PRIVACY POLICY
1. General
For Graz University of Technology (hereinafter “TU Graz”), the protection of your data is a top priority. All our procedures and processes comply with the applicable data protection regulations. As part of your application for the TU Graz High Potentials Scholarship Programme, we process your personal data. In accordance with our legal obligations, we therefore inform you in this statement, amongst other things, about the nature, purpose and legal basis of our data processing.
2. Data Controller
The data controller is Graz University of Technology, Rechbauerstraße 12, 8010 Graz.
3. Categories of data subjects and categories of data
We process the following personal data relating to you:
Students: name, nationality, date of birth, email address, field of study, photograph from your ID card, letter of motivation, CV, and, where applicable, further documents such as letters of recommendation.
4. Purpose and legal basis
The purpose of data processing is to conduct the application and selection process or, if awarded, to administer the scholarship within the framework of the TU Graz High Potentials Scholarship Programme.
We therefore process the personal data you provide during registration as part of the application process to carry out pre-contractual measures or, in the event of a scholarship offer, to fulfil the scholarship contract on the basis of Article 6(1)(b) of the GDPR.
5. Recipients
Your data will be transferred to the following recipients to the extent necessary for processing: staff at Graz University of Technology and employees of the relevant corporate scholarship providers. Beyond this, your personal data will not be disclosed to third parties.
6. Retention periods
We will retain your personal data for as long as is necessary to fulfil the contract or to carry out pre-contractual measures. Furthermore, we will only process your data if statutory retention periods apply or if limitation periods regarding potential legal claims are still open.
7. Data subject rights
In connection with the aforementioned data processing, you are generally entitled to the following rights:
- Right of access to the personal data concerned (Art. 15 GDPR),
- Right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
- Right to data portability (Art. 20 GDPR),
- Right to object (Art. 21 GDPR),
- where processing is based on consent: the right to withdraw consent (Article 7(3) GDPR)
Please note, however, that withdrawal does not affect the lawfulness of data processing carried out prior to withdrawal. Furthermore, exercising these rights cannot lead to the termination of contractual or legal obligations.
If you have any data protection concerns or wish to exercise your rights as a data subject, please contact datenschutz@tugraz.at. Further information on data protection at Graz University of Technology can be found at datenschutz.tugraz.at.
You also have the right to lodge a complaint with the Austrian Data Protection Authority.
8. Data Protection Officer
The Data Protection Officer at Graz University of Technology is x-tention Informationstechnologie GmbH, Römerstraße 80A, 4.
