{"id":2649,"date":"2026-09-28T15:53:19","date_gmt":"2026-09-28T13:53:19","guid":{"rendered":"https:\/\/fachschaftslisten.at\/?page_id=2649"},"modified":"2026-10-16T14:28:10","modified_gmt":"2026-10-16T12:28:10","slug":"datenschutzerklaerung-login","status":"publish","type":"page","link":"https:\/\/fachschaftslisten.at\/en\/datenschutzerklaerung-login\/","title":{"rendered":"Privacy Policy Internal Login Service"},"content":{"rendered":"<p class=\"wp-block-paragraph\">The protection of your personal data is a major concern to us. We treat your data confidentially and in accordance with the statutory data protection regulations (GDPR, TKG 2021) as well as this privacy policy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This privacy policy applies <strong>exclusively to our authentication and login provider<\/strong> (Single Sign-On \/ Identity &amp; Service Provider). This service is available exclusively to members as well as functionaries of the Independent Students Associations of Austria and associated university groups in order to gain access to internal working areas, platforms, and IT resources of the association.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The controller responsible for data processing is:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Unabh\u00e4ngige Fachschaftslisten \u00d6sterreichs<\/strong><br>Gusshausstra\u00dfe 27-29<br>1040 Vienna<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"mailto:kontakt@fachschaftslisten.at\">kontakt@fachschaftslisten.at<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Authorized Chairpersons: <\/strong>Paul Koo (Chairperson for Politics), Helena Fitze (Chairperson for Finance), Lukas Ertl (Chairperson for Organization)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Non-profit association<\/strong><br><strong>Competent Association Authority:<\/strong> LPD Vienna<br><strong>ZVR:<\/strong> 1429212598<br><strong>Jurisdiction:<\/strong> Austria<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Security incident contact: <a href=\"mailto:admin@fachschaftslisten.at\">admin@fachschaftslisten.at<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Name and description of the service<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Service name:<\/strong> Independent Students Associations of Austria (FL\u00d6)<\/li>\n\n\n\n<li><strong>Description:<\/strong> Central login service for internal services of FL\u00d6<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Hosting &amp; Server Log Files<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Our login service is hosted at:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>ALL-INKL.COM \u2013 New Media M\u00fcnnich<\/strong><br>Hauptstra\u00dfe 68<br>02742 Friedersdorf, Germany<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">(Server location: Germany \/ European Union)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We have concluded a data processing agreement (DPA) with ALL-INKL in accordance with Art. 28 GDPR. This ensures that the service provider processes the data of our visitors only according to our instructions and in compliance with strict EU security standards.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Collection of server log files<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">With every login process, the server automatically records technical connection information. The following data is stored in so-called server log files:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Your IP address<\/li>\n\n\n\n<li>Date and time of the authentication request<\/li>\n\n\n\n<li>Internal target service accessed<\/li>\n\n\n\n<li>HTTP status code \/ transmission status<\/li>\n\n\n\n<li>Browser type, version, and operating system<\/li>\n\n\n\n<li>Identity Provider entity identifier (IdP entityID)<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Use of Cookies<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Our login provider exclusively uses technically necessary session cookies (e.g. SimpleSAMLSessionID \/ PHPSESSID) to maintain the authentication status across the login process, to prevent replay attacks and, if applicable, to remember the home institution you last selected for your next visit. These cookies automatically become invalid after closing the browser or after the session expires. No tracking or advertising profiling takes place.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Purpose &amp; Legal Basis<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The storage of log files is technically necessary to ensure the availability and integrity of our service and to defend against disruptions or attacks on the authentication infrastructure. It also serves to fulfill our obligations within the framework of the Federation's security framework (SIRTFI) for traceability and resolution of security incidents. The legal basis is our legitimate interest in secure and error-free operation pursuant to Art. 6 (1) lit. f GDPR.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Storage Duration<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Access and security log files are retained to protect the infrastructure and to investigate potential security incidents in accordance with the standards of the <em>Security Incident Response Trust Framework for Federated Identity<\/em> (SIRTFI) for at least 90 days and a maximum of 180 days and are subsequently deleted or anonymized automatically, unless they are needed for further investigation of a specific incident.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Authentication &amp; Member Data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In order for you to gain access to internal systems as an association member, we process personal data. This data either comes directly from your university\/home organization or is generated during your use.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you log in via your university or another home organization, the latter transmits the following authorization data to us:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Unique user identifier<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>samlSubjectID (urn:oasis:names:tc:SAML:attribute:subject-id)<\/strong> or.<br><strong>samlPairwiseID (urn:oasis:names:tc:SAML:attribute:pairwise-id<\/strong>)<strong>:<\/strong><br>Modern, global and persistent SAML standard identifiers for the unique assignment of your user account.<\/li>\n\n\n\n<li><strong>eduPersonPrincipalName (urn:oid:1.3.6.1.4.1.5923.1.1.1.6<\/strong>)<strong>:<\/strong> If your home organization does not yet support the modern SAML identifiers, this pseudonymous user identifier (in the format identifier@organisation.at) is used as a fallback for account identification.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">User Attributes<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>eduPersonScopedAffiliation (urn:oid:1.3.6.1.4.1.5923.1.1.1.9<\/strong>)<strong>:<\/strong> Your role or status at the home organization (e.g. <code>student@...<\/code>, <code>member@...<\/code>). Is required to verify authorization to use the association's internal resources.<\/li>\n\n\n\n<li><strong>mail (urn:oid:0.9.2342.19200300.100.1.3<\/strong>)<strong>:<\/strong> Your official email address. Is processed for security-related notifications, account management, and association-related communications.<\/li>\n\n\n\n<li><strong>givenName (urn:oid:2.5.4.42<\/strong>)<strong>:<\/strong> Your first name.<\/li>\n\n\n\n<li><strong>sn (urn:oid:2.5.4.4<\/strong>)<strong>:<\/strong> Your last name \/ family name.<\/li>\n\n\n\n<li><strong>displayName (urn:oid:2.16.840.1.113730.3.1.241<\/strong>)<strong>:<\/strong> Your full display name.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Purpose of data processing<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>For authorization and management of your access rights to internal IT systems, computing resources, and platforms.<\/li>\n\n\n\n<li>To ensure the reliability and integrity of our association-internal data.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Legal bases<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Performance of a contract \/ membership relationship (Art. 6 (1) (b) GDPR):<\/strong> The processing is strictly necessary to provide you with the access to the member systems that you have requested.<\/li>\n\n\n\n<li><strong>Legitimate interest (Art. 6 (1) (f) GDPR):<\/strong> For administrative tasks, resource allocation, and system security.<\/li>\n\n\n\n<li><strong>Consent (Art. 6 para. 1 lit. a GDPR):<\/strong> If you store additional voluntary information in your profile.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Storage duration &amp; account deletion<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Your user data will be stored for the duration of your active membership or association activity.<\/li>\n\n\n\n<li>Your access will be deleted or anonymized when you leave the association, you request deletion, or if you have not used the service for more than 18 months.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Disclosure to third parties &amp; visibility within the association<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Your data will be treated confidentially and will not be shared for advertising purposes. Transmission only occurs in the following cases:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Internal association services:<\/strong> During login, necessary identity attributes are transmitted to the respective platform accessed (e.g., internal association wiki, Nextcloud, chat). Please note that your name or profile may be visible to other authorized members in these systems (e.g., in the version history: <em>\u201eLast edited by First Name Last Name\u201c<\/em>).<\/li>\n\n\n\n<li><strong>Legal obligation:<\/strong> If we are legally, officially, or judicially obligated to disclose data.<\/li>\n\n\n\n<li><strong>Enforcement of terms of use:<\/strong> For investigating abusive use or for preventing damages.<\/li>\n\n\n\n<li><strong>Third-country transfer:<\/strong> No transfer to third countries outside the EU or EEA takes place. Should this be necessary in exceptional cases, it will occur exclusively in compliance with EU data protection standards (e.g., through adequacy decisions or EU standard contractual clauses).<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Notice of Your Right to Withdraw Consent<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Insofar as data processing is based on your separate consent, you have the right to withdraw this consent at any time informally by email to <a target=\"_blank\" rel=\"noopener\" href=\"https:\/\/www.google.com\/search?q=mailto%3Akontakt%40fachschaftslisten.at\">kontakt@fachschaftslisten.at<\/a> without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Your Rights as a Data Subject<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Under the GDPR, you have the following rights regarding your data processed by us:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Right of Access (Art. 15 GDPR):<\/strong> You can request information about whether and which personal data we process about you.<\/li>\n\n\n\n<li><strong>Right to Rectification (Art. 16 GDPR):<\/strong> If incorrect or incomplete data is stored, you can request its correction. Data that is transmitted directly by your university or home organization (such as your matriculation number, official university email, or name in the identity management system) can only be corrected via the IT helpdesk or the self-service portal of your own higher education institution.<\/li>\n\n\n\n<li><strong>Right to Erasure (\u201eRight to Be Forgotten,\u201c Art. 17 GDPR):<\/strong> You have the right to erasure of your data, provided that no legal obligation or overriding grounds prevent this.<\/li>\n\n\n\n<li><strong>Right to Restriction of Processing (Art. 18 GDPR):<\/strong> Under certain conditions, you can request that your data only be processed in a restricted manner.<\/li>\n\n\n\n<li><strong>Right to Data Portability (Art. 20 GDPR):<\/strong> You can request to receive data that you have provided to us in a structured, commonly used, and machine-readable format.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Insofar as we process your personal data to safeguard legitimate interests in accordance with <strong>Art. 6 (1) (f) GDPR<\/strong> process (in particular when operating the web server and for web analysis), you have the right, <strong>to object to this processing at any time on grounds relating to your particular situation<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you would like to exercise your rights under the GDPR, contact us via: <strong><a href=\"https:\/\/www.google.com\/search?q=mailto%3Akontakt%40fachschaftslisten.at\" target=\"_blank\" rel=\"noopener\">kontakt@fachschaftslisten.at<\/a><\/strong>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Right to Lodge a Complaint with the Supervisory Authority<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If you believe that the processing of your data violates data protection law, you can contact us or the competent supervisory authority at any time:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Austrian Data Protection Authority<\/strong><br>Barichgasse 40\u201342<br>1030 Vienna<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Phone: +43 1 52 152 0<br>Email: <a href=\"https:\/\/www.google.com\/search?q=mailto%3Adsb%40dsb.gv.at\" target=\"_blank\" rel=\"noopener\">dsb@dsb.gv.at<\/a><br>Website: <a href=\"https:\/\/www.dsb.gv.at\" target=\"_blank\" rel=\"noopener\">dsb.gv.at<\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>Der Schutz deiner pers\u00f6nlichen Daten ist uns ein gro\u00dfes Anliegen. Wir behandeln deine Daten vertraulich und entsprechend den gesetzlichen Datenschutzvorschriften (DSGVO, TKG 2021) sowie dieser Datenschutzerkl\u00e4rung. Diese Datenschutzerkl\u00e4rung gilt ausschlie\u00dflich f\u00fcr unseren Authentifizierungs- und Login-Provider (Single Sign-On \/ Identity- &amp; Service-Provider). Dieser Dienst steht ausschlie\u00dflich Mitgliedern sowie Funktion\u00e4rinnen und Funktion\u00e4ren der Unabh\u00e4ngigen Fachschaftslisten \u00d6sterreichs und [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":29,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_acf":"","_uag_custom_page_level_css":"","iawp_total_views":13,"footnotes":""},"class_list":["post-2649","page","type-page","status-publish","hentry"],"mb":[],"acf":[],"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false,"trp-custom-language-flag":false},"uagb_author_info":{"display_name":"lucaeichler","author_link":"#"},"uagb_comment_info":0,"uagb_excerpt":"Der Schutz deiner pers\u00f6nlichen Daten ist uns ein gro\u00dfes Anliegen. Wir behandeln deine Daten vertraulich und entsprechend den gesetzlichen Datenschutzvorschriften (DSGVO, TKG 2021) sowie dieser Datenschutzerkl\u00e4rung. Diese Datenschutzerkl\u00e4rung gilt ausschlie\u00dflich f\u00fcr unseren Authentifizierungs- und Login-Provider (Single Sign-On \/ Identity- &amp; Service-Provider). Dieser Dienst steht ausschlie\u00dflich Mitgliedern sowie Funktion\u00e4rinnen und Funktion\u00e4ren der Unabh\u00e4ngigen Fachschaftslisten \u00d6sterreichs und&hellip;","mfb_acf":[],"mfb_rest_fields":["title","uagb_featured_image_src","uagb_author_info","uagb_comment_info","uagb_excerpt"],"_links":{"self":[{"href":"https:\/\/fachschaftslisten.at\/en\/wp-json\/wp\/v2\/pages\/2649","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fachschaftslisten.at\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/fachschaftslisten.at\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/fachschaftslisten.at\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fachschaftslisten.at\/en\/wp-json\/wp\/v2\/comments?post=2649"}],"version-history":[{"count":6,"href":"https:\/\/fachschaftslisten.at\/en\/wp-json\/wp\/v2\/pages\/2649\/revisions"}],"predecessor-version":[{"id":2696,"href":"https:\/\/fachschaftslisten.at\/en\/wp-json\/wp\/v2\/pages\/2649\/revisions\/2696"}],"wp:attachment":[{"href":"https:\/\/fachschaftslisten.at\/en\/wp-json\/wp\/v2\/media?parent=2649"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}