a) Scope
We generally only collect and use personal data of our users to the extent necessary for providing a functional website as well as our content and services. We use your personal data to provide the information, products, desired services offered by us, to answer your questions, and for the operation and improvement of our website and applications.
The collection and use of personal data of our users only takes place based on an appropriate legal basis within the meaning of the GDPR, for example, due to a legal obligation (such as according to the University Act 2002), a contractual obligation, public interest, or with the consent of the user.
b) Legal Basis
Where we obtain consent from the data subject for processing personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for processing personal data.
When processing personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures.
Where processing of personal data is necessary to fulfill an obligation to which TU Wien is subject, Article 6(1)(c) of the GDPR serves as the legal basis.
In cases where processing personal data is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) of the GDPR serves as the legal basis.
If processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in TU Wien, Article 6(1)(e) of the GDPR serves as the legal basis.
If the processing is necessary for the purposes of the legitimate interests pursued by TU Wien or a third party, and the interests or fundamental rights and freedoms of the data subject do not override those interests, Article 6(1)(f) of the GDPR serves as the legal basis for the processing.
c) Data Deletion and Storage Duration
Personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if provided for by the European or national legislator in Union regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or deleted when the storage period prescribed by the aforementioned regulations expires, unless there is a need for further data storage for the conclusion or fulfillment of a contract.