Information on the processing of your personal data in accordance with Art 13 GDPR
1. General information
Thank you for visiting our website. The protection of your personal data is important to us. We strictly adhere to the legal provisions of the EU General Data Protection Regulation, the Austrian Data Protection Act and other applicable legal provisions. In the following, we would like to inform you about the processing of your data in connection with your visit to and use of the website, as well as newsletter management.
2. Contact Details
Ignaz Semmelweis Institut
Medizinische Universität Wien
Rektoratsgebäude BT88
Spitalgasse 23, 1090 Wien
office@semmelweisinstitute.ac.at
Data Protection Officer
Medizinische Universität Wien
Abteilung Recht und Compliance
Spitalgasse 23, 1090 Wien
3. Purposes of data processing and legal bases
Website visit:
When you visit our website, we collect and store access data in log files (so-called log files or access logs) in order to ensure the permanent functionality and accessibility of the website. We process the following data and information in this context:
• IP address
• Date and time of access
• Websites from which you reach our site (referrer URL)
• Operating system
• Name of the Internet service provider
• Product and version information of the browser used
• Amount of data transferred, loading time
The legal basis for data processing is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. This lies in ensuring the functionality, security, and accessibility of the website for all visitors to the site and, where applicable, in the establishment, defense, and enforcement of legal claims. The aforementioned data is technically necessary for the provision of a website.
We do not use cookies or corresponding technologies on our website. Your personal data is therefore not processed in this way (e.g. no data is passed on to third parties for analysis and tracking purposes).
Access to our website is secured via HTTPS. This means that communication between your end device and our servers is encrypted.
Newsletter management:
When you subscribe to our newsletter, we process the contact details you provide in order to send you information about our activities. This data processing is carried out on the basis of the statutory provisions, namely on the basis of your consent to receive the newsletter (Art. 6 (1) (a) GDPR).
4. Automated decision-making and profiling
We do not use profiling measures or automated decision-making.
5. Data transfer and recipients
As a rule, we only pass on your data collected on the basis of the use of our website to the extent that this is absolutely necessary to fulfil the stated purposes (operation and maintenance of the website via external service providers, data transfer to e-mail providers in the processing of communication). However, we may also be legally or officially obliged to pass on data to third parties (e.g. passing on data to law enforcement authorities).
Your data will be shared with ‘Rapidmail’ (Positive Group Deutschland GmbH, Wentzingerstraße 21, 79106 Freiburg, Germany) for the purpose of sending newsletters.
6. Storage period of the data
Your data will only be stored for as long as is technically and organisationally necessary to achieve the stated purposes and to fulfil our legal obligations.
We store log file data for a period of 30 days.
The data required for sending the newsletter will be stored until you withdraw your consent, you will find the link to unsubscribe in the newsletter. You can withdraw at any time.
7. Your rights
You have a number of rights in relation to your personal data processed by us, namely the rights to access, rectification, erasure, restriction of processing, data portability and objection. You can exercise all of these rights by contacting us using the contact details provided, subject to verification of your identity where necessary.
If you are of the opinion that the processing of your data violates data protection law or your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority (Austrian Data Protection Authority, dsb.gv.at).
8. Miscellaneous
We expressly reserve the right to make future changes or adjustments to the privacy policy. If you have any questions or suggestions, please contact us using the contact details provided.
Status of the privacy policy: 12/2025