Statement by the Universität Mozarteum Salzburg on Data Protection
| § 1 | Information about the ascertainment of personal data | |||||||
| We inform you below about the ascertainment of personal data when using the homepage of the Universität Mozarteum Salzburg. Personal data are all data that clearly identify a natural person or make an inference, e.g. name, address, email address, usage behaviour | ||||||||
| § 2 | Person responsible according to Article 4, line 7 of the GDPR and contact details of the Data Protection Commissioner | |||||||
|
||||||||
| § 3 | Ascertainment of personal data when visiting our homepage | |||||||
If you use our homepage merely to gain information, i.e. if you do not register or transfer information to us elsewhere, we ascertain only the personal data which your browser transfers to our server. If you want to see our homepage, on the basis of Article 6, para.1, section 1, f, of the GDPR, we ascertain the following data which are technically necessary for us so that we can show you our homepage and guarantee stability and security:
|
||||||||
| § 4 | Ascertainment of personal data on making contact | |||||||
| (1) | When you make contact with the Universität Mozarteum Salzburg via email or via a contact form, the data you provide us with (in particular your email address, your name and possibly your telephone number) are stored by us so that we can answer your questions. If you make contact by means of a form or email in the context of a task of the university, the legal basis lies according to the relevant matter in Article 6, para.1, c or e of the GDPR. If contact is made in the context of concluding a contract, the legal basis lies in Article 6, paragraph 1, section 1, b, of the GDPR. In other cases the processing is based during the course of making contact on your permission according to Article, 6, para. 1, a, of the GDPR. | |||||||
| (2) | The data ascertained in this context are erased by us when storage is no longer necessary, unless legal storage obligations contravene erasure. | |||||||
| § 5 | Newsletter | |||||||
| (1) | The Universität Mozarteum Salzburg offers various newsletters which inform you in particular about current performances or newsworthy items concerning the activities of the university. | |||||||
| (2) | If you would like to receive the newsletter, we require from you a valid email address as well as information which allows us to check that you are the holder of the email address stated, or that its owner agrees to receiving the newsletter. Other personal data are not ascertained. These data are used explicitly for sending the newsletter and are not forwarded to third parties. In this respect your permission serves according to Article 6, para. 1, a, of the GDPR as the legal basis. | |||||||
| (3) | You are free to revoke at any time your consent to the storage of the data, the e-mail address as well as its usage for mailing the newsletter. Revocation can be made via a link in the newsletters themselves or via an email sent to the contact addresses stated above. | |||||||
| § 6 | Online presence in social networks and on platforms | |||||||
| University Mozarteum Salzburg has online presences in social networks and on platforms in order to communicate with the users and interested parties represented there and to inform them about the tasks and activities of the University (Art. 6 para. 1 lit e of the GDPR in conjunction with § 3 Z 11 of the University Act – (UG)). Please note that if you decide to use the respective service by accessing it, the terms of use and privacy policy of the respective provider apply. For information on the integration of services and third-party content on the University's website, please refer to §§ 7-8 of this privacy policy. |
||||||||
| § 7 | Integration of third-party services and content | |||||||
| Social media plug-ins - online presences | ||||||||
| (1) | No social media plug-ins are used on the website of University Mozarteum Salzburg. Only image links in the header to various social media platforms (in particular Facebook, Instagram, and Twitter) are used without any plug-in functionality. If the icon button of a social media platform (of a service provider) is clicked, the requested page opens in a new window and a data exchange with the respective social media service takes place. The legal basis for the transmission of your personal data in connection with accessing the respective service provider is your consent (Art. 6 para. 1 lit. a of the GDPR). | |||||||
| (2) | University Mozarteum Salzburg has no influence on the type and scope of the transmitted/stored data and therefore assumes no liability. The data protection provisions of the respective service provider apply. | |||||||
| (3) | Please note that if you choose to use the service providers mentioned in this paragraph, personal data collected through cookies by the service providers mentioned here may also be transferred to third countries that do not have a level of data protection adequate to European data protection law. For more information on the data protection of the social media platform used in each case, please refer to the privacy policy of the selected service. See also: |
|||||||
| Facebook Ltd. Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland Privacy policy: https://de-de.facebook.com/policy.php/ |
||||||||
| Instagram (Facebook Ltd.) Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland Privacy policy: https://help.instagram.com/519522125107875 |
||||||||
| Twitter Inc. 1355 Market Street, Suite 900, San Francisco, CA 94103, USA Privacy policy: https://twitter.com/de/privacy |
||||||||
| Youtube (Google LLC) 1600 Amphitheatre Parkway, Mountain View, California 94103, USA Privacy policy: https://policies.google.com/privacy/partners |
||||||||
| Vimeo.com, Inc. 555 West 18th Street, New York, New York 10011 Privacy policy: https://vimeo.com/privacy |
||||||||
| Livestream (Vimeo.com Inc.) 555 West 18th Street, New York, New York 10011 Privacy policy: https://livestream.com/terms/privacy |
||||||||
| Video embedding | ||||||||
| (4) | University Mozarteum Salzburg has integrated its own and third-party videos into its online offering, which are stored with the respective service provider and can be played directly from our website. These are the following providers: | |||||||
| Youtube (Google LLC) 1600 Amphitheatre Parkway, Mountain View, California 94103, USA Privacy policy: https://policies.google.com/privacy/partners |
||||||||
| Vimeo.com, Inc. 555 West 18th Street, New York, New York 10011 Privacy policy: https://vimeo.com/privacy |
||||||||
| Livestream (Vimeo.com Inc.) 555 West 18th Street, New York, New York 10011 Privacy policy: https://livestream.com/terms/privacy |
||||||||
| When accessing our website, no user data is transmitted to the respective service provider. Only the message “This video is not being displayed due to your individual cookie settings” appears. Only when you have actively decided to use all or individual video platforms through individual selection in your cookie settings will the respective video be loaded and played. The legal basis for the transmission of your personal data in connection with the playing of the videos with the respective service provider is therefore your consent (Art. 6 para. 1 lit. a of the GDPR). For more detailed information, in particular on your options for revocation, see § 8 para. 3. |
||||||||
| § 8 | Cookies | |||||||
| (1) | What are cookies? | |||||||
| Cookies are small text files that are stored on your computer or smartphone in such a way that they can be assigned to the browser you are using. Through this process, certain information is transmitted to the entity that sets the cookie. Please refer to the following paragraphs to find out which cookies are used on the website of Mozarteum University Salzburg. | ||||||||
| (2) | Functional cookies (required cookies) | |||||||
| The cookies listed in this paragraph are necessary for the functionality of the website as well as the applications for various competitions or courses (in particular the International Summer Academy of University Mozarteum Salzburg, etc.). | ||||||||
| University Mozarteum Salzburg uses these cookies to provide you with the full functionality of the website (Art. 6 para. 1 lit f of the GDPR). The consent of the users is not required. | ||||||||
| Usage on the website: When you use our website we use the following cookies:
|
||||||||
Usage in applications (e.g. registration tools for competitions)
|
||||||||
| (3) | Third-party cookies | |||||||
| University Mozarteum Salzburg has integrated its own and third-party videos into its online offering, which are stored with the respective service provider (for a list, see § 7 para. 4) and can be played directly from our website. Furthermore, the University uses Google CSE Search (Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94103, USA: https://policies.google.com/privacy) to enable keyword-based searches on the website. These are offers from third-party providers. The University therefore has no influence on the type and scope of the transmitted and/or stored data and therefore assumes no liability. |
||||||||
| When accessing the website of University Mozarteum Salzburg, no personal data of the users is transmitted to the respective service provider. This is only the case if you have actively opted to use all or individual services by making your individual selection in the cookie settings (Art. 6 para. 1 lit. a of the GDPR). Changing the selection is possible at any time, see: footer of the website “Cookie settings”. Please note, however, that the legality of the data processing operations carried out until the revocation remains unaffected by the revocation. |
||||||||
| Furthermore, you can delete already stored cookies at any time via the settings of your web browser. In addition, cookies can be generally deactivated via the respective browser settings, although in some cases this may restrict the use of the University Mozarteum Salzburg website. For more information, please refer to the browser settings of your provider. | ||||||||
| Please note that if you decide to use the service providers mentioned under § 7 para. 4 and Google CSE Search, personal data collected by these third-party providers through cookies may also be transferred to third countries that do not have a level of data protection adequate to European data protection law. The data protection provisions of the respective service provider apply. | ||||||||
| § 9 | Learning platform (blabo) | |||||||
| (1) | The blabo platform is used by University Mozarteum Salzburg to support the teaching activities at the University through e-learning offerings (Art 6 para. 1 lit e of the GDPR in conjunction with §§ 1-3 of the University Act (UG)). The following categories of data are processed in this context:
|
|||||||
| (2) | The storage period is 3 years from the last activity of the user. Personal data in the context of uploaded teaching content will be stored for a maximum of 5 semesters. | |||||||
| (3) | The disclosure of your data is mandatory for the fulfillment of the above purposes. Without disclosure, the above-mentioned service cannot be used by the users. | |||||||
| (4) | Generally, the processing of the data listed above is carried out exclusively by employees of University Mozarteum Salzburg. If necessary, data will - depending on the respective context – also be passed on to third parties (e.g. technical support by IT companies) based on your consent (Art. 6 para. 1 lit. a of the GDPR), the fulfillment of a task that is in the public interest (Art. 6 para. 1 lit. e of the GDPR in conjunction with §§ 1-3 of the University Act (UG)), for the purpose of fulfilling a contract (Art. 6 para. 1 lit. b of the GDPR), or for legitimate interest (Art. 6 para. 1 lit. f of the GDPR). | |||||||
| § 10 | University library | |||||||
| (1) | University Mozarteum Salzburg processes the following personal data in order to provide a loan authorization or access to electronic resources: [standard contact data (title/gender, first and last name, address, telephone number, e-mail), lending data, payment and reminder data in case of exceeding the lending period, etc.] |
|||||||
| (2) | The legal basis for data processing is – depending on the facts of the case – the implementation of a pre-contractual measure or the fulfillment of a contract (Art. 6 para. 1 lit b of the GDPR), the fulfillment of a task that is in the public interest (Art. 6 para. 1 lit e of the GDPR in conjunction with §§ 1-3 of the University Act (UG)), the user regulations, and the fee regulations of University Mozarteum Salzburg. | |||||||
| (3) | The disclosure of your data is voluntary, but it is mandatory for the fulfillment of the above purposes. Without disclosure, the above-mentioned services cannot be provided. | |||||||
| (4) | Your personal data will be stored until two years after the last activity, while your payment-related data will be stored until 7 years after the last relevant fee transaction. | |||||||
| (5) | Data processing is carried out by employees of the University Library Department, whereby access only takes place to the extent that is specifically required for the respective task fulfillment. Within the framework of the library management system, your data will be transferred to Österreichische Bibliothekenverbund und Service GmbH (OBVSG). Any further transfer to third parties will only take place if this is necessary for the purpose of processing the contract or is in the public interest. | |||||||
| § 11 | Picture, sound and video recordings | |||||||
| (1) | The Universität Mozarteum Salzburg produces and publishes picture, sound and video recordings relevant to the individual made in the context of university performances and projects so as to document the activities of the Universität Mozarteum Salzburg and in particular of its students and teachers, and to present these to the public. | |||||||
| (2) | The processing of picture, sound and video recordings is based, according to the relevant matter, on the approval of each person illustrated / recorded according to Article 6, para.1, a, of the GDPR, or on public interest according to Article 6, para.1, e, of the GDPR in connection with §§ 1,2,3 Z11 University Law. If the Universität Mozarteum Salzburg is not active in the fulfilment of its public and legal obligations, the processing can be founded also on the justified interest of those responsible according to Article 6, para. 1, f, of the GDPR. Moreover, according to the relevant presentation of the matter in question, the processing of pictorial, sound and video recordings can be based on a contract between the persons concerned (in particular in their role as artists) and the university (Article 6, para. 1, b, GDPR). | |||||||
| (3) | The finished picture, sound and video material is stored by the Universität Mozarteum Salzburg only as long as is necessary for the processing purposes according to § 8, para. 1. The storage duration is thereby determined in particular according to the following criteria:
|
|||||||
| § 12 | Covid 19 – Collecting Data for Contact Tracing | |||||||
| (1) | University Mozarteum Salzburg collects data for contact tracing in order to enable the tracing of infection chains in the event of suspicion or infection and thus to contribute to the containment of the spread of Covid-19. This is implemented – adapted to the current infection situation and the respective facts – in particular through an electronic room booking system, through check-in via QR code when entering university buildings or through (access) lists (at the entrances to buildings/rooms/venues), through personally kept contact diaries and, in the case of infection or suspected cases, through an (online) survey sheet. | |||||||
| (2) | The following categories of data are collected, depending on the current infection situation and the respective circumstances: contact data of visitors to events, contact data of students/staff, location and duration of time spent in University buildings, seat number. | |||||||
| (3) | The following categories of data are collected during QR code check-in when entering a university building: Name, email address, time stamp | |||||||
| (4) | The following categories of data are collected in cases of infection or suspicion through an (online) data collection sheet: group of persons (student/employee), organisational unit affected, time of notification, name and contact details of the person affected, onset of illness, time of onset of symptoms, existence of a notice from the health department, contact with the healthcare hotline 1450, contact persons before onset of symptoms. | |||||||
| (5) | The data collection is carried out with regard to the employees of the university on the basis of the University’s duty of care according to Art. 9 para. 2 lit b of the GDPR in conjunction with § 1157 of the ABGB (General Civil Code) as well as the measures for the prevention and containment of COVID-19 issued within the framework of the Rectorate’s authority to issue guidelines in conjunction with the exercise of house rules (House rules MBl of 12.10.2021, 2nd edition). | |||||||
| (6) | Furthermore, the collection of data relating to students and staff is carried out for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit I of the GDPR in conjunction with the measures for the prevention and containment of COVID-19 issued within the framework of the Rectorate’s authority to issue directives in conjunction with the exercise of house rules (House rules MBl of 12.10.2021, 2nd edition). | |||||||
| (7) | Disclosure to the district administrative authority may be necessary for reasons of public interest in the area of public health, such as protection against serious cross-border health threats (Art. 9 lit. I of the GDPR in conjunction with § 10 para. 2 of the Federal Act on Data Protection (DSG), §§ 3 para. 1 Z 8, 5c para. 1 Z 8 and the Epidemics Act of 1950). | |||||||
| (8) | In addition, at the request of the district administrative authorities, the University as an employer may be obliged to provide information on suspected cases or cases of infection pursuant to Art. 9 para. 2 lit. I of the GDPR in conjunction with Art. 5 para. 3 of the Epidemics Act of 1950. | |||||||
| (9) | Your above-mentioned data will be processed within the University for a specific purpose. In the course of a specific case of suspicion or infection, however, it is necessary to pass on the data to the district administrative authority. | |||||||
| (10) | Your personal data will be stored at the University for 28 days, unless a longer or shorter storage period is required for the fulfilment of legal and/or regulatory requirements and the University’s security concept. | |||||||
| § 13 | Video Conferencing/Distance Learning | |||||||
| (1) | To enable virtual teaching and learning as well as electronic meetings and teamwork, the Universität Mozarteum Salzburg uses the Zoom video conferencing system. In this way, the university can fulfil its tasks efficiently and independently of location (“home office”), especially in the development and promotion of the arts as well as the teaching of the arts and related administrative processes. | |||||||
| (2) | In the context of the Covid-19 epidemic, the following constitute the lawful grounds for data processing:
|
|||||||
| (3) | Further legal bases for data processing are, in particular, the implementation of the guiding principles and tasks of the University in the public interest, Art. 6 para. 1 lit e of the GDPR in conjunction with §§ 2 Z 8, Z 13, Z 14 of the University Law as well as § 3 Z 6, Z 7 of the University Law, § 13 para. 2 lit f of the University Law, § 59 para. 1 Z 12 of the University Law and § 76 para. 3 of the University Law. | |||||||
| (4) | When using Zoom, it cannot be completely ruled out that your data (see Privacy Data Sheet/Privacy Information of the provider) will be transferred to recipients in the United States of America, whereby these recipients are contractually obliged to comply with data protection regulations, to take appropriate technical and organisational protection measures and possibly to take “supplementary measures”. | |||||||
| (5) | For more detailed information on the collection and processing of your data when using the video conferencing system, e.g. on the categories of data processed, please refer to the provider’s Terms of Use/Privacy Data Sheets. See also: Zoom Video Communications Inc.: https://zoom.us/privacy |
|||||||
| § 14 | Rights of persons concerned | |||||||
| (1) | On the basis of the GDPR, each person has the right of information according to article 15 of the GDPR, the right to rectification according to article 16 of the GDPR, the right to erasure according to article 17 of the GDPR, the right to the restriction of processing according to article 18 of the GDPR, as well as the right to data transferability according to article 20 of the GDPR and the right to object according to article 21 of the GDPR. Where applicable these rights of persons concerned are to be asserted towards the Universität Mozarteum Salzburg (responsible institution according to article 4, line 7 of the GDPR, Mirabellplatz 1, 5020 Salzburg, Austria, datenschutz@moz.ac.at. | |||||||
| (2) | Each person has the right to make a complaint to the Austrian Data Protection Authority, if the person takes the view that the processing of the personal data contravenes the GDPR or the Data Protection Law. | |||||||
| § 15 | Abrufbarkeit der Datenschutzerklärung | |||||||
| This statement on data protection can be accessed under https://www.uni-mozarteum.at/files/pdf/uni/dse_en.pdf and printed out. | ||||||||
| § 16 | Miscellaneous | |||||||
| (1) | In the case of deviations between the German and the English version of the statement on data protection of the Universität Mozarteum Salzburg, it is hereby explicitly stated that the German language version is binding. | |||||||
| (2) | The Universität Mozarteum Salzburg reserves the right to change the statement on data protection at any time; therefore the relevant current version of the data protection statement is valid. | |||||||
December 6th, 2021