The protection of your personal data is a major concern of ours. The University for Natural Resources and Life Sciences, Vienna (BOKU) places great emphasis on protecting the privacy of the users of its website. For that reason BOKU processes data exclusively in compliance with the GDPR and the Austrian Data Protection Act [Datenschutzgesetz/DSG]. This is why we are informing you in the following about which data we collect when you visit our website and for what purposes we process and use it.
In addition BOKU operates several web services which may only be used following registration and/or login. This particularly concerns registrations for lecture courses or examinations, prior registration for a degree programme, lecture course administration, including resource administration, the eLearning portfolio and other internet services. Additional personal data is collected and processed as part of these services (such as, e.g. name, student registration number, address) in order to provide the relevant services. More detailed information will be provided with the relevant services.
Collection and use of personal data
Data collected when visiting the website
When retrieving the Publicly Accessible BOKU Website those types of data are collected which are automatically transmitted during the use of the website. This data is logged in server log files and systems for the purposes of error analysis. This data includes:
- the IP address from which the website was retrieved, including proxies
- date and time of access
- type of retrieval (e.g. GET)
- retrieved URL, including server name
- access protocol (e.g. HTTP/1.1)
- HTTP response code
- file size
- response time
- type of content of the response
- previously visited URL (referrer URL)
- operating system and browser type (user agent)
- name of your internet service provider
The log files are stored for a period of three months.
BOKU processes this information for the purpose of creating anonymised user statistics, warranting proper operations and monitoring the performance of the website.
The BOKU website uses so-called cookies. These are small data units which are stored on the end user's terminal device when they visit the BOKU website.
This allows the website to remember certain entries and settings (e.g. login) for a certain period of time for as long as the cookie is saved.
Cookies may be deleted at any time via the relevant settings in the web browser. Moreover, cookies may also be generally deactivated via the relevant browser settings, however this may lead to restrictions in the usability of the BOKU website in some cases.
BOKU respects Do Not Track requirements.
Social Media Buttons
We offer so-called social media buttons for sharing the contents of our websites via social networks. For this purpose we use the open source solution "c't Shariff" developed by Heise Medien GmbH & Co. KG, which provides social media buttons which are in compliance with data protection law. The buttons offered directly by operators of social networks inadmissibly transmit personal data such as IP address or entire cookies already at the time a website into which they have been integrated is loaded and in doing furnish precise information about your browsing behaviour to social media networks without having been requested to do so. For that purpose you must neither be logged into nor be a member of the relevant network. The Shariff button, on the other hand, establishes direct contact between the social network and the visitor only when the latter actively clicks on the share button. In this way Shariff prevents you from leaving a digital trace on every page you visit and improves data protection. By using Shariff we are able to protect your personal data and still integrate buttons for social sharing. For more detailed information on c’t Shariff see https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html.
Data is collected and stored on the BOKU websites using the open source software Matomo (www.matomo.org) on the basis of our legitimate interest in a statistical analysis of user behaviour for optimisation purposes as laid down in Art. 6 (1) (f) GDPR. For the same purpose pseudonymised use profiles may be created from this data and evaluated. Also cookies are used which allow an analysis of website use. For this purpose the use information generated by cookies (including your truncated IP address) is transferred to our servers and stored for the purposes of analysing use, which helps us to optimise the website. The data collected by means of the Matomo technology is only stored on the BOKU server. No data is transferred to third parties. Information generated by the cookies in the pseudonymised user profile will not be used to personally identify the users of this website and will not be merged with personal data regarding the holder of the pseudonym.
Use of data on the basis of consent
To the extent that BOKU processes data on the basis of consent BOKU will inform the data subjects thereof in advance and obtain their consent. In this case data subjects have the right to withdraw previously given consent at any time. The lawfulness of the processing done up until the time of withdrawal shall not be affected by withdrawal of consent.
Disclosure of collected data
BOKU will disclose no personal data collected on the Publicly Accessible BOKU Website to third parties unless statutory requirements provide otherwise.
Right to information, rectification, erasure or restriction; Right to object; Possibilities to lodge a complaint with the Data Protection Authority
Pursuant to the statutory data protection provisions, in particular Articles 15 to 21 of the General Data Protection Regulation (GDPR), users may at any time request information regarding personal data concerning them, may have incorrect data rectified or erased or demand restriction of processing and/or object to the use of their data.
The relevant requests may be addressed to the offices listed in the "Contact details" section.
There is also the possibility for users who are logged into the BOKU website to make changes to personal data themselves in the case of specific services which are available for such users.
In addition, pursuant to Section 13 of the Austrian Data Protection Act [DSG] users have the right to lodge a complaint with the Data Protection Authority if they are of the opinion that the processing of personal data concerning them is in breach of the GDPR or the 1st or 2nd Main Part of the Austrian Data Protection Act.
Links to external websites (external links)
The websites provided by BOKU may contain links to external, i.e. third-party, websites. BOKU has no influence on their contents and on the data protection standards of such linked sites. Liability on the part of BOKU for external links is therefore excluded.
BOKU takes suitable and appropriate technical and organisational measures to protect the users' data against accidental or unlawful destruction, loss and against access by unauthorised persons.
University of Natural Resources and Life Sciences, Vienna
• Data Protection Officer
For general and more detailed information on the topic of data protection at BOKU see www.boku.ac.at/datenschutz.