Data protection

1) Basic information

This privacy policy is intended to inform the users of this website about the nature, scope and purpose of the collection and use of personal data by the website operator European Training and Research Centre for Human Rights and Democracy (ETC Graz). Find our legal notice (imprint page) here.

The website operator takes your data protection very seriously and treats your personal data confidentially and in accordance with the legal regulations. As new technologies and the continuous development of this website may lead to changes in this privacy policy, we recommend that you read the privacy policy again at regular intervals.

Definitions of the terms used (e.g. “personal data” or “processing”) can be found in Art. 4 GDPR.

2) The rights of users and data subjects

With regard to the data processing to be described in more detail below, users and data subjects have the right

  • to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
  • to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
  • to the immediate deletion of data concerning them (cf. also Art. 17 DSGVO), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
  • to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
  • to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR).

In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.

Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller’s future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.

3) Access data

We, the website operator or page provider, collect data on access to the website on the basis of our legitimate interest (see Art. 6 Para. 1 lit. f. GDPR) and store these data as “server log files” on the website server. The following data are logged in this way:

Visited website
Time at time of access
Amount of data sent in bytes
Source/reference from which you reached the site
Used Browser
Operating system in use
Used IP address

The server log files are stored for a maximum of 7 days and then deleted. The data is stored for security reasons, e.g. to be able to clarify cases of abuse. If data must be kept for reasons of evidence, they are excluded from deletion until the incident has been finally clarified.

The data thus collected will be temporarily stored, but not in association with any other of your data.

The basis for this storage is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.

4) Range measurement & Cookies

This website uses cookies for pseudonymous range measurement, which are transferred to the user’s browser either from our server or the server of a third party. Cookies are small files which are stored on your end device. Your browser accesses these files. The use of cookies increases the user-friendliness and security of this website.

If you do not want cookies to be stored on your terminal device for range measurement, you can object to the use of these files here:

Cookie deactivation page of the network advertising initiative: http://optout.networkadvertising.org/?c=1#!/
Cookie deactivation page of the European website: http://optout.networkadvertising.org/?c=1#!/

Common browsers offer the setting option not to allow cookies. Note: It is not guaranteed that you will be able to access all functions of this website without restrictions if you make the appropriate settings.

The legal basis for such processing is Art. 6 Para. 1 lit. b) GDPR, insofar as these cookies are used to collect data to initiate or process contractual relationships.

If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR.

When you close your browser, these session cookies are deleted.

5) Collection and processing of personal data

The website operator collects, uses and passes on your personal data only if this is permitted by law or if you consent to the collection of data. The website operator collects the minimum data required to fulfil the intended purpose.

Personal data is defined as all information which serves to determine your person and which can be traced back to you – such as your name or your e-mail address.

You can also visit this website without providing any personal information. However, to improve our online offer, we store (without personal reference) your access data to this website. These access data include, for example, the file you requested or the name of your Internet provider. The anonymisation of the data does not allow any conclusions to be drawn about your person.

6) Handling of contact data

If you contact us as a website operator through the contact options offered, your details will be stored so that they can be used to process and answer your enquiry. This data will not be passed on to third parties without your consent. We process personal data such as first name, surname, e-mail address and content information from the contact form. We process these personal data only with the explicit permission of the users concerned and in compliance with the applicable data protection regulations.

The processing of personal data is based on our legitimate interest in processing your request and for further communication. The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR.

Your data will be deleted once we have fully answered your enquiry and there is no further legal obligation to store your data (such as if an order or contract resulted therefrom) and there are no other permissible reasons for us to process/store the data.

7) Handling of data related to events

If you contact us through a contact/registration/application form related to an event, your details will be processed and stored for the purpose of facilitating the event (this includes preparation, implementation, follow-up). Information on how data is processed is provided to users, who are asked for consent. Data submitted to us in an application/registration form will not be passed on to third parties without your consent.

Your data will be deleted once all the purpose of storage ceases to apply and there is no further legal obligation to store your data (such as if an order or contract resulted therefrom) and no other permissible reasons for us to process/store the data.

Events co-organized with partner organisations

In case the event is co-organized with other organisations, these organisations may process participant data necessary for the purpose of co-organizing and co-facilitating the event. Explicit information about whether data is shared with partner organizations for this purpose is given when registering for the event. The data submitted will not be passed on to other third parties or used for advertising purposes.

The legal basis for the transfer of this data is Art. 6 Para. 1 lit. b) GDPR.

8) Embedded content from other websites

Contributions on this website may contain embedded content (e.g. videos, pictures, articles etc.). Embedded content from other websites behaves exactly as if the visitor had visited the other website.

These sites may collect information about you, use cookies, embed additional third-party tracking services, and record your interaction with that embedded content, including your interaction with the embedded content if you have an account and are logged on to that site.

9) Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our website. This service is provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). reCAPTCHA is used to check whether the data entered on our website (such as on a contact form) has been entered by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, how long the visitor has been on the website, or mouse movements made by the user). The data collected during the analysis will be forwarded to Google. The reCAPTCHA analyses take place completely in the background. Website visitors are not advised that such an analysis is taking place. Data processing is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in protecting its site from abusive automated crawling and spam. For more information about Google reCAPTCHA and Google’s privacy policy, please visit the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

10) Rights of the user

As a user, you have the right to receive free information on request about which personal data about you has been stored. You also have the right to have incorrect data corrected and to have your personal data processed or deleted. If applicable, you can also exercise your right to data portability. If you believe that your data have been processed unlawfully, you can lodge a complaint with the relevant supervisory authority.

11) Deletion of data

Unless your request conflicts with a legal obligation to retain data (e.g. data retention), you have the right to have your data deleted. Personal data stored by us will be deleted either if a) they are no longer required for their intended purpose or b) if there are statutory retention periods. Data is only stored in case this can be done permissibly on the basis of another processing activity (e.g. ongoing contact, further cooperation).

If deletion after the statutory retention period cannot be carried out because the data is required for permissible legal purposes, data processing will be restricted. In this case, the data will be blocked and not processed for other purposes. In case it is not possible to delete data (link to further data sets or sub-data, technical restrictions), the data will at least be made anonymous.

12) Right of objection

Users of this website may exercise their right to object and object to the processing of their personal data at any time.

If you wish to correct, block, delete or obtain information about the personal data stored about you, or if you have any questions regarding the collection, processing or use of your personal data, or if you wish to revoke any consents granted, please contact the following e-mail address: office@etc-graz.at