Purpose of data processing

Personal data is processed for the purpose of organising, conducting and securing infrastructure tours at ASC, including visitor identification, physical and information security, audit evidence, and incident investigation where applicable.

The following data is processed:

• Personal and contact details (first name, last name, email address)
• Professional information (affiliation, country, industry, scientific domain)
• Participation details (mode of attendance, reason for participation)
• Mobile-phone number, where hands-on lab access requiring two-factor authentication is selected
• Photographs or videos of the tour group, where taken and published on social media

Thedata is collected directly from you.

Legal basis of the data processing

This use of personal data is based on Article 6 par 1 (a) OR (e) GDPR 'consent' OR 'performance of a task in the public interest' in conjunction with § 3 Austrian Universities Act 2002 and regarding photos / videos and information about infrastructure tours on the basis of Article 6 par 1 (a) GDPR 'consent'.

Categories of recipients of personal data

No data will be transferred to third parties, except that photographs or videos may be published on ASC/TU Wien's website or social media channels where separate consent has been given.

Duration of data storage

Registration and attendance data is retained for 12 months. Photographs or videos published for institutional purposes may be retained longer, in line with TU Wien's standard retention practice for published media.

Your rights in connection with personal data

As the data subject affected by the processing of these data, you have the following rights vis-à-vis TUWien:

• the right to information;
• the right to rectification;
• the right to erasure;
• the right to restriction of processing of your data;
• the right to data portability;
• the right to object

Right to complain

If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been violated in any way, you may lodge a complaint with the Austrian data protection authority (https://www.dsb.gv.at/).