisation and student evaluation
  e.g. invoicing data, staff data according to the FH-BIS Regulation*, course unit data, evaluation results

• Data generated during the University of Applied Sciences Board elections
  e.g. from the electoral roll and proposals for appointments, election results

• Data generated when using various IT services and web-based (learning) tools
  e.g. user master data, printer data (e.g. print credits, ...), log files, usage data (such as entries), printer data (e.g. print credits, ...)

• Data generated when using the locking system in the Rosenhof building
  e.g. name, company affiliation, opening authorisations, recording of opening and locking behaviour

• Data processed in the course of the time recording app
  in particular first name, last name, start times of the student time recording (as proof of the completion of teaching obligations), log data, e-mail address, course dates

We process and transfer this data to enable smooth running of our degree programmes, to settle invoices, to ensure access control to protect the property of CAMPUS 02 UAS, to fulfil our obligations regarding record-keeping, information provisioning, reporting and notification, and to carry out quality management tasks. A proportion of your data is also processed for IT system administration and security. This also includes data generated during the creation and archiving of texts and correspondence.

These procedures are the prerequisite for managing your teaching contract correctly and for fulfilling our legal and contractual obligations and occur on basis of legitimate interest of CAMPUS 02 UAS. If we cannot process your data, employment at CAMPUS 02 UAS is unfortunately not possible.

CAMPUS 02 has a contractual obligation to ensure a proper running of the degree programmes. In this context, online courses and online examinations are offered via Microsoft “Teams” in order to ensure up-to-date and functioning teaching activities. In addition, various web-based (learning) tools are used in teaching to support an innovative and interactive teaching and learning environment at the cutting edge.

With your voluntary consent, we will show your photo and CAMPUS 02 UAS e-mail address on our website according to Art. 6 para. 1 cl. a of the GDPR. You can withdraw your consent at any time. * Regulation governing the provision of information on UAS degree programmes (Verordnung zur Fachhochschul-Bereitstellung von Informationen über den Studienbetrieb)

Upon expiry of your teaching contract, your personal data will be deleted step-by-step according to the valid legal retention obligations.

According to Art. 13 para. 8 of the University of Applied Sciences Studies Act (Fachhochschulgesetz, FHG), all data required to prove that a student has graduated (e.g. course unit data) is stored for 80 years, starting from the end of the academic year in which the study contract of the student expires.

The data processed in the course of the student evaluation are stored for 7 years in accordance with the certification period of the QM system pursuant to § 22 (4) of the Higher Education Quality Assurance Act (HS-QSG).

The data processed within the framework of the time recording app will be deleted at the end of the following semester.

All data (log files) collected in connection with the locking system are stored for a period of one month. After this period they will be irrevocably deleted.

All other data that we processed is usually deleted after 10 years.

The retention period may be extended in all cases where judicial or administrative proceedings are pending in which CAMPUS 02 UAS has party status and in which this data is at issue.

It is possible to request that data be anonymised instead of deleted. In this case, any references to persons are irreversibly removed. Consequently, erasure obligations from data protection laws do no longer apply.

Your personal data is treated as confidential and is generally processed only by CAMPUS 02 UAS staff members internally.

However, data processors who have been commissioned by us can also process data for the purposes mentioned if they can ensure adequate data security. For example, in cases where support is required, external IT service providers can see and process the above-mentioned data categories.

The data relevant to each particular case is also transferred to the following recipients in accordance with the laws and regulations and contractual agreements:

• Tax consultants (payroll accounting)
• Auditors and tax advisors involved in preparing annual financial statements
• Social insurance providers, local tax office, corporate provision fund
• Agency for Quality Assurance and Accreditation Austria (AQ Austria)
• Austrian Public Employment Service (Arbeitsmarktservice, AMS)
• Municipal authorities/district administration authorities
• Statistics Austria (Bundestanstalt für Statistik Austria)
• Austrian Court of Audit (Rechnungshof)
• Legal representatives, courts
• Creditors of a part-time lecturer or their legal representatives (regarding seizures, pledges, assignments of claims)
• Banks responsible for disbursements to part-time lecturers or third parties
• Insurance companies during insurance activities
• Vocational education institutions

In addition, due to legal and contractual provisions, some relevant data of part-time lecturers is transferred to:

• the Electoral Commission for the University of Applied Sciences Board elections;
• the University of Applied Sciences Board while carrying out tasks according to the FHG; and
• the academic year representatives participating in evaluation feedback meetings.

We use Microsoft Office 365 as the cloud service for our e-mail correspondence as well as for the provision of online classes and online examinations. Hosting is mainly provided within the European Union in accordance with European data protection laws. Some services and technical support can also be provided from outside of the EU. Some profile data (names, password, PUID number) is also saved in the US.

On July 10, 2023, the European Commission adopted an adequacy decision on the Data Privacy Framework (data protection agreement between the EU and the USA). If providers in the USA certify themselves in accordance with these data protection requirements (which, among other things, restrict access to data by US authorities and provide legal protection for EU citizens), an adequate level of data protection is generally guaranteed for data transfers. You can check which providers are included in the list here:https://www.dataprivacyframework.gov/s/participant-search 

Microsoft has undergone this self-certification. The data transfer can therefore be based on the adequacy decision on the Data Privacy Framework as a valid legal basis for data transfers to the USA. Furthermore, the standard contractual clauses and additional technical and organizational measures guaranteed by Microsoft also apply. Further information on data processing can be found in Microsoft's privacy policy (https://privacy.microsoft.com/dehttps://privacy.microsoft.com/de-de/privacystatement). 

You can use various web-based (learning) tools (Padlet, Kahoot and Mentimeter) to support different teaching and learning methods as part of the digitalization offensive. These are Padlet (https://legal.padlet.com/privacy), Kahoot (https://trust.kahoot.com/privacy-policy/) and Mentimeter (https://www.mentimeter.com/de-DE/trust/legal/privacy-policy). Padlet is a US application and is subject to Privacy Framework certification. The data transfer can therefore be based on the adequacy decision on the Data Privacy Framework as a valid legal basis for data transfers to the USA. Kahoot and Mentimeter originate from the EU/EEA area, but also use US service providers. They base the data transfer on appropriate guarantees in accordance with Art. 46 ff GDPR, such as standard contractual clauses. These providers may also create user profiles for their own purposes. For further information, please refer to the data protection information of the respective providers.  

Apart from the data recipients mentioned, CAMPUS 02 UAS does generally not disclose information to third parties. Third parties are asked to directly contact the part-time lecturer.