The protection of your data is important to us. We take into consideration the legal provisions applicable to data protection in Austria and in the EU.
Purpose of data usage:
Your data provided through the 3G application (name, date of birth, digital key validity, vaccination/testing/positive test after recovery data) will be used to generate lists for teaching purposes showing which students have demonstrated 3G status.
The exact 3G status is not recorded, only the fact whether one of the properties "recovered", "vaccinated" or "tested" is present, furthermore the validity period is calculated and stored in the system.
The purpose of this data processing is to prevent the spread of the Covid 19 pandemic and to create a safe environment for teaching at FH Vorarlberg. This is done by making available digital lists, valid for the day, from which it is clear and transparent for the teaching staff of the respective courses and the corresponding study program directors which persons of the cohort have proven 3G status.
Evidence of 3G status in digital form, together with storage of the period of validity of the 3G status, is not mandatory. Alternatively, students can prove 3G status by printing out their certificate or - if they do not wish to prove 3G status - wear an FFP2 mask at FH Vorarlberg.
On the one hand, the processing is carried out on the basis of a measure to prevent the spread of the COVID-19 pandemic pursuant to § 1 para 3 2nd C-HG; on the other hand, it can be based on the fulfillment of the educational mandate on Art. 6 para 1 lit. e DSGVO, since the FH Vorarlberg can only fulfill the educational mandate assigned to it if teaching events are carried out in such a way as to ensure the lowest possible risk of infection for students and teaching staff.
With regard to the processing of the 3G status, this is a health data, in this regard the processing is based on Art. 9 para 2 lit. a DSGVO, the explicit consent of the data subjects.
The express consent can be revoked at any time directly in the application, without, however, affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
The provision of personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. The data subjects are not obliged to provide the personal data. If the provision of the data is refused, the 3G proof can be provided daily in person by means of an appropriate document (vaccination certificate, recovery certificate, test proof), alternatively it is possible to wear an FFP2 mask.
The FH Vorarlberg GmbH validates the QR code according to the EU requirements (https://ec.europa.eu/health/sites/default/files/ehealth/docs/digital-green-certificates_dt-specifications_en.pdf).
Furthermore, the lecturers are provided with a daily updated digital list of the persons who participate in their courses and have proven a 3G status. The respective study program directors are also authorized to have access to these lists.
Duration of Data Retention/Data Deletion:
The data will be stored until the expiry of the 2nd COVID-19 Higher Education Act or a successor provisionexpires, until the validity of the 3G proof expires, or until the consent is revoked or the studies are terminated, and then deleted. Also, if the rules for evidence of low epidemiological risk change, the data may need to be deleted and re-registration may be required.
Your data protection rights:
We kindly wish to note that within the scope provided for under the law, you have the right to information, correction, deletion and restriction of the processing and the right to object to the processing of your personal data. If you have any queries or requests in connection with this, you can contact firstname.lastname@example.org.
If the processing is carried out on the basis of consent, you can withdraw this at any time by emailing email@example.com. This does not affect the legality of the data processing carried out up to the point of the withdrawal or objection.
If you believe that unlawful data processing is being carried out, please contact us on firstname.lastname@example.org. You also have the right to complain to the Austrian Data Protection Authority as the competent supervisory authority.
Responsible for data processing:
Fachhochschule Vorarlberg GmbH, Campus V
Hochschulstraße 1, 6850 Dornbirn
email@example.com, +43 5572 792-0
Data Protection Officer contact: firstname.lastname@example.org
If you have any questions or concerns about data protection at the Vorarlberg University of Applied Sciences, our internal contact would be happy to help. You can contact them via email on email@example.com. Further information on data protection can be found at https://www.fhv.at/datenschutz/.
This text is published in German and English. In case of ambiguities or disputes the German version shall be binding.