Data Protection
Privacy Policy
of the association
BIOTECH AUSTRIA
Biotechnology Industry Organization Austria
Protecting your privacy is very important to us. This Privacy Policy serves to inform you about the type, scope, and purpose of the collection and processing of personal data (“Data”) by the association BIOTECH AUSTRIA in connection with the use of the website https://www.biotechaustria.org/ (“Website”). This provision of information is made in accordance with Articles 13 and 14 of the General Data Protection Regulation (“GDPR”).
This Privacy Policy is aimed at (2.a) users of the Website, (2.b) newsletter subscribers, and (2.c) employees of members of the association who contact us (“Data Subjects”, “you”).
1. Controller of Data Processing
the association BIOTECH AUSTRIA Biotechnology Industry Organization Austria
(hereinafter “Biotech Austria”, “we”).
2. How do we process your data?
a. Website Users
Cookies
In the course of your use of the Website, we collect and process the following data: IP address and IP location, referrer URL, number, duration, and time of your interactions with the Website, search engines and keywords used to find us, information on browser type, device type, screen resolution, Internet service provider, and operating system. We collect this data automatically using third-party cookies based on your consent in accordance with Article 6(1)(a) GDPR (or in conjunction with Section 96(3) TKG in the case of so-called “persistent” cookies, which are stored on your device).
You can reject the storage of individual cookies (via configuration in the cookie banner) or object to storage later through browser settings. When cookies are set based on your voluntary consent, your data may be transmitted to recipients in third countries outside the EEA, particularly India. India is not recognized by the European Court of Justice as having an adequate level of data protection, with a specific risk that your data may be viewed for monitoring and surveillance purposes. By consenting, you agree that cookies from third-party providers in India or other insecure third countries may be used and accept a potentially lower level of data protection (Article 49(1)(a) GDPR).
Cookies that are essential for the setup or functioning of the Website (technically necessary cookies) cannot be disabled. If they involve personal data, processing is based on our legitimate interest according to Article 6(1)(f) GDPR to ensure the functionality of the Website. The storage duration of each cookie may vary and can last up to 12 months, depending on the duration of each browsing session.
Event Registration
When you contact us via email or other available contact methods to register for an event, the data you provide is processed to handle and respond to your request, specifically: name, email, and the company/organization you work for. This data will be stored for up to 12 months.
We process the data to facilitate your participation in the event and for contact purposes in this context within (pre-)contractual relationships in accordance with Article 6(1)(b) GDPR.
For contact management, your data may be shared with our data processor.
Furthermore, your data may be shared with legal representatives, notaries, courts, and administrative authorities in specific cases.
Social Media Plugin
Social media plugins are embedded on our site, linking to our social media profiles. By clicking on a social media icon, data is transmitted to third parties (the respective social media service). Once the social media service is accessed, we have no control over the use of cookies or access to data collected there. We use plugins from the following social media service: LinkedIn.
b. Newsletter Subscribers
If you subscribe to our newsletter, we process the contact data you voluntarily provide, specifically name and email address, to send you regular updates on our services and other news, as well as events. Data processing is based on your explicit consent in accordance with Article 6(1)(a) GDPR in conjunction with Section 107(2) TKG. This consent can be revoked at any time with future effect (by emailing office@biotechaustria.org). Your data will be stored until the revocation is exercised.
In specific cases, your data may be shared with legal representatives, notaries, courts, and administrative authorities.
c. Employees of Association Members Who Contact Us
We process your data (first name, last name, position in the organization, email address) if you provide it to us as part of completing your organization’s member profile to fulfill our obligations arising from the contractual relationship with you (pursuant to Article 6(1)(b) GDPR) and to protect legitimate interests, unless your interest in confidentiality prevails (Article 6(1)(f) GDPR).
We retain the above-mentioned data for the duration of your organization’s active membership and beyond, in accordance with statutory retention and documentation obligations (e.g., pursuant to UGB and BAO).
In specific cases, your data may be shared with notaries, courts, and administrative authorities.
3. Transfer to Third Countries
If the above-mentioned recipients of your data are located outside the EEA and there is no EU Commission decision confirming that the country provides an adequate level of data protection, we ensure that the transfer is based on standard contractual clauses (currently 2010/87/EC and/or 2004/915/EC) or otherwise in accordance with Articles 46, 47, or 49 GDPR.
4. What rights do you have?
Right to Information If we process personal data about you, you have the right to information about the processing purposes, the categories of personal data processed, the recipients of this personal data, storage duration, your rights, the origin of the personal data, and the existence of automated decision-making.
Correction and Deletion
You have the right to request the correction of incorrect or incomplete personal data concerning you. You also have the right to request the deletion of personal data concerning you if the processing of the data is not lawful and there are no legal obligations on our part to prevent deletion.
Restriction of Processing
You have the right to request the restriction of processing of your data in certain cases.
Data Portability
You have the right to request the transfer of your data, which you have provided to us, in a structured, commonly used, and machine-readable format. You also have the right to have your personal data transferred directly by us to another controller, where technically feasible.
Objection
For reasons arising from your particular situation, you have the right to object to the processing of personal data concerning you at any time. If you object, we will no longer process personal data concerning you, unless we can demonstrate that our processing reasons outweigh your interests.
Complaint
If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been infringed in any way, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority (www.dsb.gv.at).
Contact
To exercise your rights regarding the data we process about you, please contact:
BIOTECH AUSTRIA, Biotechnology Industry Organization Austria
c/o Herbst Kinsky Rechtsanwälte GmbH
Dr.-Karl-Lueger-Platz 5, A-1010 Vienna
office@biotechaustria.org
Definitions
Definitions of the terms used (e.g., “personal data” or “processing”) can be found in Article 4 GDPR.