Data protection

The responsible handling of personal data is of the utmost importance to the
Federal Ministry of Education, Science and Research. Personal data is
therefore processed only in accordance with the provisions of
the EU General Data Protection Regulation (GDPR) and Austrian law. All
employees are trained in data protection law and process data responsibly
within the legal framework. In addition, we have taken technical and
organisational measures to ensure that rules on data protection are adhered
to by both ourselves and third-party service providers. Ultimately, we would
like you to know when we collect data, what data we collect and how we use
it. In the following paragraphs, we would like to tell you about important
principles and processes of data protection law at the Federal Ministry of
Education, Science and Research:

Processing personal data

As a public institution, the Federal Ministry acts in accordance with the
legality principle of administrative law, i.e. administrative activity is based on
Austrian and European law. This means that the standards applicable to the
processing of personal data are generally the relevant legal basis (Articles 6
and 9 of the GDPR). In specific individual cases, however, a contract or
other legal obligation may also be considered. If you have given consent for
your data to be processed, this forms the basis and at the same time the
limit.

Fundamentally, the length of time for which data is stored also depends on
the particular legal basis in the individual case (legal requirements, terms of
the contract or similar).

Likewise, the purpose for which personal data is processed is determined by
the Austrian and European legal basis and is based on the statutory duties
of the Federal Ministry of Education, Science and Research. The basis for
this is the Federal Ministries Act (Bundesministeriengesetz) as amended.
As a rule, the Central Office of the Federal Ministry of Education, Science
and Research does not transmit personal data to third countries or use
automated decision-making processes. Any exceptions are made on a legal
or special contractual basis.

Right of access (Article 15 GDPR)

You have the right to obtain information about the processing of your
personal data. We would like to point out that in order to process requests
for information, the identity of the applicant must be verified. As a rule, this
can be done using a mobile phone signature/Citizen Card (Bürgerkarte) or
by sending a copy of your passport or identity card. To enable us to supply
you with the information you require as quickly as possible, please provide
specific details of your identity and request. You can also ask for individual
items of information or processing procedures. Please state as precisely as
possible what information you require.
The Central Office of the Federal Ministry of Education, Science and
Research can only provide information about data that it processes as the
data protection controller. If you have any questions about data processed at
universities, schools, Boards of Education or any other independent
agencies, please contact the particular institution.
The Federal Ministry of Education, Science and Research will answer your
request for information under Article 15 of the GDPR as quickly as possible
and within one month of receipt. If your application is complex and if you
have made a number of applications, the deadline may be extended by
another two months. We will inform you if this is the case. To ensure that
your personal data is only made available to you, the information will
generally only be delivered to you by RSa letter (registered letter with return
receipt).
Please send your request for information to datenschutz@bmbwf.gv.at

Other data subject rights (Article 16 et seq. GDPR)

To assert any other data subject rights under the GDPR, e.g. if you would
like to have data corrected or deleted at the Central Office of the Federal
Ministry of Education, Science and Research, please
contact datenschutz@bmbwf.gv.at
Please note that these rights may be restricted in individual cases in
accordance with the applicable legal situation.

Making a complaint

If you believe that your data protection rights have been violated by data
processing at the Central Office of the Federal Ministry of Education,
Science and Research, please contact datenschutz@bmbwf.gv.at. You also
have the right to lodge a complaint with the data protection supervisory
authority. In Austria, this is the Austrian Data Protection Authority.

Controller and data protection officer

The controller responsible for processing personal data at the Central Office
of the Federal Ministry under the GDPR is the Federal Minister for
Education, Science and Research.

Contact details

Federal Ministry of Education, Science and Research
Minoritenplatz 5
1010 Vienna
Austria
T +43 1 53120 0
F +43 1 53120 3099