Biobank Editor

Privacy Policy

This page is an English translation of the privacy policy of the Medical University of Innsbruck, available at https://www.i-med.ac.at/de/universitaet/datenschutzerklaerung/.

General

Data protection and information security are fundamental to a stable and successful relationship between the Medical University of Innsbruck and the users of its websites, and they are given high priority by the university. This statement describes how the Medical University of Innsbruck processes data in connection with this website.

The Medical University of Innsbruck complies with all applicable data protection regulations in their current version when handling personal data. In addition, within its own sphere of responsibility, the university has implemented the technical and organizational measures required to ensure appropriate data protection.

The Medical University of Innsbruck undertakes to comply with legal data protection requirements, but it is not responsible if third parties nevertheless succeed, despite all security measures, in unlawfully obtaining access to data and information.

In accordance with Article 32 GDPR, the Medical University of Innsbruck uses all necessary and proportionate technical and organizational measures to ensure an appropriate level of protection. These measures are reviewed regularly, updated, and adapted to the current state of the art.

Despite these measures, the Medical University of Innsbruck cannot guarantee that individual systems and services will always be available without limitation or interruption.

Purpose of Processing Personal Data

Your personal data is processed within the meaning of Article 6(1) GDPR only for the following purposes:

• To provide the website
• To respond to inquiries
• To compile usage statistics
• For contract processing

Your personal data is stored only for as long as necessary to achieve the respective purpose or as required by statutory retention periods.

Where your consent is required for the lawful processing of your data, we will obtain your explicit consent before processing.

Data Processed by the Medical University of Innsbruck

During your visit to this website, the Medical University of Innsbruck collects the following information:

• Browser type, version, and language setting
• Device model designation and a generic device identifier
• Operating system used
• The website from which the user visits the website of the Medical University of Innsbruck (referrer URL)
• The website visited by the user
• Date and time of access
• Anonymized IP address of the user's computer
• All information provided by filling out a contact form or registration on our website

This data is generally anonymized and evaluated for statistical purposes in order to optimize the services offered on the website of the Medical University of Innsbruck. In addition, this data is stored using the open source tool Matomo, which is operated by the Medical University of Innsbruck itself, unless there is a legal obligation preventing its deletion.

It may also be stored for a longer period if this is necessary to investigate detected attacks on the website.

Information provided to us by filling out a contact form or registration is deleted once the purpose has been fulfilled, unless legal obligations or legitimate interests require otherwise.

Cookies

So that you can use the Medical University of Innsbruck's web services without restriction, so-called cookies are used. Cookies are small files that enable recognition of the user and analysis of your use of our website. These files store a randomly generated unique identification number, as well as information about their origin and storage period.

Cookies cannot access, read, or alter any other data on your computer.

The cookies set do not pose any danger to the user's computer system because they do not cause damage and do not contain viruses or similar harmful components. Most cookies on this website are deleted automatically when your session ends. The Medical University of Innsbruck also uses persistent cookies in order to recognize you when you visit the website again.

You can delete these persistent cookies manually in your browser at any time.

The use of cookies can be prevented through corresponding browser settings. If your browser supports the "Do Not Track" function and you have activated it, no usage profile will be created for your visit. Please note that blocking or deleting cookies may impair your online experience and may prevent you from using this website in full.

Matomo

This website uses the open source web analytics service Matomo, which is operated by the Medical University of Innsbruck itself. Matomo uses cookies, which are text files stored on your computer and which enable analysis of your use of the website. The information generated by the cookie about your use of this website is stored on our server. The IP address is anonymized before storage.

The information generated by the cookie about your use of this website is not passed on to third parties. You can prevent the storage of cookies by adjusting your browser software accordingly; however, please note that in this case you may not be able to use all functions of this website to their full extent.

If you do not agree to the storage and use of your data, you can deactivate storage and use in your browser. In that case, an opt-out cookie will be stored in your browser that prevents Matomo from storing usage data. If you delete your cookies, the Matomo opt-out cookie will also be deleted. The opt-out must then be reactivated when you visit our site again.

Google Maps

We use the "Google Maps" component of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") on our pages. Each time the "Google Maps" component is called up, Google sets a cookie in order to process user settings and data when displaying the page into which the "Google Maps" component is integrated.

This cookie is generally not deleted when the browser is closed but instead expires after a certain period, unless you delete it manually beforehand. If you do not agree to this processing of your data, you can deactivate the "Google Maps" service and thereby prevent the transmission of data to Google. To do so, you must deactivate the JavaScript function in your browser.

Please note, however, that in this case you may not be able to use the "Google Maps" component, or may be able to use it only to a limited extent.

For the scope and purpose of this data collection, the further processing and use of the data by Google itself, and the use of Google Maps and the information obtained through Google Maps, please refer to Google's privacy notices and Google Maps terms of use at http://www.google.de/intl/de/policies/terms/regional.html and https://www.google.com/intl/de_de/help/terms_maps.html.

Two-Click Social Media Buttons

At the end of some detailed articles there is a two-stage social media plugin for Facebook, Twitter, and Google+. By default, these buttons are embedded in a deactivated state and do not establish contact with the servers of Facebook, Twitter, or Google+. Only when you activate them in the first step do the buttons become active and establish a connection to the respective servers. In the second step, you can submit your recommendation with another click.

If you are already logged in to the social network of your choice, this happens for Facebook and Google+ without any additional window. For Twitter, a popup window appears in which you can still edit the tweet text. All buttons can also be activated permanently. You can do this by ticking the relevant checkbox under the gear icon. The gear icon also allows you to change this again later.

By clicking one of these buttons, you as the user consent to transmitting data for this single page and only to the selected social network provider. When other pages are called up, the buttons appear deactivated again.

Information on Social Media Management with Swat.io

To manage our social media channels (Facebook, Twitter, Instagram, YouTube, Vimeo), we use the social media management tool of Swat.io GmbH, based in Vienna. Interactions with users on our social media channels are processed by Swat.io GmbH in compliance with the GDPR. More information about Swat.io GmbH and about data processing and privacy at Swat.io GmbH, including additional links, is available at https://swat.io/de/.

Information About Our Facebook Page

The Court of Justice of the European Union (CJEU), in its judgment of June 5, 2018, case C-210/16, held that the operator of a Facebook fan page shares responsibility with Facebook for the processing of visitors' personal data. The judgment is available at https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:62016CJ0210&from=DE.

Facebook fan pages are user accounts that private persons or companies can set up on Facebook. After registering with Facebook, the fan page provider can use the platform operated by Facebook to present itself to users of that social network and to persons visiting the fan page, and to contribute statements of all kinds to the media and opinion market.

Operators of fan pages can receive anonymized statistical data concerning the users of these pages by means of the Facebook Insight function, which Facebook provides free of charge as a non-optional part of the user relationship.

This data is collected using cookies containing a unique user code that remains active for two years and that Facebook stores on the hard drive of the fan page visitor's computer or another storage medium. The user code, which can be linked to the login data of users registered on Facebook, is collected and processed when fan pages are called up.

Meta's privacy provisions are available at https://www.facebook.com/privacy/center/. Information from Meta on page insights and joint controllership is available at https://www.facebook.com/legal/terms/page_controller_addendum.

As the page operator, we cannot rule out the transfer and further processing of users' personal data in third countries such as the USA, or the associated possible risks.

We operate our Facebook fan page at https://www.facebook.com/MedUniIBK in order to draw attention to the services of our university and to communicate with you as a user of this fan page and our website. As the operator of the Facebook page, we have no interest in collecting and further processing your individual personal data for analytics, marketing, or sales purposes.

The operation of our Facebook page, including the processing of users' personal data, is based on our legitimate interests in providing a modern and supportive information and interaction option for and with our users pursuant to Article 6(1)(f) GDPR.

Because only Meta has full access to user data, we recommend that you contact Meta directly if you wish to exercise your rights or submit access requests. If you need support in doing so or have other questions, please contact us.

Through Facebook settings, especially through so-called Facebook Insights, statistical data in different categories is available to us. These statistics are generated by Meta and made available to us as fan page operators. We have no influence over their generation or presentation. We cannot switch off this function or prevent the generation and processing of the data.

For a selectable period and for the categories fans, subscribers, reached persons, and interacting persons, Meta provides us with the following data in relation to our Facebook fan page: number of subscribers, number of new subscribers, names and profile information of subscribers, subscriber interactions with posts published by us, actions by subscribers on our Facebook page, mentions of our Facebook fan page in posts, comments, or recommendations by users and subscribers, popular interaction days and times, most popular posts, and distribution of subscribers by gender, age, country, and location.

Because the availability and presentation of data are constantly evolving, we refer you to Meta's privacy policy for further details.

We use this data to make our future Facebook posts and activities more attractive to users. For example, we analyze information about reach and interactions with our Facebook posts in order to continuously improve the editorial presentation of our content.

In accordance with the terms of use accepted by every user when creating a Facebook profile, we can identify group members and view their profiles as well as other information shared by members.

Information About Our X Page

X's privacy policy is available at https://x.com/de/privacy.

Please note that the tweets and comments published on the X page at https://twitter.com/imed_tweets by the Medical University of Innsbruck are published, without financial compensation, on the basis of our overriding legitimate interest pursuant to Article 6(1)(f) GDPR for the purposes of information, documentation, communication, and the reputation of the Medical University of Innsbruck.

If you have questions or concerns regarding the rights listed below, please contact us.

Information About Our Instagram Page

Instagram's privacy policy is available at https://help.instagram.com/519522125107875.

Please note that the images and/or videos, including comments, published by the Medical University of Innsbruck on Instagram at https://www.instagram.com/meduniibk/ are used, without financial compensation, on the basis of our overriding legitimate interest pursuant to Article 6(1)(f) GDPR for the purposes of information, documentation, communication, and the reputation of the Medical University of Innsbruck.

If you have questions or concerns regarding the rights listed below, please contact us.

Information About Our LinkedIn Page

LinkedIn's privacy policy is available at https://www.linkedin.com/legal/privacy-policy.

We operate our LinkedIn company page at https://www.linkedin.com/school/medizinische-universitaet-innsbruck/ in order to draw attention to the services of our university and to communicate with you as a user of this page and our website. As the operator of the LinkedIn company page, we have no interest in collecting and further processing your individual personal data for analytics, marketing, or sales purposes.

The operation of our LinkedIn company page, including the processing of users' personal data, is based on our legitimate interests in providing a modern and supportive information and interaction option for and with our users pursuant to Article 6(1)(f) GDPR.

The provider of this company page is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. If you click the LinkedIn share button (graphic in the footer), and you are logged in to your LinkedIn user account, you will be redirected in a separate browser window to your user account and can share the electronic publication stored on our website together with a comment.

LinkedIn thereby receives the information that you visited our website with your IP address. LinkedIn is then also able to associate your visit to our website with you and your user account. Please note that we have no knowledge of the content of the transmitted personal data or of its use by LinkedIn.

YouTube Videos

YouTube videos stored on https://www.youtube.com/user/MedUniIBK15010 are embedded on our website and can be played directly from our site. We use YouTube's "enhanced privacy mode," meaning that no data about you as a user is transferred to YouTube unless you play the videos.

Only when you play the videos are YouTube cookies stored on your device and data transmitted to the YouTube operator Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you play videos stored on YouTube, at least the following data is transmitted to Google: IP address and cookie ID, the specific address of the page accessed on our site, browser language setting, system date and time of access, and your browser identifier.

The data transfer takes place regardless of whether you are logged into a YouTube user account or whether you have no user account. If you are logged in, this data is assigned directly to your account. You can prevent this assignment by logging out before activating the start button. Google stores this data as usage profiles and uses it for advertising, market research, and/or demand-oriented design of its website.

You have the right to object to the creation of these usage profiles, but you must direct your objection to Google as the operator of YouTube. Further information on YouTube data protection is available from Google at http://www.google.at/intl/de/policies/privacy/. By playing the YouTube videos, you consent to data processing by Google.

Apart from statistical user analysis, the Medical University of Innsbruck does not carry out any further processing of the affected data.

Vimeo Videos

Training videos are embedded on our learning platform via the service Vimeo, Inc., 555 West 18th Street, New York, New York 10011. If you play stored videos, Vimeo, Inc. automatically collects certain types of data, regardless of whether you have a Vimeo account. This includes your IP address, technical information about your device, such as browser type, operating system, and basic device information, as well as the website you visited or your activities.

Vimeo, Inc. uses this data to operate and improve its services, for marketing and advertising purposes, for demand-oriented design of its website, for compliance with legal obligations, or for the exercise of rights. Vimeo, Inc. may track your activities using cookies and similar technologies.

By playing the videos, you consent to the data processing by Vimeo, Inc. Further information is available in Vimeo's privacy policy at https://vimeo.com/privacy.

Image and/or Video Material Including Audio Recordings at Events

At events such as admission procedures, academic ceremonies, open days, the Long Night of Research, 20th anniversary celebrations, and similar occasions, the Medical University of Innsbruck and, where applicable, accredited media representatives may take photos and videos of you. You are generally under no obligation to be photographed or recorded. If you do not agree to the recording or publication, please inform the photographer immediately or contact the event organization.

Images or recordings of you that are created may be published for purposes of information, documentation, communication, advertising, and the reputation of the Medical University of Innsbruck, without any financial compensation to you. This processing is necessary to protect the legitimate interests of the Medical University of Innsbruck pursuant to Article 6(1)(f) GDPR.

The processing serves exclusively the purposes stated above, using modern media and in compliance with appropriate technical and organizational security measures to protect the data.

Any image and/or video material including audio recordings created about you is stored only for as long as necessary for the purposes for which it is processed. It is then deleted unless statutory retention obligations apply or legitimate interests of the Medical University of Innsbruck justify further storage, for example to assert or defend legal claims.

In particular, the storage period depends on the following criteria:

• Type of depiction, including number of persons and surrounding context
• Context in which the recording was made, such as an event, lecture, or graduation
• Suitability for use on the homepage, in social networks, and on our YouTube channel
• Suitability for documenting the history of the Medical University of Innsbruck
• Suitability for use in anniversaries and commemorative publications

The image and/or video material including audio recordings is used exclusively for the purposes listed above and may be published on our homepage and in our social media channels. If necessary, the recordings are also transmitted to third parties for these purposes, for example media, agencies, or printing companies. Publication on the internet and in the media makes the data accessible to everyone.

Individuals have the right, on grounds relating to their particular situation, to object at any time to the processing of personal data concerning them that is based on Article 6(1)(f) GDPR.

Email Notifications About News

Some of our organizational units and project groups offer you the opportunity to be informed about news by email. To do so, you must register by email with the relevant organizational unit. In addition to your email address, we require your declaration that you consent to receiving the information by email. In order to provide you with targeted information, we also collect and process your voluntarily provided first and last name.

You can cancel the subscription at any time in writing by email to the respective organizational unit or project group. Your data related to that email mailing will then be deleted promptly.

Data Processing in the Application Process

We process your personal data, such as name, title, address, telephone number, date of birth, education, professional experience, and data and images contained in your cover letter, CV, certificates, or other submitted documents, in order to carry out the application process.

The data is processed on the legal basis of our overriding legitimate interest in conducting an efficient application process under Article 6(1)(f) GDPR, on the basis of the necessity to take pre-contractual measures under Article 6(1)(b) GDPR, and on the basis of your consent under Article 6(1)(a) GDPR.

As part of the application process, data is collected and processed that you either provide voluntarily or that we collect ourselves, for example through notes taken during the interview. You are not obliged to provide us with your personal data; however, without it we cannot carry out the application process with you. Your application documents are made accessible to the employees responsible for the application process and to the competent committees or bodies.

Your application documents are processed by us for as long as necessary to decide on your application. After an unsuccessful application process, your application data is stored for seven months, or for as long as necessary to assert, exercise, or defend legal claims.

After a successful application process, your application documents and thus your personal data are transferred and used to prepare the employment contract documents. In addition, there is the possibility of keeping the data on file for up to one year if you consent.

Contact Form

You can contact the Medical University of Innsbruck by email and/or via a contact form. In this case, the information you provide is stored for the purpose of processing your inquiry. Data is only passed on to third parties if this is necessary to process the inquiry.

Your Rights in Connection with Personal Data

You have the right to:

• Access, meaning whether and which personal data about you has been stored
• Rectification, completion, or deletion of personal data that is incorrect or processed unlawfully
• Restriction of processing and data portability
• And, in certain circumstances, the right to withdraw consent and to object

If you believe that the processing of your personal data violates data protection law or that your data protection rights have otherwise been infringed by us, please contact us so that we can address your concerns. You also have the right to lodge a complaint with the competent supervisory authority: Austrian Data Protection Authority, Barichgasse 40-42, A-1030 Vienna.

Changes to the Privacy Policy

We reserve the right to amend this privacy policy in order to adapt it to changed legal situations or to changes in the service or data processing. Users are therefore asked to review its content regularly.

Contact

Your trust is especially important to us. If you have any further questions about data protection in connection with the Medical University of Innsbruck, you are welcome to contact the following offices:

Please note that copyright, naming rights, trademark rights, and other rights of third parties must be respected when using this website. You undertake to refrain from any misuse of the entire content, especially images, videos, fonts, and trademarks.