USE OF THE WEBSITE

You can visit our website and use some of our internet services without providing any personal data. Each time you access a website, the web server only automatically saves access data in so-called server log files, which are automatically communicated by your browser, such as the name of the requested file, the last website visited, the date and time of access, the browser used, the amount of data transferred, the IP address, the requesting provider, etc. As part of processing on our behalf, a third-party provider provides us with the services for hosting and displaying the website. This service provider is located within a country of the European Union or the European Economic Area.

We use a content delivery network (“CDN”) in which the website is delivered via the web servers of a CDN provider who works for us as part of order processing. Access data is also collected accordingly on the provider’s web servers.

All access data is stored for a period of 7 days. This data is analysed exclusively to ensure the trouble-free operation of the website and to analyse errors. The use of a CDN provider, as well as the procedure described here, serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in
accordance with Art. 6 para. 1 lit. f of the GDPR in a correct presentation of our offer.

DATA COLLECTION AND USE FOR CONTRACT PROCESSING

We collect personal data when you provide it to us when contacting us (e.g. via contact form or email), when registering for a user account or when making a booking, for example when booking a course or exam. Which data is collected in detail and which information is mandatory and which is voluntary can be seen from the respective input forms.

In these cases, we collect and process the data you provide in order to fulfil the respective contract, for example to carry out a placement test for your language courses or a language course including a subsequent examination, as well as to process your enquiries in accordance with Art. 6 para. 1 lit. b GDPR. If you have expressly consented to the processing of special categories of data in this context in accordance with Art. 9 para. 2 lit. a GDPR, we will collect your health data (e.g. allergies) exclusively for the purpose communicated to you when you gave your consent.

After completion of the respective contract or deletion of your user account, your data will be blocked for further use and deleted after expiry of the retention periods under tax and commercial law. If retention obligations under tax or commercial law do not apply to individual data, these will be deleted immediately after the respective contract has been processed. Anything else only applies if you have expressly consented to further use of your data or if we reserve the right to use data beyond this, which is permitted by law and about which we inform you below.

Data transfer for contract processing

As part of the course and exam booking process, your personal data is processed in our central language course management system, to which other Austrian institutes generally have access. This is done to fulfil the contract in accordance with Art. 6 para. 1 lit. b GDPR and to protect our legitimate interests in valid information and correct data records for course bookings in accordance with Art. 6 para. 1 lit. f GDPR. Insofar as personal data is processed in countries outside the European Union or the European Economic Area, we have agreed the EU standard data protection clauses with the relevant Austrian institutes as a suitable guarantee within the meaning of Art. 46 para. 2 lit. c GDPR for the protection of data.

 In order to fulfil the contract when ordering learning materials, we pass on your data to the company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods or the provision of ordered services.

Depending on which payment service provider you select in the ordering process, we will pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to the payment service provider commissioned by us or to the selected payment service in order to process payments. In some cases, the selected payment service providers also collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider with your access data during the ordering process. In this respect, the privacy policy of the respective payment service provider applies. When you make bookings in our online shop, the payment data you enter is sent directly to the payment service provider. We do not have access to this data at any time.

Insofar as the payment service provider processes your personal data for the purpose of payment processing, e.g. when processing credit card payments, as the controller within the meaning of Art. 4 para. 7 GDPR, we will provide you with information that the payment service provider must provide in accordance with Art. 13, 14 GDPR.

As part of the execution of our contracts with you, for example for the provision of language courses, we sometimes pass on your data to service providers who process it on our behalf and within the framework of an existing contract for order processing between the Österreich Institut and the respective service provider. Such a service provider may, for example, be the provider of software that the Österreich Institut uses to process contracts.

REGISTRATION

If you wish to leave comments or contributions, exchange information with other users, take part in online courses, use learning platforms, purchase products from the online shop, borrow digital media, book courses or examinations or use our online services for reference libraries (researching or reserving books, renewing books, etc.), you will need to register and create an “Österreich Institut account”. To register, we process your login details (e-mail address and password), which you can use to access personalised offers from the Österreich Institut, your consent, your country and your preferred language.   

Personal data and content created by you

As part of the creation of the Österreich Institut account, only the data that we absolutely need for the implementation of our offers or any existing contractual relationship with you is provided as mandatory data.

 We collect and process the data provided by you as part of the contract processing of this user contract in accordance with Art. 6 para. 1 lit. b GDPR

• to check your application for the creation of an Österreich Institut account -account
• to provide the free services in which you participate (blogs, forums, comment function, self-presentation, communities, chats, etc.)
• to fulfil our obligations arising from contracts that exist with you (provision of online courses, the learning platform and digital media as part of the lending service, delivery of products from the web shop and implementation of courses and examinations, library loan agreements).

You can voluntarily provide further information about yourself and post content (so-called user-generated content), such as a photo of yourself, texts in the form of blog or forum posts, discussion contributions, etc. Which data is collected in detail and which information is mandatory and which is voluntary can be seen from the respective input forms.

Personalised marketing

For marketing purposes, we also use the data you provide in your user account to customise our website and internet offers to you personally, e.g. a personal homepage and a profile area in which we present suitable offers to you. This serves to safeguard our overriding legitimate interests in the optimal marketing of our offers in accordance with Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.    

Data publication

Some of the data you leave behind using your Österreich Institut account is visible to other users. This includes, for example, your name or user name, your contributions including date and time of creation, your memberships in groups, your learning lists, your files, your online status, your ratings, the duration of your membership, your gender. The publication of the data is required in accordance with Art. 6 para. 1 lit. b GDPR in order to be able to provide you with the contractually agreed functions of our platform.

✓ = visible

✕ = not visible

Data exchange between our language course management system and your Österreich Institut account

So that our course and examination management can view the information and results contained in your Österreich Institut account, a data exchange (so-called pairing) takes place between our course and examination management software and your Österreich Institut account. In accordance with Art. 6 para. 1 lit. b GDPR, this serves to safeguard our legitimate interests in linking the data records as part of a balancing of interests in order to provide you with standardised master data management and an overview of the courses and examinations you have booked on our website.

E-learning

Tools from Zoom Video Communications, Inc (55 Almaden Blvd Suite 600, San Jose, CA 95113, USA) and Moodle are used for the e-learning programme and online courses.

The use of Zoom is a prerequisite for participation in an online course. You can find the company’s privacy policy here: https://explore.zoom.us/de/privacy/

When you use the Moodle learning platform, we collect the personal data that your browser transmits to our server and that is technically necessary to display the Moodle learning platform to you and to ensure stability and security (legal basis is Art. 6 para. 1 lit. f GDPR):

• Date and time of the enquiry
• IP address
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (access address of the specific Moodle page)
• Access status / HTTP status code
• Scope of the transmitted data (in bytes)
• “Referer” address, if available
• Browser type
• Operating system and its interface software
• Language and version of the browser software

The storage of the aforementioned data in so-called server log files is carried out to ensure the functionality of the Moodle learning platform and also serves to optimise the Moodle learning platform and to ensure the security of our information technology systems. The server log files are deleted after 52 days. The collection of data for the provision of the Moodle learning platform and storage in server log files is absolutely necessary for the operation of the Moodle learning platform. There is no possibility for the user to object.

In addition to the aforementioned data, a session cookie is stored on your computer when you log in to the Moodle learning platform (legal basis for the use is Art. 6 para. 1 lit. f GDPR). A cookie is a text file that is created and stored on your hard drive when you visit the Moodle learning platform. When you navigate within the Moodle learning platform, the cookie received is sent back to the server by the website browser. This enables the server to recognise you and provide you with your personal Moodle content. Session cookies are automatically deleted after logging out of Moodle or after closing the browser.

Cookies cannot be used to start programmes or transfer viruses to a computer. In principle, you can restrict or deactivate the use of cookies on the Moodle learning platform via your browser settings. The help function of your browser will give you instructions on how to do this. Please note, however, that if you deactivate cookies, you may no longer be able to use the Moodle learning platform.

The Moodle learning platform uses JavaScript functions. Using the Moodle learning platform with JavaScript deactivated is not impossible, but is not supported and can provoke unexpected malfunctions or display errors.

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. TLS) via HTTPS.

Cancellation

The account created as part of a booking in the webshop will be permanently retained unless you request its deletion. The deletion of your Österreich Institut account and the data you have left there is possible at any time and can be done either by sending a message to the contact option described below.   

GOOGLE TOOLS

Google reCAPTCHA

We use the Google reCAPTCHA service in some forms on this website to protect against misuse of our web forms and spam. By checking manual input, this service prevents automated software (so-called bots) from carrying out abusive activities on the website. In accordance with Art. 6 para. 1 lit. f GDPR, this serves to safeguard our legitimate interests in protecting our website from misuse and in a trouble-free presentation of our online presence, which predominate in the context of a balancing of interests.

Google reCAPTCHA is a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Insofar as information is transferred to Google servers in the USA and stored there, we have agreed standard data protection clauses with Google LLC, which have been issued by the European Commission for this purpose, in order to ensure an adequate level of data protection when transferring your data to a third country. You can obtain a copy of this agreement from us on request. Please use the contact details below for this purpose.

Google reCAPTCHA uses a code embedded in the website, a so-called JavaScript, as part of the verification methods that enable your use of the website to be analysed, such as cookies. The automatically collected information about your use of this website, including your IP address, is usually transmitted to a Google server in the USA and stored there. In addition, other cookies stored in your browser by Google services are analysed by Google reCAPTCHA.

No personal data is read or saved from the input fields of the respective form. Further information on Google’s data protection policy can be found at www.google.com/policies/privacy/.

You can prevent Google from collecting the data generated by the JavaScript or cookie and relating to your use of the website (including your IP address) and from processing this data by Google by preventing the execution of JavaScript or the setting of cookies in your browser settings. Please note that this may restrict the functionality of our website for your use.

Google Maps

We use the integration of Google Maps on our website to visualise geographical information. The storage of Google Maps cookies and the use of this analysis tool takes place after a corresponding consent and the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In accordance with the Google Terms of Use (as of 31 March 2020), the Google Maps service is provided to you by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) if you have your habitual residence in the European Economic Area or Switzerland. If you have your habitual residence in another country, the Google Maps service will instead be provided to you by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

Further information on Google’s data protection policy and setting options can be found at https://policies.google.com/privacy.    

DATA COLLECTION AND USE FOR MARKETING PURPOSES

Postal advertising

We reserve the right to use your first name, surname and postal address for our own advertising purposes, e.g. to send you interesting offers and information about our products by post. This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in a promotional approach to our customers in accordance with Art. 6 para. 1 lit. f of the GDPR. You can object to the storage and use of your data for these purposes at any time by sending a message to office@oei.org.

 E-mail newsletter

The newsletter is sent via an external service provider “Mailchimp”. If you subscribe to one of our newsletters, we will use the data required for this or separately provided by you to regularly send you the e-mail newsletter to which you have subscribed. E-mail newsletters are sent on the basis of your separate express consent in accordance with Art. 6 para. 1 lit. a GDPR. For security reasons, we use the so-called double opt-in procedure: We will only send you a newsletter by email if you have previously confirmed your newsletter registration. For this purpose, we will send you an email to confirm your subscription via the link contained therein. This is to ensure that only you, as the owner of the e-mail address provided, can subscribe to the newsletter.

The following also applies to the e-mail newsletter dispatch using the dispatch service provider “Mailchimp”:
The newsletter is sent by means of the mailing service provider “Mailchimp”, a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the data protection provisions of the shipping service provider here: https://mailchimp.com/legal/privacy/. Der Shipping service provider is used on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f. GDPR and an order processing contract pursuant to Art. 28 para. 1 GDPR.
The mailing service provider may use the data of the recipients in pseudonymous form, i.e. without assignment to a user, to optimise or improve its own services, e.g. to technically optimise the mailing and presentation of the newsletter or for statistical purposes. However, the mailing service provider does not
use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.
The newsletters contain a so-called “web-beacon”, i.e. a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a mailing service provider, from their server. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval, is initially collected.
This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined with the help of the IP address) or the access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked.
For technical reasons, this information can be assigned
to individual newsletter recipients. However, it is neither our endeavour nor, if used, that of the mailing service provider to observe individual users. The evaluations serve us much more to recognise the reading habits of our users in general, i.e. anonymously, and to adapt our content to them or to send different content according to the interests of our users. A separate cancellation of the performance measurement is unfortunately not possible, in which case the entire newsletter subscription must be cancelled.
The newsletter and the performance measurement associated with it are sent on the basis of the consent of the recipient in accordance with Art. 6 para. 1 lit. a, Art. 7 GDPR or, if consent is not required, on the basis of our legitimate interests in direct marketing in accordance with Art. 6 para. 1 lt. f. GDPR.
The logging of the registration process is based on our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. We are interested in using a user-friendly and secure newsletter system that serves both our business interests and the expectations of users and also allows us to provide proof of consent.     

COOKIES

We use so-called cookies on various pages to make visiting our website attractive and to enable the use of certain functions. Cookies are used to make our website more user-friendly, effective and secure. These are small text files that are stored on your end device.

Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognise your browser on your next visit and, if necessary, enable you to log in automatically (persistent cookies). For example,
if you activate the option “Stay logged in” by ticking the box when you log in to www.oesterreichinstitut.com, a cookie will be set that will enable us to recognise you when you visit the www.oesterreichinstitut.com website within a certain period of time.

You can view the duration of the persistent cookies via your browser. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.

If you do not accept cookies, the functionality of our website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping basket function) are stored on the basis of our legitimate interests in the technically error-free and optimised provision of our services in accordance with Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time. You can prevent the collection of data stored on the basis of the cookie and related to your use of the website (including your IP address) by deactivating the respective categories and services in the privacy settings.

WEBANALYSIS

Google(Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland; “Google”.
The processing of the user’s personal data with the help of Google Analytics enables us to analyse the surfing behaviour of our users. By analysing the data obtained, we are able to compile information, usage levels and functionality about the website. This helps us to constantly improve our own website, its content and its user-friendliness.
The storage of Google Analytics cookies and the use of this analysis tool takes place with the corresponding consent and the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.

Google (Universal) Analytics uses methods that enable your use of the website to be analysed, such as cookies. The automatically collected information about your use of this website is usually transferred to a Google server in the USA and stored there. By activating IP anonymisation on this website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The anonymised IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. The data collected in this context will be deleted after the end of the purpose and use of Google Analytics by us.  

In connection with the use of Google (Universal) Analytics, we use the Google Tag Manager service on our website.

With the Google Tag Manager service, we manage so-called “tags” that we have integrated on our website. Tags are small code elements that can be used to measure traffic and visitor behaviour, record the impact of online advertising and social channels, use remarketing and targeting, and test and optimise websites. When tags are used, no data is stored on your end device.

We use these tags exclusively in the context of website analysis with Google (Universal) Analytics, i.e. to be able to analyse and optimise your use of our website even more precisely.

Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising programme of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
As part of Google AdWords, we use what is known as conversion tracking. When you click on an advert placed by Google, a cookie is set for conversion tracking. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page.
Each Google AdWords customer receives a different cookie. The cookies cannot be tracked via the websites of AdWords customers. The information collected
using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their advert and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google Conversion Tracking cookie via your Internet browser under user settings. You will then not be included in the conversion tracking statistics.
The storage of “conversion cookies” and the use of this tracking tool are based on Art. 6 para. 1 lit. a GDPR, provided that a corresponding consent has been given; the consent can be revoked at any time.

Google Analytics Remarketing

This website uses the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. mobile phone) can also be displayed on another of your end devices (e.g. tablet or PC).
If you have given your consent, Google will link your web and app browsing history to your Google account for this purpose. In this way, the same personalised advertising messages can be displayed on every device on which you sign in with your Google account. To support this function, Google Analytics collects Google-authenticated user IDs that are temporarily linked to our Google Analytics data in order to define and create target groups for cross-device advertising.
The data collected is summarised in your Google account exclusively on the basis of your consent, which you can give or revoke at Google (Art. 6 para. 1 lit. a GDPR). For data collection processes that are not merged into your Google account (e.g. because you do not have a Google account or have objected to the merging), the collection and processing of the data is based on your consent to the storage of cookies on our website (Art. 6 para. 1 lit. a GDPR); the consent can be revoked at any time.

Microsoft Clarity

We partner with Microsoft Clarity to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.
https://privacy.microsoft.com/en-us/privacystatement

SOCIAL NETWORKS

Use of social plugins and widgets from Facebook, X, Instagram and Contacts using the Shariff solution

Social buttons and widgets from social networks are used on our website.

In order to increase the protection of your data when you visit our website, these buttons and widgets are not integrated into the page without restriction, but only using an HTML link. This integration ensures that no connection is established with the servers of the provider of the respective social network when a page of our website containing such buttons is accessed.

If you click on one of the buttons, a new window of your browser opens and calls up the page of the respective service provider, where you can (if necessary after entering your login data) e.g. press the Like or Share button.

The purpose and scope of the data collection and the further processing and use of the data by the providers on their pages as well as a contact option and your rights and setting options in this regard to protect your privacy can be found in the providers’ data protection notices

https://www.facebook.com/policy.php
https://help.instagram.com/155833707900388
https://x.com/privacy
https://help.instagram.com/155833707900388
https://vk.com/privacy/eu

Embedding and displaying social media content such as X, Instagram, Facebook and others

Content (posts, comments and/or channels) from X, Instagram and Facebook may be displayed on our website, in particular in the context of articles from the Austrian Institute, using social plugins.

In addition, content from other social networks (e.g. Spotify and Soundcloud) can be displayed using social plugins. A direct connection to the servers of the respective network can be established via the social plugins, which results in the transmission of data to the provider. This may include the following data in particular:

• Visited website
• Browser information
• Information on the operating system
• IP address

The use of the content takes place after a corresponding consent and exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.   

YouTube and Vimeo video plugins

Third-party content is integrated on this website via YouTube and Vimeo for the purpose of making our content interactive.

YouTube is operated by Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (“Google”).

Vimeo is operated by Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA.

In order to increase the protection of your data when you visit our website, the plugins are integrated into the page in such a way that they can only be activated with your consent. This integration ensures that no connection is established with the servers of the respective social network when a page of our website containing such plugins is accessed. Only when you activate the plugins does your browser establish a direct connection to the servers of the respective social network.

The content of the respective plugin is then transmitted directly to your browser by the corresponding provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the corresponding provider or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider (possibly in the USA) and stored there.

If you interact with the plugins, for example by clicking the “Like” button, the corresponding information is also transmitted directly to a server of the provider and stored there.

The extended data protection setting is activated for YouTube videos that are integrated on our website. This means that no information from website visitors is collected and stored by YouTube unless they play the video.

The Google Analytics tracking tool is automatically integrated into videos from Vimeo that are embedded on our site. We have no influence on the analysis results collected via this tool and cannot view them. In addition, web beacons are set for website visitors via the embedding of Vimeo videos when these are activated. The use is made after a corresponding consent and exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time. The purpose and scope of the data collection and the further processing and use of the data by the providers as well as your rights in this regard and setting options to protect your privacy can be found in the providers’ data protection notices:

YouTube / Google: https://www.google.de/intl/de/policies/privacy/
Vimeo: https://vimeo.com/privacy

Our online presence in the social media

Our presence on social networks and platforms serves to improve active communication with our customers and interested parties. We provide information about our products there.

When you visit our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. This data is used to create so-called user profiles using pseudonyms. These can be used, for example, to place adverts within and outside the platforms that presumably correspond to your interests. Cookies are usually placed on your device for this purpose. Visitor behaviour and user interests are stored in these cookies. The use is made after a corresponding consent and exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.

If the aforementioned social media platforms are headquartered in the USA, the following applies: Data processing is carried out on the basis of the standard contractual clauses.
Facebook: https://www.facebook.com/about/privacy/
Facebook: https://www.facebook.com/settings?tab=ads

Social media monitoring

The Austrian Institute evaluates the posts published on social media services outside www.oesterreichinstitut.com and the social media performance data for the purpose of improving the quality and further development of the content on offer, optimising marketing activities and identifying potential risks (e.g. political crises or communication crises affecting the Austrian Institute or the effects of natural events). The social media listening and analytics tool Talkwalker S.à r.l., 16, Avenue Monterey L-2163 Luxembourg is used for this purpose.

The actions you perform in the social media services and the information you provide via your corresponding profiles, including forums, blogs and online news sites, are recorded and analysed. Only publicly accessible information is processed, which may also include individual quotes or personal data such as your user name. The evaluation serves to safeguard our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, which predominate in the context of a balancing of interests, in the optimisation of our offers as well as information and early indications of possible political or nature-related risks.
The personal data is mainly processed in aggregated form and to pursue the above-mentioned purposes. Personal data of individual data subjects are not processed intentionally, are largely anonymised in the course of processing and the data are of course not used to create individual user profiles. However, it is possible that individual quotations are recorded and used internally to describe a specific marketing activity of the Österreich Institut. 

DISCLOSURE OF DATA TO THIRD PARTIES

Data transfer to Österreich Institutes

Once your Österreich Institut account has been set up, administrators of the responsible Österreich Institut abroad will be given access to the data stored in your account. The data processing that takes place in this context serves the administrative processing of user data, e.g. the correction/blocking/deletion or assignment of roles and authorisations within the system. The legal basis is the fulfilment of the contract pursuant to Art. 6 para. 1 lit. b GDPR. In addition, this serves to safeguard our legitimate interests in valid information and correct data records in our system in accordance with Art. 6 para. 1 lit. f GDPR. On the other hand, user data (in anonymised form) can be used to improve our website. In accordance with Art. 6 para. 1 lit. f GDPR, this serves to protect our legitimate interests in optimising our offer, which outweigh our interests.

If personal data is transferred to an Austrian institution in a third country and there is no adequacy decision by the European Commission pursuant to Art. 45 para. 1 GDPR, the data transfer is carried out on the basis of standard data protection clauses issued by the European Commission as appropriate safeguards pursuant to Art. 46 para. 2 lit. c GDPR. Copies of the EU standard data protection clauses can be found on the European Commission’s website at https://commission.europa.eu/law/law-topic/data-protection_de

In the event that you are excluded from an examination of the Österreich Institut for one of the reasons specified in the clause and the Austrian Institute subsequently imposes a block on you from taking examinations within the framework of the examination portfolio of the Austrian Institute worldwide, your data will be passed on to examination centres of the Austrian Language Diploma (ÖSD) worldwide for the purpose of enforcing this measure (checking compliance with an imposed examination block) and processed there for this purpose. This is done on the basis of the processing of the joint contract for the provision of an examination in accordance with Art. 6 para. 1 lit. b GDPR. Insofar as personal data is processed in countries outside the European Union or the European Economic Area in this regard, this is also based on the necessity of the transfer for the fulfilment of this contract.

Data transfer to the ÖSD

For the purpose of checking authenticity and issuing replacement certificates, data relating to the examinations you have taken will be stored and used in the central examination archive (for a maximum of 5 years). This is done on the basis of contract fulfilment in accordance with Art. 6 para. 1 lit. b GDPR.

DATA SECURITY

We use technical and organisational measures to secure our website and other systems against loss, destruction, access, modification or dissemination of your data by unauthorised persons, such as SSL encryption when creating an Österreich Institut account or logging in later.

YOUR RIGHTS AND HOW TO CONTACT US

As the data subject, you have the following rights:

• in accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
• in accordance with Art. 16 GDPR, the right to demand the immediate correction of incorrect or incomplete personal data stored by us;
• in accordance with Art. 17 GDPR, the right to demand the deletion of your personal data stored by us, unless further processing is necessary:
  • to exercise the right to freedom of expression and information;
  • to fulfil a legal obligation;
  • for reasons of public interest or
  • for the assertion, exercise or defence of legal claims 

• in accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your personal data, insofar as
  • the accuracy of the data is disputed by you;
  • the processing is unlawful, but you object to its erasure;
  • we no longer need the data, but you need it for the establishment, exercise or defence of legal claims, or
  • you have objected to the processing pursuant to Art. 21 GDPR;

• in accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller;
• in accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

If you have any questions regarding the collection, processing or use of your personal data, information, correction, restriction of processing or deletion of data, as well as revocation of any consent given or objection to a specific use of data and the right to data portability, please contact:

Österreich Institut GmbH
Garnisongasse 3/9
1090 Vienna
Austria
office@oei.org

RIGHT OF OBJECTION

Insofar as we process personal data as explained above in order to safeguard our legitimate interests, which are overriding in the context of a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you only have the right to object if there are grounds relating to your particular situation.

After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims

This does not apply if the processing is for direct marketing purposes. In this case, we will no longer process your personal data for this purpose.