General Information
The protection of your personal data is of particular importance to us. We therefore process your data exclusively on the basis of the applicable legal provisions, in particular the General Data Protection Regulation (GDPR) and the Austrian Telecommunications Act (TKG 2003). In this Privacy Notice, we inform you about the most important aspects of data processing in connection with our website.
Contacting Us
If you contact us via email through this website, the data you provide will be stored for the purpose of processing your enquiry and handling any follow-up correspondence. Such data will be retained for a period of six months. We will not disclose this information to third parties without your consent.
Data Retention and Deletion
Your personal data will be deleted as soon as the relevant contractual relationship has been fulfilled and no statutory retention obligations apply. As a general rule, personal data is deleted after seven years in accordance with the statutory retention period set out in Section 132 of the Austrian Federal Fiscal Code (Bundesabgabenordnung, BAO). Notwithstanding the above, personal data may be retained for a longer period where this is necessary to comply with legal or regulatory obligations or to fulfil contractual obligations, for example in connection with warranty claims, damages claims, or obligations towards contractual partners. In such cases, the processing of personal data is based on Article 6(1)(c) GDPR, namely compliance with a legal obligation to which the controller is subject.
Web Analytics (Matomo) without Cookies
This website uses the open-source web analytics platform Matomo to analyse the use of our website and to help us continuously improve our online services. Matomo is hosted on a server located within the European Union. The data collected is processed exclusively by AIHTA and is not shared with third parties. We have configured Matomo in a privacy-friendly manner. No cookies are stored on your device, and your IP address is anonymised before storage, thereby excluding or significantly reducing the possibility of direct identification.
In the course of web analytics, the following information may be processed:
- pages and files accessed;
- date and time of access;
- browser and operating system used;
- referrer URL (the website visited immediately before accessing our website);
- screen resolution and device characteristics; and
- anonymised IP address.
The processing of this data is carried out for the purposes of providing and maintaining the website, analysing technical errors, compiling statistical usage information, and optimising our online services. The legal basis for this processing is our legitimate interest pursuant to Article 6 GDPR in analysing the use of our website and improving its usability, performance and technical security. The data collected is used exclusively for statistical and analytical purposes. It is not used to identify individual visitors or to create user profiles for marketing purposes.
Right to Object (Opt-Out)
You may object to the collection and analysis of your website visits at any time. If you exercise this right, an opt-out preference will be stored, ensuring that no usage data relating to your visits is collected in the future.
SSL Encryption
For security reasons and to protect the transmission of confidential information, such as enquiries you send to us as the website operator, this website uses SSL (Secure Sockets Layer) encryption. You can recognise an encrypted connection by the change in the browser's address bar from "http://" to "https://" and by the padlock symbol displayed in your browser. When SSL encryption is enabled, any data transmitted to us cannot be read by third parties.
Newsletter
You may subscribe to our newsletter via our website. To do so, we require your email address and confirmation that you consent to receiving the newsletter. The processing of your personal data for newsletter distribution is based on your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent and unsubscribe from the newsletter at any time by using the unsubscribe link provided in every newsletter. Upon receipt of your withdrawal, we will promptly delete your data in connection with the newsletter distribution, unless further retention is required by law.
External Links
We carefully review external links included on our website. Nevertheless, AIHTA accepts no responsibility or liability for the content of websites that can be accessed via links from this website or any other online presence. Responsibility for the content of linked websites rests solely with the respective operators.
Server Log Files
The hosting provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This information may include:
- browser type and browser version;
- operating system used;
- referrer URL;
- hostname of the accessing device;
- date and time of the server request; and
- IP address.
This data is not assigned to specific individuals, and no merging of this data with other data sources is carried out. We reserve the right to review server log data retrospectively where there are concrete indications of unlawful use of the website. In particular, IP addresses may be processed for the detection, investigation and prevention of cyberattacks and other security incidents, including the maintenance of security blacklists. The legal basis for this processing is our legitimate interest pursuant to Article 6(1)(f) GDPR in ensuring the security, integrity and proper functioning of our website and information systems.
Your Rights
Under applicable data protection law, you have the right to:
- obtain information about the personal data we process concerning you;
- request the rectification of inaccurate or incomplete data;
- request the erasure of your personal data;
- request restriction of processing;
- receive your personal data in a structured, commonly used and machine-readable format (data portability);
- withdraw consent at any time where processing is based on consent; and
- object to the processing of your personal data where permitted by law.
If you believe that the processing of your personal data violates data protection legislation or that your data protection rights have otherwise been infringed, you have the right to lodge a complaint with the competent supervisory authority.
In Austria, the competent supervisory authority is:
Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40-42
1030 Vienna
Austria/Europe
Phone: +43 1 52 152-0
E-Mail: dsb(at)dsb.gv.at
Processors
AIHTA engages carefully selected service providers (processors) who process personal data on our behalf and only in accordance with our instructions and applicable data protection legislation. Where processors are engaged, appropriate data processing agreements are concluded in accordance with Article 28 GDPR. Information on specific processors may be provided upon request where required under applicable law.
Contact Details
If you have any questions regarding this Privacy Notice or the processing of your personal data, please contact:
HTA Austria – Austrian Institute for Health Technology Assessment GmbH
Josefstädter Straße 39
1080 Vienna, Austria
Telephone: +43 (0)1 236 8119-0
Email: office(at)aihta.at