Privacy Policy – Global Innovation Summit Homepage

I. Name and Address of the Data Controller

Data Controller according to the data protection laws regarding the processing on this website is the

Austrian Research Promotion Agency (Österreichische Forschungsförderungsgesellschaft mbH)
1090 Vienna, Sensengasse 1
FN 252263a HG Wien

Tel:  +43 (0)5 7755 – 0
Fax: +43 (0)5 7755 – 97900
datenschutz@ffg.at

The data protection officer is Mag. Felix Koch, felix.koch@ffg.at.

II. General information on data processing

This privacy policy describes how we process your personal data when you use our services or visit our website.

Your personal data will be deleted or made unavailable by us once the purpose for storing and processing of such data no longer applies, provided that longer retention cannot be justified by statutory obligations or that no legal claims which may still be asserted against us and require retention exist.

Within the scope of electronic data processing, we use several service providers (data processors) who might obtain access to your personal data in the course of their work in case they require the data to render the respective service. These service providers were obligated by us to take appropriate technical and organisational measures to ensure the security of your data. These service providers are not permitted to pass on your data (except in cases stipulated by law).

III. Specific processing operations

1. General data processing on the website

1.1 Purpose of data processing

• Data is collected and exchanged during each visit to a website to enable you to access and use the website.
• Some data is proccessed to prevent attacks on our infrastructure.

1.2 Scope of the processing of personal data

The website automatically collects and stores specific data transmitted from your browser to our server.

This data might include:

• type and version of your internet browser
• operating system used
• the page visited
• the page visited before our website (referrer URL)
• time of the server inquiry
• client IP address

1.3 Legal basis for processing personal data

The legal basis for the aformentioned data proccessing is the legitimate interest pursuant to Article 6(1)(f) GDPR.

The legitimate interest is our interest to protect our website from attacks and misuse and to safeguard the security and stability of our systems, to enable you or services via the website and in order to measure the demand for web offerings on the website

1.4 Data retention period

The data will be stored in compliance with the statutory retention periods or as long as they are necessary for the relevant processing. Your data will be erased before such period expires if you exercise your right to object.

2. Contact – Service

2.1 Purpose of data processing

When you send us an e-mail this e-mail and your e-mail address will be used for correspondence purposes.

2.2 Scope of the processing of personal data

• E-mail address
• If you enter any personal data in your text message (e.g. name or phone number), these will also be included in the processing.

2.3 Legal basis for processing personal data

The legal basis for this processing is the controller’s legitimate interest according to Article 6 (1)(f) GDPR to provide interested parties with a simple and effective way of contacting us directly via E-Mail and giving you the optimal support.

Article 6(1)(b) GDPR might also the legal basis in cases where the rocessing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract.

2.4 Data retention period

Your personal data will be stored in compliance with the statutory retention periods or as long as they are necessary for the relevant processing. Your data will be erased before such period expires if you exercise your right to object.

2.5 Data recipients

Your message and your data will only be disclosed to the entitites involved in the Global Innovation Summit 2021, if necessary. The data will not be shared with other third parties without your consent or without a legal obligation.

3. Presentation of Speakers

3.1 Purpose of data processing

Data on the Speakers at the Global Innovation Summit 2021 are displayed on the Website for information and marketing purposes.

3.2 Scope of the processing of personal data

• Name
• Surename
• Organisation
• Function in the organisation
• Picture

3.3 Legal basis for processing personal data

We process personal data on the basis of the consent of the data subject within the meaning of Article 6 (1) (a) of the GDPR.

Where processing of personal data is required for the conclusion of contracts, this takes place on the basis of the fulfilment of the contract or the performance of pre-contractual measures within the meaning of Article 6 (1) (b) of the GDPR.

3.4 Data retention period

The website and the data it contains are expected to be online for one year. It is expected that the website will go offline in February 2022.

3.5 Data recipients

The data ist available for the public on the website.

4. Google Analytics

4.1 Purpose of data processing

We use Google Analytics to analyse website usage. The data obtained from this is used to optimise our website and advertising measures.

Google Analytics stores cookies in your web browser for a period of two years since your last visit. These cookies might contain a randomly generated user ID that can be used to recognise you on future visits to the website.

4.2 Scope of the processing of personal data

During your visit to the website, the following data, among others, might be processed:

• Pages viewed
• Your behaviour on the pages (for example, clicks, scrolling behaviour and dwell time)
• Your approximate location (country and city)
• Your IP address (in shortened form, so that no clear allocation is possible)
• Technical information such as browser, internet provider, terminal device and screen resolution
• Source of origin of your visit (i.e. via which website or advertising material you came to us)

4.3 Legal basis for processing personal data

Legal basis is your consent pursuant to Article 6 (1)(a) GDPR. The consent to set the necessary cookie is obtained via our cookie banner.

4.4 Data retention period

Your personal data will be stored in compliance with the statutory retention periods or as long as they are necessary for the relevant processing.

You can delete the Google Analytics Cookie at any time.

4.5 Data recipients

Google Analytics is a web analytics service operated and provided by Google, Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States).

This data is transferred to a Google server in the USA.

For further Information on the data proccesings oft he Google please refer to https://policies.google.com/privacy.

Please note that the USA does not have a data protection regime comparable to the GDPR, nor does the European Commission have an adequacy decision for the USA pursuant to Article 45 GDPR. Your rights under the GDPR may not be enforceable in the USA.

5. Google Maps

5.1 Purpose of data processing

This website uses Google Maps to display interactive maps and to create directions.

5.2 Scope of the processing of personal data

In order for Google Maps to fully offer its service, it must record and store data from you.

This usually includes the search terms entered, your IP address as well as othe metadata (eg. Used browser) and also the latitude and longitude coordinates. If you use the route planner function, the start address entered is also stored.

Since we have integrated Google Maps into our website, Google Maps might set at least one cookie (name: NID) in your browser with your consent. (This cookie stores data about your user behavior. Google uses this data primarily to optimize its own services and to provide individual, personalized advertising for you.)

5.3 Legal basis for processing personal data

Legal basis is your consent pursuant to Article 6 (1)(a) GDPR. The consent to set the necessary cookie is obtained via our cookie banner.

5.4 Data retention period

Your personal data will be stored in compliance with the statutory retention periods or as long as they are necessary for the relevant processing.

You can delete the Google Maps Cookie at any time.

5.5 Data recipients

Google Analytics is a web analytics service operated and provided by Google, Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States).

This data is transferred to a Google server in the USA.

For further Information on the data proccesings oft he Google please refer to https://policies.google.com/privacy.

Please note that the USA does not have a data protection regime comparable to the GDPR, nor does the European Commission have an adequacy decision for the USA pursuant to Article 45 GDPR. Your rights under the GDPR may not be enforceable in the USA.

6. Note on embed YouTube videos:

We use the YouTube.com platform to post our own videos and make them publicly available.

YouTube is the service of a third party not affiliated with us, namely YouTube LLC.

We use directly embed videos stored on YouTube on some of our web pages. With this integration, content from the YouTube website is displayed directly on the website via your web browser.

The YouTube videos are only called up by clicking on them separately. If you call up a (sub-)page of our website on which YouTube videos are embedded in this form, a connection to the YouTube servers is established and the content is displayed on the website by informing your browser. This connection is generally only triggered by explicit confirmation of the play button.

The integration of YouTube content only takes place in “extended data protection mode”. YouTube itself provides this mode and thus ensures that YouTube does not initially save any cookies on your device. However, when the relevant pages are called up, the IP address and other (technical) data are transmitted and thus in particular which of our Internet pages you have visited. However, this information cannot be assigned to you personally, unless you have logged in to YouTube or another Google service (e.g. Google+) before the call or are permanently logged in.

For more information on the purpose and scope of data collection and processing by YouTube, please see the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://policies.google.com/privacy.

Insofar as the FFG is responsible under data protection law for establishing the connection to YouTube (for example, for transmitting the technically required data), the legal basis is the legitimate interest of the responsible party pursuant to Art. 6 (1)(f) GDPR. The legitimate interest here is the interest of the controller to make certain content available to users via the YouTube platform.

IV. Rights of the data subject

1. Right to access

You have the right, vis-à-vis us, to request access to all data concerning you processed by us.

2. Right to rectification and right to restriction of processing

You may request the rectification of inaccurate data or have incomplete data completed.

3. Right to data portability

You may demand that we transmits to you – or if technically feasible to a third party indicated by you – a copy of your data in a structured, commonly used and machine-readable format. In addition, you have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where

1. the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and
2. the processing is carried out by automated means.

In exercising this right, you also have the right to have the relevant personal data transmitted directly from one controller to another, where technically feasible. Rights and freedoms of others shall not be adversely affected by the above.

4. Right to erasure

Under certain circumstances, you have the right to obtain erasure of your data, e.g. if your data is not processed in accordance with data protection requirements.

If you have asserted your right to rectification, erasure or restriction of processing vis-à-vis us, we are obligated to communicate such rectification or erasure of data or restriction of processing to each recipient to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort.

5. Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions.

In that case, the controller shall no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

6. Right to withdraw consent

You have the right to withdraw your declaration of consent at any time.

The withdrawal of consent shall not affect the lawfulness of any consent-based processing performed until the withdrawal.

7. Supervisory authority 

You have the right to lodge a complaint with the national supervisory authority in your place of residence if it is assumed that the processing of personal data is carried out unlawfully.

Each national supervisory authority shall be competent for the performance of the tasks assigned to and the exercise of the powers conferred on it in accordance with this Regulation on the territory of its own Member State.

Where processing is carried out by public authorities or private bodies acting on the basis of point (c) or (e) of Article 6 (1), the supervisory authority of the Member State concerned shall be competent.

If you have a complaint, please contact the competent supervisory authority.

The list of the national data protection authorities is available on the website: https://edpb.europa.eu/about-edpb/board/members_en

V. Processing of Photos and Videos

1. Purpose of data processing

The taking of photos and videos at the GIS 2021 event and the use of photos and videos provided to the organiser by the speakers, as well as publication of the photos on the website and social media channels and in print media for public relations and presentation of the activities of the organiser in order to increase the level of awareness of the organiser.

2. Scope of the processing of personal data

Photos and Videos of persons attending the GIS 2021 (eg. speakers).

3. Legal basis for processing personal data

We process personal data on the basis of the consent of the data subject within the meaning of Article 6 (1) (a) of the GDPR.

Where processing of personal data is required for the conclusion of contracts with the data subject, this takes place on the basis of the fulfilment of the contract or the performance of pre-contractual measures within the meaning of Article 6 (1) (b) of the GDPR.

In all other cases the legal basis is the legimate interest pursuant ot Article 6 (1)(f) GDPR. The legitimate interest is to carry out the actions described above to pursue the publicity and presentation of the activities of the organiser, in order to increase the level of awareness.

4. Data retention period

The image and video material will be deleted at the end of the 2nd calendar year after production or receipt.

In all other casas the data will be deleted by us as soon as the purpose of storage and processing no longer applies, provided that there is no legal obligation for longer storage. Your data will also be deleted as soon as you successfully object or revoke your consent.

5. Data Recipents

The data (pictures and videos) are made available to the public on the internet and published in social media channels. The data is not passed on to recipients who pursue their own purposes with this data. In the case of social media channels, however, it may be that the respective social media service receives exploitation rights to the published data.

VI. Contact

In connection with any of the above matters, in particular, with regard to exercising your rights as data subject, as well as in case you have any further questions, please contact the following e-mail address: datenschutz@ffg.at