Annex: Legal basis for the processing
Controller
Your data is collected for research projects carried out by Sigmund Freud University, Freudplatz 1, 1020 Vienna, contact: datenschutz@sfu.ac.at, as the controller.
The personal data are processed on the basis of the declaration of consent for the overriding legitimate interest of the SFU (Art. 6 para. 1 lit. f and Art. 9 para. 2 lit. j DSGVO).
From the time of pseudonymization, the personal data is processed on the basis of § 7 para. 1 no. 3 DSG, § 2d para. 2 no. 1 and § 2d para. 5 FOG.
The general legal basis for the processing of personal data in the context of scientific research can be found in the General Data Protection Regulation, the Data Protection Act and the Research Organization Act, as amended.
The general legal basis for the processing of personal data in the context of scientific research can be found in the General Data Protection Regulation, the Data Protection Act and the Research Organization Act, as amended.
Your rights
In principle, you have the rights to information, rectification, erasure, restriction, data portability and objection. You can assert these rights against the controller.
In the area of research, the aforementioned rights are (partially) excluded insofar as the achievement of scientific research purposes pursuant to Section 89 (1) GDPR is likely to be rendered impossible or seriously impaired.
From the time of pseudonymization (as soon as identification by legally permissible means can no longer be carried out by the researcher), the rights are excluded.
If you are of the opinion that the processing of the data violates applicable data protection law or your data protection claims have otherwise been violated in any way, you can complain to the competent supervisory authority in accordance with Art 77 GDPR. In Austria, this is the:
Austrian Data Protection Authority
Email: dsb@dsb.gv.at
Annex: Definitions
“Personal data”
means any information relating to an identified or identifiable natural person (hereinafter “data subject”) in accordance with Art. 4 No. 1 DSGVO. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Special categories”
of personal data are data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation, in accordance with Art. 9 para. 1 DSGVO.
“Pseudonymization”
is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
