Privacy Statement

Privacy policy
Data protection notice in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR)

I. Data controller

The entity responsible for processing your personal data in accordance with data protection regulations is the

Federal Chancellery of Austria
Ballhausplatz 2, 1010 Wien,
Telephone: +43 1 531 15-0
E-mail: post@bka.gv.at

II. General information on data processing

Responsible handling of personal data is a high priority for us. We have taken technical and organizational measures to ensure that the data protection regulations are observed both by us and by any external service providers. In general, the Federal Chancellery deletes or blocks personal data as soon as the purpose of storage and processing no longer applies, provided that no legal obligation can be cited for longer storage or legal claims still exist that can be asserted against us and require storage.

In accordance with these principles, the processing of personal data is being carried out as outlined below, in compliance with Articles 13 and 14 of the GDPR.

III. Data Processing

The processing of data on this website is subject to the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council from April 27, 2016 on the protection of natural persons related to the processing of personal data and on the free flow of such data, and repealing Directive 95/46/EC (GDPR) and the Data Protection Act as amended by the Data Protection Amendment Act of May 25, 2018 (DPA).

1. Data processing as part of event coordination

1.1 Scope of the personal data processing
The following personal data is collected from event participants and interested parties, though the specific data categories may vary depending on the event:

• Title
• Form of address
• Gender
• First name and surname
• Company name
• Function
• Private telephone and fax numbers, along with any additional contact information required for modern communication methods
• Date of registration
• Date of the event
• Type and title of the event
• Permission to include the name on the participants list
• Newsletter registration (yes/no)
• Permission to use the event photos on the website and on social media pages to market the event
• Supporting materials (e.g. advertising material sent to you)

1.2 Lawfulness for the processing of this data

The lawfulness of processing pursuant to Art. 6 para. 1 lit. a GDPR arises from the fact that the data subject has given consent to the processing of their personal data for one or more specific purposes.
The lawfulness of the processing pursuant to Art. 6 para. 1 lit. f GDPR arises from the fact that the processing is necessary to safeguard the legitimate interests of the controller or a third party in order to ensure information management and the efficient organization of internal and external communication in these matters.

1.3 Purpose of the processing

The processing of personal data of interested parties and participants in events is carried out for the organization and planning of events as well as general event management, the sending of invitations and the administration of participation in events.

1.4 Duration of Data Storage

The collected data will be retained until consent for receiving event information is withdrawn.

1.5 Disclosure to third parties

Your personal data will not be shared with third parties for their own purposes without your consent.

2. Data processing activity - forwarding information to Digital Austria

2.1 Scope of the processing of personal data

When you register for our initiatives and events, we request information about your interests. This allows us to send you targeted communications that include not only general information but also content specifically tailored to your individual preferences
In order to send you invitations and information about events and initiatives related to the key areas of Digital Austria, as well as to distribute the associated newsletters, the following personal data of participants or interested parties in these events and initiatives is processed:

• Title
• Form of address
• Gender
• First and last name
• Company name
• Function
• Information on the event/initiative attended
• Permission to use the name on the list of participants
• Expression of interest in the main topics
• Supporting materials (e.g. advertising material which may be sent to you)

2.2 Lawfulness of the processing of personal data

Your consent is obtained for the processing of the data as part of the registration process for the event/initiative; the legal basis is therefore Art. 6 para. 1 lit. a GDPR.
When using the data for this purpose, the provisions of communications law, in particular § 174 TKG 2021 (Telecommunications Act - TKG 2021), are complied with the purpose of data processing.

2.3. The purpose of data processing

Your personal data will be used to send general communications and information about activities, initiatives and projects of the stakeholders involved in the Digital Austria government initiative.
Your personal data will also be used to determine demand interests, your satisfaction with initiatives and projects and for analyses of the need for action regarding digitization measures in Austria. The results of these processing activities are not related to you personally.

2.4 Duration of storage

The data will be stored until you revoke your consent for receiving the event information. Your e-mail address will be deleted as soon as you revoke your consent to the use your data for e-mailings.

2.5 Recipients of data

In order to send information, provide marketing services, and conduct marketing campaigns, we occasionally engage marketing service providers. These providers may access personal data on our behalf and in accordance with our instructions to deliver the requested services. Your data will not be passed on to third parties for their own purposes without your consent.

IV. Your rights

1. Right to information

You have the right to obtain information from us about all personal data processed by the Federal Chancellery. Specifically, you can request the following information from us:

1. the purposes for which the personal data is processed;
2. the categories of personal data that are processed;
3. the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
4. the envisaged period for which the personal data concerning you will be stored, or, if specific information on this is not possible, the criteria used to determine that period;
5. the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
6. the existence of a right to lodge a complaint with a supervisory authority;
7. all available information about the origin of the data if the personal data is not collected from the data subject;
8. the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject;

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

2. Right to rectification and right to restriction of processing

You may request the rectification or completion of inaccurate or incomplete data. Under certain circumstances, for example if the accuracy of data is disputed until the accuracy has been verified, you may request that the processing of data be restricted so that it may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest.

3. Right to data portability

You may request that the Federal Chancellery send you - or, where technically feasible, a third party designated by you - a copy of your data in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another data processing controller without hindrance from the controller to which the personal data has been provided, where
1. the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR, and
2. the processing is carried out by automated means.
In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly by us to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

 4. Right to erasure ('right to be forgotten')

You have the right to erasure of data under certain circumstances, for example if it is not processed in accordance with data protection requirements. The so-called “right to be forgotten” does not apply to you because the Federal Chancellery will only make your personal data public if there is a legal obligation to do so (Art. 17 para. 3 lit. b GDPR).
If you have asserted the right to rectification, erasure or restriction of processing against the Federal Chancellery, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

5. Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) and/or (f) of Article 6 (1) GDPR, including profiling based on those provisions.
In this case, the data processing controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

6. Right to revoke the declaration of consent under data protection law

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

7. Protection of minors

Persons under the age of 14 should not transmit any personal data to us without the consent of their parents or legal guardians. We do not request personal data from children and young people. We do not knowingly collect such data and do not pass it on to third parties.

8. Supervisory authority

Notwithstanding the possibility of lodging a complaint to the regional court in accordance with Section 29 (2) of the Data Protection Act 2018 and any other legal remedies, you have the right to lodge a complaint with the national supervisory authority in your place of residence if unlawful processing of personal data is assumed. The Austrian Data Protection Authority is the responsible body in Austria.

V. Cookies

Cookies are small text files that are stored locally in the cache of the Internet browser on your computer when you visit our website. Cookies make it possible to recognize the Internet browser.
You can determine the use and scope of cookies yourself through your computer settings. You can set your computer so that you are warned each time a cookie is transmitted or deactivate all cookies. However, deleting or blocking cookies may mean that individual functions of this website are no longer available to you. You can find out how to change or update your cookies correctly in your browser's help menu.
A technically necessary cookie is set for the cookie banner consent (accept or reject). The storage period is one year.
With your consent, further cookies are set/used in the following cases:

• For YouTube videos without automatic playback:
• Technology: iframe with youtube-nocookie.com
• Google Group cookies (.google.com, .doubleclick.net and possibly other cookies depending on the video embedded)
• For YouTube videos with automatic playback (Video Hero element)
• Technology: Youtube plugin/API, video via youtube-nocookie.com
• Cookies from Google (.youtube.com, .google.com, .doubleclick.net, possibly other cookies depending on the embedded video)

The storage duration of these cookies depends on the settings of the external providers. VI. Matomo web analytics

The website uses the free source code tool Matomo for statistical purposes; in the data processing occuring here, we rely on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. For this purpose, the log data is imported into Matomo and anonymized. Matomo does not transmit any data to servers that are outside the control of the Federal Chancellery.

VII. Social media plugins and widgets

Our website also uses social media plugins and widgets from Walls.io. which, among other things, enable our social media updates to be displayed directly on the website.
When these plugins are activated, the IP address and cookie information are transmitted to Walls.io for logging by means of log files. Walls.io is operated by “Die Socialisten” Social Software Development GmbH in Vienna, Austria. IP address and cookie information are sent to the walls.io servers in Austria and Germany and logged there for technical reasons. This logging is purely a technical necessity in order to enable the functionality of the social media plugin or widget. This data is not passed on to third parties and is deleted after a maximum of 60 days. If you do not accept or delete the cookies, the functions of the social media plugin will not be available to you. We integrate all common social media platforms into our website to give you the opportunity to share our editorial content on social networks.

The Federal Chancellery takes the current discussion about data protection in social networks very seriously. It is currently unclear from a legal standpoint whether and to what extent all networks comply with European data protection regulations. We would therefore like to expressly point out that the services used by the Federal Chancellery, such as Twitter, Facebook, Instagram and YouTube, store their users' data (e.g. personal information, IP addresses) in accordance with their data usage guidelines and use it for business purposes.

The Federal Chancellery has no influence on data collection and its further use by the social networks. For example, there is no information on the extent to which, where and for how long the data is stored, the extent to which the networks comply with existing deletion obligations, which evaluations and links are made with the data and to whom the data is passed on.

The social media plugins on digitalaustria.gv.at only call up the corresponding function when clicked. A connection is then established with the respective social media platform. We expressly point out that, as the operator of digitalaustria.gv.at, we have no knowledge of the full content of the transmitted data or its use by the respective social media platform. If you click on social media plugins while you are logged into your social media account, you can link the content of our pages to your account. This allows the social media platform you have chosen to associate your visit to our pages with your account. If you do not wish this to happen, please log out of your social media account.

The use of the plugins and widgets is based on the legitimate interest of the Federal Chancellery to reach interested parties and stakeholders as part of the Digital Austria Government Initiative in the best possible way. The legal basis for the processing is therefore the existence of consent pursuant to Art. 6 para. 1 lit. a or a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

VIII. Log files

The following data is logged in the server logs: the IP address of the user together with data on the time of the request, the destination of the request, the amount of data transferred, a message as to whether the request was successful, the browser used, the operating system used and the website from which the access was made (if the access was made via a link). This data is used exclusively to ensure system security.

IX. Data Protection Officer

Data Protection Officer of the Federal Chancellery
Federal Chancellery of Austria,
Data Protection Officer
Ballhausplatz 2, 1010 Vienna
E-mail: datenschutz@bka.gv.at

X. Your rights

In principle, you have the rights to information, correction, deletion, restriction, data portability, revocation and objection. If you believe that the processing of your data violates data protection law or your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority. In Austria, this is the Austrian Data Protection Authority.

Point of contact/Person in charge:
Bundeskanzleramt,
Ballhausplatz 2, 1010 Wien,
Telephone: +43 1 531 15-0
E-mail: post@bka.gv.at

Further information:
You can reach us at the following address:
Federal Chancellery of Austria,
Section VII Digitalization and E-Government
Division VII/3 - Information Management and Services
Ballhausplatz 2, 1010 Vienna
E-mail: post.digitalaustria@bka.gv.at