Data Protection

Privacy Statement

The protection of your personal data is of the utmost importance to us. We will thus only process your data in compliance with the pertinent legal provisions (GDPR2021 Austrian Telecommunications Act (Telekommunikationsgesetz, TKG)). This Privacy Statement informs you about the most important aspects of data processing that will take place when you use our websites.

What are personal data?

Personal data are any information concerning a natural person. It is essential that, as soon as a natural person can be identified based on data (for example by reference to a user identifier), such data are considered personal data. Your personal data include, among others, your name, your address, your phone number or your date of birth. Statistical information that cannot be linked to you, neither directly nor indirectly (such as the popularity of individual websites that we offer or the number of users per site) is not considered personal data.

Who is responsible for collecting and processing your personal data?

Ludwig Boltzmann Gesellschaft is responsible for collecting and processing your data. If you have any questions or suggestions, do not hesitate to contact us:

Ludwig Boltzmann Gesellschaft
Nussdorfer Strasse 64
1090 Vienna, Austria
bssvpr@yot.np.ng

LBG’s data protection officer
Bernd M. Schauer
qfon@yot.np.ng

In order to be able to process requests and respond to follow-up questions, the processing of relevant personal data is necessary for the performance of (pre)contractual obligations and/or based on legitimate interests. We will not pass on these data without your consent.

Cookies

Cookies are small text files that your browser stores on your device. Setting cookies allows website operators to derive user behaviour information. If you do not want cookies to be stored on your device, you may select browser settings that will prompt your browser to inform you before cookies are set. You may also permit cookies to be set on a case-by-case basis. Please refer to the instructions for use of your browser for further information on how you can do this. If you reject certain technical and/or functional cookies, this might restrict our website’s functionality. Cookies will remain stored on your device until they are manually or automatically deleted.

It is generally possible to use LBG’s websites anonymously, only permitting the setting of technically necessary cookies.

When you first access LBG’s websites, you may accept or reject cookies via the implemented cookie solution. By clicking on “Save selection” or “Accept all” you will give us your corresponding consent.

Technically necessary cookies: Technically necessary cookies are indispensable for a website’s use, e.g. for language selection. Users do not have to consent to the setting of such cookies.

Technically non-necessary cookies: Non-necessary cookies enhance a website’s functionality and collect further data. The use of LBG’s websites is also possible without these cookies. LBG uses:

  • analytics cookies: to produce statistics without creating profiles, to measure the number of page views and to improve general site navigation.
  • social network cookies: to display content from social media platforms.

It is also possible to delete cookies that have already been set. Please refer to the instructions for use of your browser for further information on how you can do this.

Analytics cookies

As website operator, LBG uses the open-source web analytics solution Matomo (formerly known as Piwik) to analyse user behaviour. This software allows us to produce user traffic statistics for our websites, analysing and evaluating from where users are referred to our websites and how they move around on our websites. User behaviour is not tracked beyond LBG’s websites or when users move on to other services.

The access data of website users are only collected for statistical purposes and used in a pooled form to operate and optimise our websites and guarantee their security (largely legitimate interests).

The generated information is transferred to our own server and stored there. It is used to improve the overall user-friendliness, effectiveness and security of our websites. Cookies are also used to measure the number of page views and for general site navigation. Please note that cookies are used to store the subscriber’s IP data in an anonymised form for this purpose.

Social networks

LBG is present on various social media platforms. Embedded interfaces allow for displaying original content from these platforms on LBG’s websites. Your browser will exchange data with these platforms when loading such elements. The platform will also send information to your browser which the browser will then store, e.g. in cookies.

LBG does not have any insight or influence on the content and type of these data nor on the way in which they are stored and processed. This is why LBG offers you the opportunity to prohibit elements from these platforms to be displayed and loaded by selecting the respective cookie options. Elements embedded into LBG’s websites will then be displayed as a standardised preview that includes a link to the original. This avoids any data exchange with the respective platform. It is also possible to delete cookies that have already been set. Please refer to the instructions for use of your browser for further information on how you can do this.

Please refer to the privacy statements of the various platforms for further information on their use of your data:

Facebook Privacy Policy

Twitter Privacy Policy

Privacy Policy of Google/YouTube

Instagram Privacy Policy

LinkedIn Privacy Policy

Server log files

In order to optimise the website’s system performance, user friendliness and provision of useful information about our services, the website provider automatically collects and stores information in so-called server log files that will then automatically be transferred to us by your browser. This information includes your Internet protocol address (IP address), browser and language settings, operating system, referrer URL, your Internet service provider, as well as date/time. These data are not merged with any personal data sources. If there is specific indication which gives rise to suspicions of illegal use, we reserve the right to review the data.

Storage period

We generally store personal data only for as long as we need them to fulfil the above stated purposes or to conform to contractual or statutory obligations. We delete personal data that we no longer need from our systems or anonymise them to make sure that website users can no longer be identified.

Transfer of data

In general, personal data collected in the course of website use will not be transferred to any third parties, unless such a transfer is required for us to be able to fulfil our duties or comply with statutory/official obligations.

Personal data may also be processed by our service providers on our behalf. Processors include in particular IT service providers or providers of any other Internet and software solutions that are required for the operation of our website. All our processors generally only process data on our behalf and according to our instructions for the above purposes.

Your rights

You have the right to access to, rectification and erasure of personal data, the right to data portability, the right to withdraw your consent and the right to object. If you believe that the processing of your data is in violation of applicable data privacy law or that your data privacy rights are violated in any other way, you may lodge a complaint with the Austrian data protection agency:

Österreichische Datenschutzbehörde (Austrian Data Protection Agency)

Barichgasse 40-42

1030 Vienna, Austria

Phone: +43 1 52 152-0

Email: qfo@qfo.ti.ng

Please note that this privacy statement may be adapted due to legal or effective requirements.

Online webinars

When you participate in one of our online webinars, we collect and process your personal data.
The following statement informs you how your personal data is processed by us.

Data processing

In order to participate in one of our online webinars, you must register for it. When you register, you provide your name and email address. This data is necessary to enable you to participate in the webinar. Without this data, participation is not possible.

We do not collect or process your data beyond this. We only process the very data that you provide and transmit as part of the registration process.

Purpose and legal basis

The processing of your data is used to enable your participation in the online webinar and to answer any queries you may have regarding participation.

The legal basis for the processing is Article 6 para 1 lit b GDPR (Regulation of the European Union). The processing is necessary for participation in the webinar, i.e. for the performance of a contract to which you are a party or for the implementation of pre-contractual measures that take place at your request. The processing of your data is a necessary prerequisite for offering and conducting the online webinar.

Depending on the online webinar, you have the option of using the chat and question or survey functions within the webinar. In this respect, the text you enter is processed in order to display it in the webinar and, if necessary, to log it.

If necessary, the organiser of the webinar will give you the opportunity to “share” your screen with other participants so that your screen content is displayed to the other webinar participants, the organiser and any moderators or speakers. To enable this, the display of video and the playback of audio, the recorded data from your terminal’s microphone and any video camera and the video data displayed on your screen, will be processed accordingly for the duration of the webinar. If necessary, you can switch off or mute the camera, the microphone and the sharing of your screen yourself at any time.

We would like to point out that it is technically possible to record online webinars/online lectures. If the webinar in which you are participating is actually recorded, we will inform you in advance and – if necessary – ask for your consent.

Transfer of your personal data

Personal data processed in connection with participation will generally not be disclosed to third parties unless it is specifically intended for disclosure.

If the online webinar is recorded, we reserve the right to publish this on our website and in our social media channels for the purpose of documentation and reporting.

Duration of data storage

Personal data is generally deleted if there is no legal basis for further storage. A legal requirement may exist in particular if the data is still needed in order to fulfil contractual services, to be able to check or ward off warranty and, if applicable, guarantee claims. In the case of legal retention obligations, deletion only comes into consideration after expiry of the respective retention period.

Your rights

You have the right to information, correction, deletion, restriction, data portability, revocation and objection. If you believe that the processing of your data violates applicable data protection law or your data protection rights are otherwise violated in any way, you can file a complaint with the Austrian data protection authority:

Österreichische Datenschutzbehörde (Austrian Data Protection Agency)

Barichgasse 40-42

1030 Vienna, Austria

Phone: +43 1 52 152-0

Email: qfo@qfo.ti.ng

Newsletter

Note on data privacy (GDPR)

Ludwig Boltzmann Gesellschaft will use the data you provide only for the purpose of informing you about our activities. We use a double opt-in newsletter subscription process: After you have completed the form below, we will send you a first contact email informing you that you have given your consent to receiving emails from us. In this email we will ask you to confirm your consent by clicking on a link. If we do not receive any confirmation, we will automatically delete the data provided via the form after two weeks.

You may revoke your consent at any time by clicking on “Unsubscribe” in the footer of any email that you receive from us after your subscription or by sending an email to ce@yot.np.ng.

We use the email marketing system offered by Matoma GmbH. By confirming your subscription, you agree that the data you provided will be transferred to Matoma GmbH and processed according to their data privacy policy.

Privacy statement concerning photos taken and videos recorded at LBG events

1. Legal framework:

1.1. The EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (Datenschutzgesetz, DSG) and the 2018 Austrian Data Protection Amendment Act (Datenschutz-Anpassungsgesetz) as amended guarantee the right to the protection of personal data. We will only process your data in compliance with the pertinent legal provisions (GDPR, DSG, 2021 Austrian Telecommunications Act (Telekommunikationsgesetz, TKG)).

2. General provisions

2.1. Controller according to the GDPR: Ludwig Boltzmann Gesellschaft (hereinafter referred to as LBG), Nussdorfer Strasse 64, 1090 Vienna, Austria, phone: +43 (0)1 513 27 50, bssvpr@yot.np.ng.

2.2. Data protection officer of Ludwig Boltzmann Gesellschaft: Bernd M. Schauer, qfon@yot.np.ng

2.3. The protection and safe storage of all personal data that you share with us is of the utmost importance to LBG.

2.4. This privacy statement is intended to inform you on how we use and process photos and videos that we take at our public events.

3. Purpose limitation, legal basis, storage period and data recipients

3.1. Taking photos and videos at public events and publishing said photos on the website and social media as well as in print media, including in particular newspapers, professional publications and other printed materials of the controller, serves the purpose of public relations activities and of illustrating the controller’s activities. It also serves the purpose of raising the public’s awareness of the controller’s activities. This is a legitimate interest as defined in Art. 6 para. 1(f) of the GDPR and Sections 12 and 13 of the Austrian Data Protection Act.

3.2. The data subject is entitled to object to the processing of their data at any time. They may do so by writing an email to bssvpr@yot.np.ng or submitting their objection to the controller via one of the above contact options.

3.3. When it comes to balancing different interests, it has to be stated that the controller’s interest in taking photos and videos and using them does not excessively encroach upon the rights and freedoms of a natural person, in particular if the photos and videos are taken at a public event or in a public space of the controller and if it is pointed out on the invitation and at the event itself that photos and videos will be taken and for which purpose they will be used.

3.4. We also guarantee to take care that we do not infringe on any legitimate interests of people shown in photos and videos, both when taking and when publishing them. In case the rights and freedoms of a person shown in photos or videos are infringed on for particular important reasons, the controller will take appropriate measures to ensure that any further processing is prevented.

3.5. Unfortunately, it is impossible to edit or blur pictures in print media after their publication. Pictures on the website or social media will be deleted as soon as technically possible.

3.6. Photos and videos of a data subject may be specifically transferred to the following recipients:

  • Employees of departments of the controller who necessarily have to process the data as part of their activities, including in particular IT, PR and marketing departments.
  • Any contractors and other processors who are involved in processing or publishing activities on our behalf.
  • Photos and videos are made available to the public on the Internet and published on social media.
  • Photos may be published in print media and our own publications that are made available to interested persons.
  • The data are not transferred to recipients who would use them for their own purposes. Social media services may, however, obtain an exploitation right in data published on their platforms.
  • Providers as processors.
  • Others competent authorities, in particular police forces and security authorities.
  • Courts in judicial matters and district administration authorities and municipal authorities in administrative police matters (e.g. trade authority).
  • Legal representatives (when asserting rights or warding off claims or in the context of official procedures).

3.7. Photos and videos will not be transferred to any third country or any international organisation. There is no automated decision-making (profiling) as defined by the GDPR.

4. Data security

The controller uses technical and organisational protection measures to protect stored personal data against any manipulation, loss or destruction by accident or by intent and against access by unauthorised persons. Our protection measures are continuously improved based on technical progress.

5. Your rights

5.1. You are entitled to the following at any time:

  1. a) access to personal data concerning you pursuant to Article 15 GDPR;
  2. b) rectification of inaccurate personal data pursuant to Article 16 GDPR;
  3. c) erasure of personal data concerning you when the conditions pursuant to Article 17 GDPR are fulfilled;
  4. d) restriction of processing when the conditions pursuant to Article 18 GDPR are fulfilled;
  5. e) obtain the personal data in a structured, commonly used and machine-readable format pursuant to Article 20 GDPR;
  6. f) objection pursuant to Article 21 GDPR, if necessary;
  7. g) lodge a complaint with the data protection authority, if you think that the processing of personal data concerning you is in violation of the General Data Protection Regulation or Section 1 or Paragraph 2 of the First Part of the 2018 Austrian Data Protection Amendment Act (Datenschutz-Anpassungsgesetz).

5.2 If a data subject wants to make use of any of the above rights, they may at any time and without giving any reasons address their request by email or letter to Ludwig Boltzmann Gesellschaft, Nussdorfer Strasse 64, 1090 Vienna, Austria, bssvpr@yot.np.ng.

5.3. The competent supervisory authority is the Austrian Data Protection Agency, Barichgasse 40-42, 1030 Vienna, Austria, www.data-protection-authority.gv.at

5.4. Any objection against a consent given shall be without prejudice to the legality of any processing carried out based on this consent until the objection.

Data Privacy Policy for Clinical Research Groups (CRG) pursuant to Art. 13 and 14 GDPR

1. Purpose of data processing

The Republic of Austria, represented by the Federal Ministry of Education, Science and Research (hereinafter referred to as “BMBWF”), has instructed Ludwig Boltzmann Gesellschaft (hereinafter referred to as “LBG”) to handle the “Clinical Research Groups” funding programme. This programme supports the development of innovative research results in disease-oriented and patient-oriented clinical research.

As part of such handling LBG has to engage in the following activities: preparation and publication of the call for proposals, managing the selection procedure, preparation of the funding decision-making, drafting and concluding funding contracts and/or notifying funding applicants of their rejection, handling of funds (accounting and control of the use of funds in accordance with the designated purpose), claiming back funds, participation in the interim and/or final evaluation, and public relations work. For these activities LBG will process personal data.

LBG will engage in these tasks in the name and for the account of the BMBWF.

Funding is based on the funding contract concluded between the Republic of Austria, represented by the BMBWF, which is in turn represented by LBG as the handling agency for the funding, on the one part, and the lead institution and the cooperation partners of the clinical research group as the recipients, on the other part.

In addition to funding by the BMBWF, funds will also be provided to LBG by the Zukunft Österreich Fund for carrying out the “Clinical Research Groups” funding programme.

2. Note on joint responsibility

In the course implementing the funding programme personal data will be processed, with the BMBWF and LBG acting as joint controllers as defined in Art. 26 GDPR. The rights and duties of the controllers when jointly processing personal data are regulated in the agreement pursuant to Art. 26 GDPR of 13 January 2023/24 January 2023. According to that agreement LBG will collect and store data for handling the awarding of funds, the funding contract and for monitoring the funds awarded. The BMBWF processes data to make decisions on the awarding of funds.

 

 

3. Type of personal data and its sources; Extent of processing personal data

In principle the personal data that is processed was received by LBG because of the funding application and the reports and evidence provided by the recipient. The following data that will be processed includes, without limitation:

  • personal data on the funding applicant;
    1. first name and surname of authorised representatives;
    2. academic title, title;
    3. email address;
    4. phone number;
  • Information on the funding applicant’s project manager, programme manager and the staff involved in the research project
    1. first name and surname;
    2. academic title, title;
    3. date of birth;
    4. gender;
    5. email address;
    6. phone number;
    7. Open Researcher and Contributor ID (ORCID) (ORCID is a non-profit organisation that assigns identification numbers to authors. These are used to uniquely and persistently assign scientific authors to publications.)
    8. occupation, job title;
    9. working time records according to the financial report for funds accounting;
  • Personal data on staff of the funding applicant’s project partners
    1. first name and surname;
    2. academic title, title;
    3. date of birth;
    4. email address;
    5. phone number;
    6. ORCID
    7. occupation, job title;
    8. working time records according to the financial report for funds accounting;
  • Personal data on the funding applicant’s external partners, e.g. tax advisors
    1. first name and surname;
    2. academic title, title;
    3. address;
    4. email address;
    5. phone number;
    6. working time records according to the financial report for funds accounting;
  • Personal data on the funding applicant’s subcontractors
    1. first name and surname;
    2. academic title, title;
    3. address;
    4. email address;
    5. phone number;
    6. working time records according to the financial report for funds accounting;
  • Personal data on the funding applicant’s suppliers
    1. first name and surname;
    2. academic title, title;
    3. address;
    4. email address;
    5. phone number;
    6. working time records according to the financial report for funds accounting;
  • Personal data on members of the assessment committee and the expert commission, experts
    1. first name and surname;
    2. academic title, title;
    3. gender;
    4. address;
    5. email address;
    6. phone number;
    7. ORCID
    8. occupation, job title;
    9. bank details;
  • Information on education and training and the academic career of the staff of the research group, including, without limitation,
    1. start and duration of and success in completed training;
    2. educational institutions attended, including the study programme, where possible;
    3. information on mobilities pursuant to Section 10 of the Austrian Act on the Austrian Agency for Education and Internationalisation [OeADG];
    4. primary research fields;
    5. publications to date;
    6. academic acknowledgements;
    7. projects to date;
    8. cooperation partners to date;
    9. academic roles and scientific career to date;
    10. other “Art 89” funds requested and approved (Section 2b No. 2 of the Austrian Research Organisation Act [FOG]
  • other information, including, without limitation,
    1. bank details;
    2. job title;
    3. data (Section 2b No. 5 FOG) which is required for proper handling and evaluation of applications, offers and contracts (e.g. working time records according to the financial report for funds accounting, evaluation data and evaluation results), and
    4. data (Section 2b No. 5 FOG) regarding discontinuation and claiming back of “Art 89” funds (e.g. working time records according to the financial report for funds accounting, evaluation data and evaluation results) (Section 2b No. 2 FOG)
  • Information on all persons employed with the project, including, without limitation,
    1. employment contracts;
    2. more detailed information on the employment relationship;
    3. working time records;
    4. absences;
    5. salary slips;
    6. qualification and career steps, and
    7. information on travelling and lecturing activities;

In addition LBG processes data which it generates via the transparency portal request as defined in Section 32(5) of the Austrian Transparency Database Act [TDBG] 2012.

 

4. Legal basis for the processing of personal data

The General Data Protection Regulation (GDPR) serves the purpose of protecting the personal data of natural persons. Personal data is comprised of specific information which relates to an identified or identifiable natural person, such as, e.g., name, address, email address, and also data in connection with payments or bank details.

Personal data is processed in accordance with the provisions of the GDPR, the Austrian Data Protection Act [DSG], the Austrian Data Protection Amendment Act [DSAG] 2018, the Austrian Federal Act on General Affairs pursuant to Section 89 GDPR and Research Organisation [Forschungsorganisation/FOG], BGBl. [Federal Law Gazette] No. 341/1981, each as amended from time to time.

The following grounds constitute the legal basis for processing personal data:

  • Art 6 (1) (a) GDPR – consent: Consent to processing applies to all personal data that is provided by the data subjects.
  • Art.6 (1) (b) GDPR – necessity for performance of contract: Processing of personal data is for negotiating/performing the funding contract.
  • Art. 6 (1) (c) GDPR – compliance with legal obligations: LBG has been contracted by the BMBWF to handle the funding programme by means of a special policy and a contract. Another duty arises from the Austrian Federal Act on General Matters pursuant to Section 89 GDPR and Research Organisation [Forschungsorganisation/FOG], BGBl. 341/1981 as amended (processing for scientific research purposes by funding and grant agencies).
  • Art 6 (1) (f) GDPR – legitimate interest: The legitimate interest is the interest of LBG as the handling agency in carrying out the necessary processing in connection with the awarding and management of funds, such as, e.g., checking eligibility for funding, monitoring and control of the use of the funds, as well as subsequent evaluation of funding.
  • Art 6 (1) (e) GDPR – public interest: As taxpayers’ money is used the public has an interest in legally compliant use. Personal data must be used to ensure this. Funding of science and research is a task that lies in the public interest of the BMBWF. Checking the use of the funds is a task that lies in the public interest of the Austrian Court of Audit [Rechnungshof].

5. Recipients of data; Processor; Transfer of data

The joint controllers are LBG and the BMBWF. Data will only be forwarded to third parties if this is necessary for fulfilling (pre-)contractual duties or if LBG is required to do so by law or by the authorities.

For handling the funding programme it is necessary to forward personal data to the following recipients, among others:

  • members of the scientific expert commission, assessment committee;
  • experts;
  • Zukunft Österreich Fund;
  • processor: ace Neue Informationstechnologien GmbH as the processor in the course of application submission, evaluation and subsequent reporting for funded clinical research groups;
  • processor: Softcom Consulting GmbH as the IT service provider;
  • bodies and agents of the Federal Government (e.g. Austrian Court of Audit, Federal Ministry of Finance; Finanzprokurator [lawyers and legal advisors of the Republic of Austria])
  • bodies and agents of the European Union, provided that such data must be transmitted or disclosed under EU law provisions;
  • bodies and agents of the Federal Government or other legal entities that award or handle funding;
  • external auditors;
  • external evaluators;
  • in the case of enforcing or defending legal claims: courts, administrative authorities, legal counsel;
  • external agencies in the course of quality assurance measures;
  • other Austrian funding organisations for clarification as to whether multiple funding has been awarded for submitted projects (e.g. Austrian Science Fund (FWF), Austrian Research Promotion Agency (FFG), Vienna Science and Technology Fund (WWTF), Austrian Wirtschaftsservice Gesellschaft (AWS)).

Personal data will also be reported to the transparency database if there is a duty to do so under the Austrian Transparency Database Act [Transparenzdatenbankgesetz/TDBG] 2012.

As part of public relations work some data (first name and surname, job title, email address) may be published regarding funding recipients, funding applicants, project managers, projects partners, or details and information about the funded project.

Processors, e.g. providers of software solutions, may be called in for data processing. Contracts in accordance with the provisions of Art 28 GDPR will be concluded with the same.

Personal data will be transferred outside of the EU/EEA, in particular during the assessment process. Some personal data will also be processed outside the EU/EEA, including in the USA. In such cases data transfer will be done pursuant to Art 45 GDPR (on the basis of an adequacy decision) or in the case of a lack of an adequacy decision (in the case of data transmission to the USA) pursuant to Art. 46 GDPR (on the basis of appropriate safeguards). If neither an adequacy decision nor appropriate safeguards have been obtained, data transfer abroad may be done by observing the exemptions of Art 49 (1) a GDPR.

6. Storage period; Security measures

Data will be stored for no longer than necessary for handling the funding programme in compliance with the statutory retention duties. Data will in any case be stored for ten (10) years pursuant to §2g Austrian Research Organisation Act (FOG), namely

  • in the case of withdrawal or non-pursuance of an application, an offer or a negative decision following the final contact; and
  • in the case of a positive decision from the end of the year of payment of the entire funds or the entire fee.

If during the application process the applicant has given their permission to be contacted with regard to quality assurance measures, LBG will retain the contact details of the applicant for up to four (4) years in order to contact them in the course of quality assurance measures and/or to inform them about new calls.

To the extent that additional statutory or EU law periods or deadlines apply the same shall be applicable.

7. Data security

LBG implements technological and organisational security measures to protect the stored personal data against accidental or wilful manipulation, loss or destruction and against access by unauthorised persons. The security measures are being improved regularly according to technological progress.

8. Rights of data subjects

Data subjects have the right to

  • access to personal data stored pursuant to Art 15 GDPR
  • rectification of inaccurate personal data pursuant to Art 16 GDPR
  • erasure of inaccurate or unlawfully processed data pursuant to Art 17 GDPR
  • restriction of processing if the prerequisites pursuant to Art 18 GDPR are fulfilled
  • data portability pursuant to Art 20 GDPR
  • if applicable, the right to object pursuant to Art 21 GDPR if data processing was done on the basis of Art 6 (1) (e) or (f) GDPR
  • withdrawal of consent: data subjects have the right to withdraw their consent under data protection law at any time. The lawfulness of processing done up to the time of withdrawal shall not be affected by such withdrawal of consent.

As the data is processed for research purposes on the basis of Art 6 (1) (c) GDPR in conjunction with Art 89 GDPR in conjunction with Sections 2d, 2f and 2g FOG (Austrian Research Organisation Act) the right to access (Art 15 GDPR), the right to rectification (Art 16 GDPR), the right to erasure (Art 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art 20 GDPR), the right to object (Art 21 GDPR) will not apply if this were to render impossible or seriously compromise the realisation of the research purposes. Pursuant to Section 2g (5) FOG the right to erasure and objection is excluded from the date the funds are awarded.

Data subjects have the right to lodge a complaint with the Data Protection Authority. The competent authority is:

Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna

Phone: +43 1 52 152-0

Email: qfo@qfo.ti.ng

As LBG handles the funding programme in the name and for the account of the BMBWF, LBG primarily processes the data under the joint responsibility. LBG is thus the primary contact for exercising the above-stated rights. Irrespective thereof data subjects may claim their rights also from the BMBWF.

9. Contact details for data protection:

For the purposes of the GDPR the controllers are

  • Ludwig Boltzmann Gesellschaft – Österreichische Vereinigung zur Förderung der wissenschaftlichen Forschung (LBG), Nußdorfer Strasse 64, 1090 Vienna, Phone. +43 1 513 27 50, bssvpr@yot.np.ng and
  • The Federal Ministry for Education, Science and Research, Minoritenplatz 5, 1010 Vienna, represented by the Federal Minister for Education, Science and Research, Phone. +43 1 53120-0, zvavfgrevhz@ozojs.ti.ng

The data protection officers are

  • data protection officer of LBG: Mag. Bernd M. Schauer, qfon@yot.np.ng
  • data protection officer of the central agency of the BMBWF for the area Science and Research: Mag. Lothar Hahn, qngrafpuhgm@ozojs.ti.ng

This document is translated from German. In the case of inconsistencies or conflicts between the German and the English version the German version shall prevail.