Rights of the data subjects

The data subject (i.e. the natural person whose personal data are processed) is entitled to various - very comprehensive - rights to obtain from the controller (i.e. the organization, in this specific case Anton Bruckner Private University).

These rights serve to ensure the transparency of the processing of personal data. The data subject should be able to obtain information and should also know by whom, how, in which way, and why the data are processed.

The data subjects have the following rights to obtain from the controller:

• Right to transparent information
• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to object to processing (only in case of legitimate interest)
• Right to data portability (only in case of contractual relationship or consent).
• If the processing is based on consent, the data subject has the right to withdraw the consent at any time (marketing for own purposes); the withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal.
• Right to lodge a complaint to a supervisory authority.

Data subjects may exercise all rights by e-mail to datenschutzbruckneruniat or in any and every possible way.

The data subjects must identify themselves and contribute to prove the identity, in order to ensure that when responding to the exercise of the respective right, the data subject is actually addressed.

General information according to Article 14 GDPR

In addition to information about the use of personal data, Article 14 GDPR stipulates that data subjects must be informed about the categories of data and the origin (source of data), in cases where the controller has not obtained these data directly from the data subject itself.

This takes place

• when building and maintaining a contact database for own purposes from public sources

Contact database

Processing of the following categories of personal data:

• Master data (name, title, gender)
• contact data

Origin of the data:

• Publicly accessible sources (e.g. company register, telephone directory, homepages, social media).

Type of information provision in terms of Article 14 GDPR:

The provision of information in terms of Article 14 GDPR takes place in the context of the first use of the data, but no later than one month after obtainment. Disclosure of the data to third parties is not envisaged.