Data Privacy
Information on the processing of whistleblowers’ personal data
1. Data controller
The University of Applied Sciences BFI Vienna, Wohlmutstrasse 22, 1020 Vienna (hereinafter referred to as “the University”; see section 7 for full contact details) is the data controller responsible for processing data that you submit using the whistleblowing system at https://fh-vie.academic-whistleblower.at.
The University of Applied Sciences BFI Vienna, Wohlmutstrasse 22, 1020 Vienna (hereinafter referred to as “the University”; see section 7 for full contact details) is the data controller responsible for processing data that you submit using the whistleblowing system at https://fh-vie.academic-whistleblower.at.
2. Purpose and legal basis of data processing
Regarding the whistleblowing system, the purpose of data processing is to investigate and clarify suspected breaches of the law at the University, within the scope of the Austrian Hinweisgeber:innenschutzgesetz (Whistleblower Protection Act). The validity of every report submitted through the reporting channel (in this case, the university’s whistleblowing system) must be examined. Data will be processed in relation to reports that fall under the scope of the Whistleblower Protection Act, that regard cases for which evidence can be provided, and that are not obviously incorrect.
Regarding the whistleblowing system, the purpose of data processing is to investigate and clarify suspected breaches of the law at the University, within the scope of the Austrian Hinweisgeber:innenschutzgesetz (Whistleblower Protection Act). The validity of every report submitted through the reporting channel (in this case, the university’s whistleblowing system) must be examined. Data will be processed in relation to reports that fall under the scope of the Whistleblower Protection Act, that regard cases for which evidence can be provided, and that are not obviously incorrect.
The legal basis for data processing is compliance with a legal obligation in accordance with Article 6(1)(c) GDPR (see Whistleblower Protection Act).
When submitting a report, you can choose either to submit the report anonymously or to provide your name and e-mail address. If you choose to submit an anonymous report, please ensure that any files or texts you include do not contain any references to personal data.
3. Categories of data processed
We process data that you provide through the whistleblowing system. This may also include personal data of third parties that you disclose as a whistleblower. Personal data that are not relevant to a report will not be collected or, if collected, will be deleted immediately.
We process data that you provide through the whistleblowing system. This may also include personal data of third parties that you disclose as a whistleblower. Personal data that are not relevant to a report will not be collected or, if collected, will be deleted immediately.
4. Recipients of your personal data
The data you provide will be processed by University employees who are responsible for running the whistleblowing office. Where necessary, internal University employees or external experts (e.g. lawyers, auditors, etc.) will be consulted in order to make use of their professional expertise. All individuals who are given access to the data are obliged to keep it confidential. If required, data will be transferred to courts, public prosecution services or administrative authorities in accordance with the applicable legal regulations.
The data you provide will be processed by University employees who are responsible for running the whistleblowing office. Where necessary, internal University employees or external experts (e.g. lawyers, auditors, etc.) will be consulted in order to make use of their professional expertise. All individuals who are given access to the data are obliged to keep it confidential. If required, data will be transferred to courts, public prosecution services or administrative authorities in accordance with the applicable legal regulations.
5. Retention period for personal data
Personal data will be stored and retained for three years from the date of submission, or for as long as is necessary for the completion of any court or administrative proceedings or criminal investigations.
Personal data will be stored and retained for three years from the date of submission, or for as long as is necessary for the completion of any court or administrative proceedings or criminal investigations.
6. Your rights as a data subject
With regard to your personal data, by law you have the following rights:
With regard to your personal data, by law you have the following rights:
- The right of access, the right to rectification and erasure, the right to restriction of processing, the right to object to processing and the right to data portability. These rights can be exercised by contacting the University (see section 7 for contact details).
- The right to lodge a complaint with the competent authority – in Austria, this right can be exercised by contacting the Austrian Data Protection Authority.
Please note that the exercise of your rights as a data subject may be restricted in some cases, e.g. because the exercise of your rights as a data subject may obstruct the pursuit of information, or the assertion, exercise or defence of legal claims.
7. Contact
University of Applied Sciences BFI Vienna
Wohlmutstrasse 22
1020 Wien
+43 (0)1 7201286
datenschutz@fh-vie.ac.at
University of Applied Sciences BFI Vienna
Wohlmutstrasse 22
1020 Wien
+43 (0)1 7201286
datenschutz@fh-vie.ac.at