Johannes Kepler University of Linz (hereinafter "JKU") informs you below about the processing of your personal data (more precisely: personal data that refer to you) within the meaning of Art. 4 Subclause 1 General Data Protection Regulation (hereinafter "GDPR"), which the applicable data protection law serves to protect^[1. "Processing", within the meaning of Art. 4 Subclause 2 GDPR, is in particular the collection, recording and storage of personal data with or without the aid of automated (technical) processes.

I. Entry of the contact data:

The controller of the data processing described below within the meaning of Art. 4 Subclause 7 GDPR is Johannes Kepler University of Linz (JKU), Altenberger Straße 69, 4040 Linz, datenschutz(at)jku.at.

The data protection officer within the meaning of Art. 37 GDPR can be contacted at Johannes Kepler University of Linz (JKU), Data Protection Unit, Altenberger Straße 69, 4040 Linz, datenschutz(at)jku.at.

II. Background of the processing / statement of the purpose, for which the personal data are to be processed / legal basis of the processing / recipients of the personal data:

1. Background and purposes of the processing

1.1. As part of conducting an online survey within the EC2U network, JKU processes the data and information provided by participants in the questionnaire for the following purposes:

■ Establishing a network of experts in the fields of entrepreneurship and innovation within EC2U by obtaining information on research interests and research focuses, innovation projects and cooperation potential of the surveyed participants (qualifications, experience, recommendations, ideas, etc.). Subsequently, the network should enable the establishment of contacts and an exchange of information between researchers and innovation/transfer officers (also via social networks such as LinkedIn) as well as the identification of common challenges and potential collaborations.

■ Electronic provision of invitations to EC2U events and online meetings and of information material resp. for reporting and achieving a certain promotional impact in connection with the activities, topics and objectives of the EC2U network.

■ Acquisition of lecturers/speakers for EC2U events and online meetings.

1.2. Additionally, when accessing the online survey tool "Limesurvey", certain background information such as browser type and version, operating system, referrer URL, access time, and IP address is collected and stored in server log files (log data). This data is processed to ensure system functionality and security, analyse and resolve technical issues, and optimize system performance, all within the scope of technical necessity. The data is neither used to analyse user behavior nor combined with other data sources.

1.3. “Limesurvey” survey software uses cookies that are required for the login and security of the application. These temporary cookies are automatically deleted at the end of each browser session and are absolutely necessary for the application to run.

2. The legal basis

2.1. The legal basis for the processing of personal data as part of the online survey in accordance with point II.1.1. is the voluntary consent of the participants in accordance with Art. 6 para. 1 letter a, Art. 9 para. 2 letter a GDPR and § 174 para. 3 TKG[2]. There is no obligation to participate in the online survey and provide personal data for the above purposes. Participants can decide at any time to stop answering the questionnaire and end the survey prematurely.

In accordance with Art. 7 para. 3 GDPR, participants have the right to exercise their right of withdrawal without giving reasons and to amend or completely revoke the declaration of consent given with effect for the future by post using the contact details given under point I. or by e-mail to datenschutz(at)jku.at. In this way, participants can, for example, revoke their consent to receive newsletters or information material at any time. The withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent before its withdrawal.

2.2. The legal basis for the processing of personal data in accordance with points II.1.2. and II.1.3. is the legitimate interest of JKU pursuant to Art. 6 para. 1 letter f GDPR in the proper technical implementation and guarantee of the functionality of the online survey.

There is no legal obligation to provide the personal data, but if the data is not provided, the stated purpose cannot be achieved, in particular a technically flawless use of the online survey tool cannot be ensured or certain functions of the website cannot be (properly) accessed.

3. Recipients

3.1. Recipients of this personal data are the organisational units of JKU necessary for the corresponding processing and employees of the OIC - Open Innovation Centre GmbH as members of the Work Package 9 Board within EC2U.

3.2. In the context of technical support, hosting, maintenance and administration, any processors may also be data recipients if access to personal data by them cannot be excluded by technical and organisational measures.

3.3. Partner Universities within the EC2U network.

III. Details regarding the storage duration:

The storage resp. processing of personal data is carried out in accordance with the criteria defined for the storage period, such as topicality and relevance with regard to the purposes mentioned under point II.1 (documentation and communication style of JKU as well as technical necessity).

If consent to receive newsletters or information material is withdrawn in accordance with point II.2.1, the e-mail address will no longer be used for this purpose.

IV. Rights pursuant to Art. 15 to 21 GDPR:

1. Right to information
2. Right to rectification
3. Right to erasure
4. Right to restriction of the processing
5. Right to data portability
6. Right to object

V. Information regarding the Data Protection Authority and the right to lodge a complaint:

In addition, you can lodge a complaint regarding data processing that is inadmissible in your opinion at the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, tel.: + 43 1 52 152-0, email: dsb(at)dsb.gv.at.

Status: February 2025

[1] Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Individuals with regard to the Processing of Personal Data, on the Free Movement of such Data and Repealing Directive 95/46/EC (GDPR); Austrian Federal Act on the Protection of Individuals with regard to the Processing of Personal Data (DPA); Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the Protection of Individuals with regard to the Processing of Personal Data by Competent Authorities for the Purposes of the Prevention, Investigation, Detection or Prosecution of Crime or the Execution of Criminal Penalties, as well as on the Free Movement of such Data, and Repealing Council Framework Decision 2008/977/JHA (The Data Protection Directive for Justice and Home Affairs), implemented in Sections 36-61 of the DPA.

[2] Federal Act enacting a Telecommunications Act (Telecommunications Act – TKG 2021).