Privacy Policy

I. Name and Address of the Controller

The controllers responsible for processing your personal data under data protection law are:

Federal Ministry of Finance
Directorate-General VI – Mining
Staff Department for Security Research and Technology Transfer
Radetzkystraße 2
1030 Vienna
Austria
http://www.bmf.gv.at 

FFG – Austrian Research Promotion Agency (Österreichische Forschungsförderungsgesellschaft mbH)
Sensengasse 1, 1090 Vienna, Austria
Tel: +43 (0)5 7755 - 0
http://www.ffg.at
office(at)ffg.at 

II. General Information on Data Processing

We place great importance on the responsible handling of personal data. It is important to us that you know what data we process and for what purposes.

We have implemented technical and organizational measures to ensure that data protection regulations are complied with both by us and by any external service providers.

Your personal data will be deleted or blocked as soon as the purpose for which it was stored and processed no longer applies, unless legal obligations require a longer retention period, or legal claims exist that may be asserted against us and require data to be retained.

In accordance with these principles, we inform our clients and partners below—pursuant to Articles 13 and 14 GDPR—about the individual processing activities that take place:

III. Individual Data Processing Activities

1. Data Processing – “Publication of Data on Funded Projects”

1.1 Scope of Processing of Personal Data
Publication of personal data in connection with funded projects, including:

• Names of funded organizations
• Organization address
• First name
• Last name
• Address

Telephone number 

• E-mail address
• Information on professional expertise

1.2 Legal Basis for Processing
The processing is based on consent pursuant to Article 6(1)(a) GDPR or on a legitimate interest pursuant to Article 6(1)(f) GDPR.

1.3 Purpose of Processing
Ensuring the visibility and availability of project results has proven successful in previous BMF programs. The European Commission also promotes improved access to scientific publications through its Recommendation 2012/417/EU on Open Access, to facilitate a knowledge- and innovation-based economy.

Accordingly, project results of the program are published and made freely accessible on appropriate platforms, such as the KIRAS website (www.kiras.at), www.open4innovation.at, or the FFG project database. In these calls for proposals, the funded projects and their results (e.g., in the form of publishable summaries) are made available to the public on the above-mentioned platforms. Confidential content (e.g., projects involving patent applications, trade secrets, or personal data) is excluded from publication.

The structured and documented collection of R&D data from the project planning phase ensures responsible data management. Where there are no competitive reasons to withhold information, publication of such data may be considered. Conversely, when personal data is involved, all necessary measures are taken to protect privacy.

1.4 Recipients of Data
Your data will not be shared with third parties for their own purposes without your consent.

IV. Rights of the Data Subject

1. Right of Access

You have the right to obtain information about all data relating to your person that is processed by FFG. Specifically, you may request details on:

• The purposes of processing;
• The categories of personal data processed;
• The recipients or categories of recipients to whom your data has been or will be disclosed;
• The intended duration of storage or, if not possible, the criteria used to determine that period;
• The existence of rights to rectification, erasure, restriction of processing, or objection;
• The right to lodge a complaint with a supervisory authority;
• Any available information about the source of the data if not collected from you;
• The existence of automated decision-making, including profiling, under Article 22(1) and (4) GDPR, and—at least in those cases—meaningful information about the logic involved, as well as the significance and consequences of such processing.

You also have the right to be informed whether your personal data is transferred to a third country or international organization, and, if so, to be informed of the appropriate safeguards pursuant to Article 46 GDPR.

2. Right to Rectification and Restriction of Processing

You may request the rectification of inaccurate or incomplete data. Under certain circumstances—such as when the accuracy of data is contested—you may request restriction of processing, meaning the data may only be processed with your consent, for the establishment, exercise, or defense of legal claims, to protect the rights of another person, or for important public interests.

3. Right to Data Portability

You may request that FFG provide you—or, where technically feasible, a third party designated by you—with a copy of your personal data in a structured, commonly used, and machine-readable format. You also have the right to transmit these data to another controller without hindrance, provided that

• the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and
• the processing is carried out by automated means.

You may also request that your personal data be transferred directly from one controller to another, where technically feasible, provided that the rights and freedoms of others are not adversely affected.

4. Right to Erasure

You have the right to request erasure of your personal data under certain circumstances, for example if the data is not processed in compliance with data protection requirements.

The so-called “right to be forgotten” does not apply, as FFG only makes your personal data public where a legal obligation to do so exists (Article 17(3)(b) GDPR).

If you exercise your right to rectification, erasure, or restriction of processing, FFG is obliged to inform all recipients to whom the data has been disclosed, unless this proves impossible or involves disproportionate effort.

5. Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data carried out under Article 6(1)(e) or (f) GDPR, including profiling based on those provisions.

The controller will then cease processing the data unless compelling legitimate grounds for processing are demonstrated that override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims.

6. Right to Withdraw Consent

You have the right to withdraw your consent to data processing at any time. The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

7. Supervisory Authority

Regardless of the possibility of filing a claim with the regional court under Section 29(2) of the Austrian Data Protection Act 2018 and other remedies, you have the right to lodge a complaint with the national supervisory authority of your place of residence if you believe that your personal data is being unlawfully processed. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde).