{"id":2649,"date":"2026-09-28T15:53:19","date_gmt":"2026-09-28T13:53:19","guid":{"rendered":"https:\/\/fachschaftslisten.at\/?page_id=2649"},"modified":"2026-09-28T16:05:49","modified_gmt":"2026-09-28T14:05:49","slug":"datenschutzerklaerung-login","status":"publish","type":"page","link":"https:\/\/fachschaftslisten.at\/en\/datenschutzerklaerung-login\/","title":{"rendered":"Privacy Policy Internal Login Service"},"content":{"rendered":"<p class=\"wp-block-paragraph\">The protection of your personal data is a major concern to us. We treat your data confidentially and in accordance with the statutory data protection regulations (GDPR, TKG 2021) as well as this privacy policy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This privacy policy applies <strong>exclusively to our authentication and login provider<\/strong> (Single Sign-On \/ Identity &amp; Service Provider). This service is available exclusively to members as well as functionaries of the Independent Students Associations of Austria and associated university groups in order to gain access to internal working areas, platforms, and IT resources of the association.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The controller responsible for data processing is:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Unabh\u00e4ngige Fachschaftslisten \u00d6sterreichs<\/strong><br>Gusshausstra\u00dfe 27-29<br>1040 Vienna<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"mailto:kontakt@fachschaftslisten.at\">kontakt@fachschaftslisten.at<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Authorized Founders:<\/strong> Paul Koo, Lennart Borchers, Luca Eichler, Timo Hilger, Alexander Zauner, Helena Fitze, Lukas Wurth, Lukas Ertl, Gleb Grinevich<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Non-profit association<\/strong><br><strong>Competent Association Authority:<\/strong> LPD Vienna<br><strong>ZVR:<\/strong> 1429212598<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Name and description of the service<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Service name:<\/strong> Independent Students Associations of Austria (FL\u00d6)<\/li>\n\n\n\n<li><strong>Description:<\/strong> Central login service for internal services of FL\u00d6<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Hosting &amp; Server Log Files<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Our login service is hosted at:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>ALL-INKL.COM \u2013 New Media M\u00fcnnich<\/strong><br>Hauptstra\u00dfe 68<br>02742 Friedersdorf, Germany<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">(Server location: Germany \/ European Union)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We have concluded a data processing agreement (DPA) with ALL-INKL in accordance with Art. 28 GDPR. This ensures that the service provider processes the data of our visitors only according to our instructions and in compliance with strict EU security standards.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Collection of server log files<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">With every login process, the server automatically records technical connection information. The following data is stored in so-called server log files:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Your IP address<\/li>\n\n\n\n<li>Date and time of the authentication request<\/li>\n\n\n\n<li>Internal target service accessed<\/li>\n\n\n\n<li>HTTP status code \/ transmission status<\/li>\n\n\n\n<li>Browser type, version, and operating system<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Purpose &amp; Legal Basis<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The storage of log files is technically necessary to ensure the availability and integrity of our service as well as to defend against disruptions or attacks on the authentication infrastructure. The legal basis is our legitimate interest in secure and error-free operation pursuant to Art. 6 (1) (f) GDPR.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Storage Duration<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">For security reasons, log files are stored by default for a maximum of 7 days and then deleted or anonymized, unless longer retention is required to clarify a specific security incident.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Authentication &amp; Member Data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In order for you to gain access to internal systems as an association member, we process personal data. This data either comes directly from your university\/home organization or is generated during your use.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you log in via your university or another home organization, the latter transmits the following authorization data to us:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Mandatory attributes<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">These attributes are transmitted to all services<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>eduPersonPrincipalName:<\/strong> Unique, persistent user identifier in the format <code>kennung@organisation.at<\/code>. Is mandatory to uniquely identify your association account with every login.<\/li>\n\n\n\n<li><strong>eduPersonScopedAffiliation:<\/strong> Your role or status at the home organization (e.g. <code>student@...<\/code>, <code>member@...<\/code>). Is required to verify authorization to use the association's internal resources.<\/li>\n\n\n\n<li><strong>mail:<\/strong> Your official email address. Is processed for security-related notifications, account management, and association-related communications.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Optional attributes<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">These attributes are transmitted to certain services to improve the display of the person in the service and to enable certain features.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>givenName:<\/strong> Your first name (for personal address in the systems).<\/li>\n\n\n\n<li><strong>sn:<\/strong> Your last name \/ family name (for better display in the systems).<\/li>\n\n\n\n<li><strong>displayName:<\/strong> Your full display name (for better display in the systems).<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Purpose of data processing<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>For authorization and management of your access rights to internal IT systems, computing resources, and platforms.<\/li>\n\n\n\n<li>To ensure the reliability and integrity of our association-internal data.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Legal bases<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Performance of a contract \/ membership relationship (Art. 6 (1) (b) GDPR):<\/strong> The processing is strictly necessary to provide you with the access to the member systems that you have requested.<\/li>\n\n\n\n<li><strong>Legitimate interest (Art. 6 (1) (f) GDPR):<\/strong> For administrative tasks, resource allocation, and system security.<\/li>\n\n\n\n<li><strong>Consent (Art. 6 para. 1 lit. a GDPR):<\/strong> If you store additional voluntary information in your profile.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Storage duration &amp; account deletion<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Your user data will be stored for the duration of your active membership or association activity.<\/li>\n\n\n\n<li>Your access will be deleted or anonymized when you leave the association, you request deletion, or if you have not used the service for more than 18 months.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Disclosure to third parties &amp; visibility within the association<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Your data will be treated confidentially and will not be shared for advertising purposes. Transmission only occurs in the following cases:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Internal association services:<\/strong> During login, necessary identity attributes are transmitted to the respective platform accessed (e.g., internal association wiki, Nextcloud, chat). Please note that your name or profile may be visible to other authorized members in these systems (e.g., in the version history: <em>\u201eLast edited by First Name Last Name\u201c<\/em>).<\/li>\n\n\n\n<li><strong>Legal obligation:<\/strong> If we are legally, officially, or judicially obligated to disclose data.<\/li>\n\n\n\n<li><strong>Enforcement of terms of use:<\/strong> For investigating abusive use or for preventing damages.<\/li>\n\n\n\n<li><strong>Third-country transfer:<\/strong> No transfer to third countries outside the EU or EEA takes place. Should this be necessary in exceptional cases, it will occur exclusively in compliance with EU data protection standards (e.g., through adequacy decisions or EU standard contractual clauses).<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Notice of Your Right to Withdraw Consent<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Insofar as data processing is based on your separate consent, you have the right to withdraw this consent at any time informally by email to <a target=\"_blank\" rel=\"noopener\" href=\"https:\/\/www.google.com\/search?q=mailto%3Akontakt%40fachschaftslisten.at\">kontakt@fachschaftslisten.at<\/a> without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Your Rights as a Data Subject<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Under the GDPR, you have the following rights regarding your data processed by us:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Right of Access (Art. 15 GDPR):<\/strong> You can request information about whether and which personal data we process about you.<\/li>\n\n\n\n<li><strong>Right to Rectification (Art. 16 GDPR):<\/strong> If incorrect or incomplete data is stored, you can request its correction. Data that is transmitted directly by your university or home organization (such as your matriculation number, official university email, or name in the identity management system) can only be corrected via the IT helpdesk or the self-service portal of your own higher education institution.<\/li>\n\n\n\n<li><strong>Right to Erasure (\u201eRight to Be Forgotten,\u201c Art. 17 GDPR):<\/strong> You have the right to erasure of your data, provided that no legal obligation or overriding grounds prevent this.<\/li>\n\n\n\n<li><strong>Right to Restriction of Processing (Art. 18 GDPR):<\/strong> Under certain conditions, you can request that your data only be processed in a restricted manner.<\/li>\n\n\n\n<li><strong>Right to Data Portability (Art. 20 GDPR):<\/strong> You can request to receive data that you have provided to us in a structured, commonly used, and machine-readable format.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Insofar as we process your personal data to safeguard legitimate interests in accordance with <strong>Art. 6 (1) (f) GDPR<\/strong> process (in particular when operating the web server and for web analysis), you have the right, <strong>to object to this processing at any time on grounds relating to your particular situation<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you would like to exercise your rights under the GDPR, contact us via: <strong><a href=\"https:\/\/www.google.com\/search?q=mailto%3Akontakt%40fachschaftslisten.at\" target=\"_blank\" rel=\"noopener\">kontakt@fachschaftslisten.at<\/a><\/strong>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Right to Lodge a Complaint with the Supervisory Authority<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If you believe that the processing of your data violates data protection law, you can contact us or the competent supervisory authority at any time:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Austrian Data Protection Authority<\/strong><br>Barichgasse 40\u201342<br>1030 Vienna<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Phone: +43 1 52 152 0<br>Email: <a href=\"https:\/\/www.google.com\/search?q=mailto%3Adsb%40dsb.gv.at\" target=\"_blank\" rel=\"noopener\">dsb@dsb.gv.at<\/a><br>Website: <a href=\"https:\/\/www.dsb.gv.at\" target=\"_blank\" rel=\"noopener\">dsb.gv.at<\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>Der Schutz deiner pers\u00f6nlichen Daten ist uns ein gro\u00dfes Anliegen. Wir behandeln deine Daten vertraulich und entsprechend den gesetzlichen Datenschutzvorschriften (DSGVO, TKG 2021) sowie dieser Datenschutzerkl\u00e4rung. Diese Datenschutzerkl\u00e4rung gilt ausschlie\u00dflich f\u00fcr unseren Authentifizierungs- und Login-Provider (Single Sign-On \/ Identity- &amp; Service-Provider). Dieser Dienst steht ausschlie\u00dflich Mitgliedern sowie Funktion\u00e4rinnen und Funktion\u00e4ren der Unabh\u00e4ngigen Fachschaftslisten \u00d6sterreichs und [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":29,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_acf":"","_uag_custom_page_level_css":"","iawp_total_views":0,"footnotes":""},"class_list":["post-2649","page","type-page","status-publish","hentry"],"mb":[],"acf":[],"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false,"trp-custom-language-flag":false},"uagb_author_info":{"display_name":"lucaeichler","author_link":"#"},"uagb_comment_info":0,"uagb_excerpt":"Der Schutz deiner pers\u00f6nlichen Daten ist uns ein gro\u00dfes Anliegen. Wir behandeln deine Daten vertraulich und entsprechend den gesetzlichen Datenschutzvorschriften (DSGVO, TKG 2021) sowie dieser Datenschutzerkl\u00e4rung. Diese Datenschutzerkl\u00e4rung gilt ausschlie\u00dflich f\u00fcr unseren Authentifizierungs- und Login-Provider (Single Sign-On \/ Identity- &amp; Service-Provider). Dieser Dienst steht ausschlie\u00dflich Mitgliedern sowie Funktion\u00e4rinnen und Funktion\u00e4ren der Unabh\u00e4ngigen Fachschaftslisten \u00d6sterreichs und&hellip;","mfb_acf":[],"mfb_rest_fields":["title","uagb_featured_image_src","uagb_author_info","uagb_comment_info","uagb_excerpt"],"_links":{"self":[{"href":"https:\/\/fachschaftslisten.at\/en\/wp-json\/wp\/v2\/pages\/2649","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fachschaftslisten.at\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/fachschaftslisten.at\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/fachschaftslisten.at\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fachschaftslisten.at\/en\/wp-json\/wp\/v2\/comments?post=2649"}],"version-history":[{"count":2,"href":"https:\/\/fachschaftslisten.at\/en\/wp-json\/wp\/v2\/pages\/2649\/revisions"}],"predecessor-version":[{"id":2653,"href":"https:\/\/fachschaftslisten.at\/en\/wp-json\/wp\/v2\/pages\/2649\/revisions\/2653"}],"wp:attachment":[{"href":"https:\/\/fachschaftslisten.at\/en\/wp-json\/wp\/v2\/media?parent=2649"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}