Data protection declaration

ECMTB2026 is an event hosted at the University of Graz, and in particular its digital infrastructure. As such, relevant parts of the data protection declaration that can be found on the webpage of the University of Graz also extend to both this site and the site for registration administration .

Contact information

• Data protection officer for ECMTB2026: data-protection@ecmtb2026.org / Heinrichstraße 36, 8010 Graz
• Data protection office for the University of Graz: dsba@uni-graz.at / Universitätsplatz 3, 8010 Graz

Rights of data subjects

In connection with the processing of personal data by the University of Graz, data subjects generally have the following rights:

• Right of access by the data subject (Art 15 GDPR);
• Right to rectification (Art 16 GDPR) or to erasure (Art 17 GDPR) and to restriction of processing (Art 18 GDPR);
• Right to data portability (Art 20 GDPR);
• Right to object (Art 21 GDPR);
• and if processing of data requires consent: Right to withdrawal of consent (Art 7 (3) GDPR), which does not affect the lawfulness of processing based on consent before its withdrawal;

You can assert your rights in writing:

• By post:
Department of Mathematics and Scientific Computing / University of Graz
Attn: ECMTB2026 – Data Protection
Heinrichstraße 36
8010 Graz

• By E-mail: data-protection@ecmtb2026.org

In addition, data subjects have the right to lodge a complaint with a supervisory authority (Art 77 GDPR), which in Austria is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, phone: +43 1 52 152-0, e-mail: dsb@dsb.gv.at.

Recipients or categories of recipients

In principle, your personal data will only be processed within the IT-infrastructure of the University of Graz, by the organizing committee of ECMTB2026. If data processing also takes place externally (e.g. transfer to third parties, use of processors, data exchange between joint controllers), you will be informed about this in the course of the respective processing activities.

Storing of personal data

Unless the storing of personal data and possible restrictions of the right to erasure, the right to withdraw consent or the right to object are addressed separately for a specific processing activity, the organizers of ECMTB2026 stores your personal data as follows:

• If the data subject has given consent to the processing (Art 6 [1] [a] GDPR): Personal data processed on the basis of given consent is stored until consent is withdrawn, but at the longest until the purpose of storing the personal data has been achieved. In addition, only absolutely necessary personal data (name, date of consent, proof of consent, e.g., signature) is stored for the purpose of proving consent or withdrawal thereof for a period of 3 years from the date of withdrawal.
• If processing is necessary for the performance of a contract (Art 6 [1] [b] GDPR): Personal data is stored for as long as necessary to fulfil the contract. In addition, personal data is only stored until any statutory storage periods or statute of limitations with regard to potential legal claims expire.
• If processing is necessary for compliance with a legal obligation (Art 6 [1] [c] GDPR): Personal data is stored for as long as this is legally required. In addition, personal data is only stored until any statutory storage periods or statute of limitations with regard to potential legal claims expire.
• If processing is necessary for the performance of a task carried out in the public interest (Art 6 [1] [e] GDPR): Personal data is stored for as long as this is necessary due to the public interest or until a (justified) objection is raised. In addition, personal data is only stored until any statutory storage periods or statute of limitations with regard to potential legal claims expire.
• If processing is necessary for the purposes of the legitimate interests pursued by the controller (Art 6 [1] [f] GDPR): Personal data is stored for as long as this is necessary to protect legitimate interests or until a (justified) objection is raised. In addition, personal data is only stored until any statutory storage periods or statute of limitations with regard to potential legal claims expire.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction. These measures include encryption, access controls, and regular security assessments.

Processing activities

Visits to the ECMTB2026 web pages

Description and scope of data processing

When the ECMTB2026 websites are accessed, our web servers temporarily store each access in a log file. The following data is recorded and stored until it is automatically deleted:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved data
• Amount of data transferred
• Notification of whether the retrieval was successful
• Recognition data of the browser and operating system used
• Website from which the access was made
• Name of your internet access provider

Purpose of data processing

This data is processed for the purpose of ensuring the use of the website (connection establishment), system security and the technical administration of the network infrastructure. In addition, the processing serves to optimise the ECMTB2026 website. The IP address is only analysed in the event of attacks on our network infrastructure.

Legal basis for data processing

The processing of the above-mentioned data is carried out in particular on the basis of the existing overriding legitimate interest (Art 6 para 1 lit f GDPR) of the organizers of ECMTB2026 in ensuring system security, the technical administration of the network infrastructure and the optimisation of the website in order to facilitate your registration, manage event logistics, and communicate important information related to the event.

Payment

See the relevant "Events" section of the data protection declaration of the University of Graz at https://www.uni-graz.at/en/data-protection-declaration/ .

Registration for ECMTB2026

Description and scope of data processing

Generally speaking, when registering for an event, the following personal data is processed:

• First and last name
• Address
• E-mail address

In addition to the data listed above, other personal data may be processed should you provide it, specifically:

• Gender
• Academic degree
• Telephone number
• Institution/organisation/field of study
• Content data (if you leave a message)

Purpose of data processing

The above personal data is processed as part of the registration, organisation and implementation of the event.

Legal basis for data processing

This personal data is processed in particular for the performance of a contract or in order to take required steps prior to entering into a contract in accordance with Art 6 (1b) GDPR.

Processing of this personal data is absolutely necessary for the administration of the event. If you do not provide us with this personal data, participation in the event is unfortunately not possible.