Privacy statement

for students

Protecting your data is of utmost importance to us. Our privacy statements for different groups of data subjects offer a brief overview of the personal data we collect and what it is used for.

We, CAMPUS 02 University of Applied Sciences (abbr. CAMPUS 02), Körblergasse 126, 8010 Graz, Austria, process the following data categories by automated means in the course of your training at our university of applied sciences for the purpose of meeting the provisions of the study contract and according to legal obligations:

  • Student master data 1 (personal identification number, gender, name, title, date of birth, degree programme and organisational form, status);
  • student master data 2 (place of birth, citizenship, CAMPUS 02 e-mail address, student photo);
  • social security number/alternative code;
  • address data;
  • contact details;
  • additional information (occupational activity, additional certificates, comments);
  • professional experience;
  • course information;
  • data regarding academic year repetition, interruption of a degree programme and exemption from attendance requirements;
  • inscription data;
  • admission criteria for Bachelor’s or previous programme;
  • admission criteria for Master’s;
  • further training certificates;
  • study contract;
  • degree programme documents;
  • theses and other written work;
  • final exam;
  • graduation documents; and
  • other documents.

In addition, we process the following data categories

  • during your application:
    Application data, application documents, entrance exam results, results from analysing application documents and education/training histories, results from the personal interview with the admission committee and data for statistical processing (PR)
  • as part of course unit organisation and student evaluation:
    Course unit data, evaluation data, attendance registration data, inscription data, learning products (e.g. photo reports, video analyses, etc.) and metadata for evaluation purposes (e.g. time of evaluation)
  • during Austrian National Union of Students (ÖH) elections and while administering ÖH representatives:
    Electoral roll for the ÖH elections and ÖH representatives (representatives of academic years, fields of study and CAMPUS 02)
  • in the course of invoicing for tuition fees, ÖH contributions and library fees:
    Data regarding the charging and payment of tuition fees, data regarding payment reminders for tuition fees (might include receipt and refunding data), book loans and requests for remission of tuition fees, and data regarding payment/payment reminders for library use
  • while using different IT services:
    User master data, printer data (e.g. print credit, etc.) and log files
  • Data generated when using the locking system in the Rosenhof building
    e.g. name, company affiliation, opening authorisations, recording of opening and locking behaviour
  • Data processed in the course of the time recording app
    in particular first name, last name, start times of the student time recording (as proof of the completion of teaching obligations), log data, e-mail address, course dates

In order to ensure up-to-date and functioning teaching activities, online courses and online examinations are offered via Microsoft “Teams”. CAMPUS 02 has the contractual obligation to ensure a proper running of the degree programmes as well as a duty to mitigation. With this offer CAMPUS 02 fulfils these obligations, as possible delays in the study duration due to the corona pandemic can be counteracted.

As CAMPUS 02 aims to design and further develop modern, interactive teaching and learning scenarios, images and videos may be recorded during course units. These recordings are only used and provided for documentation purposes (e.g. for photo reports on the learning platform and project reports).

In addition, your thesis(es) and transcript(s) may be used for teaching and learning purposes within the framework of courses (§ 2f para 5 Research Organisation Act (FOG) in connection with § 7 para 1 of the study contract)

In general, we collect the above-listed data categories directly from you. However, these categories may also include additional information, such as system-generated data, degree programme data required for processing, and performance evaluation data.

If you do not have an Austrian social security number and have not yet been given an alternative code, we will request one for you from Statistics Austria.

This data is processed based on the contractual relationship according to Art. 6 para. 1 cl. b of the EU General Data Protection Regulation (GDPR), legal obligations according to Art. 6 para. 1 cl. c of the GDPR and on the basis of legitimate interest according to Art. 6 para. 1 cl. f of the GDPR. It is processed for the purpose of fulfilling the provisions in the study contract, managing the degree programmes and protecting property of CAMPUS 02. The above-mentioned personal data is provided by you on a voluntary basis and is processed by us upon your consent so that we can meet contractual provisions. However, we can conclude and meet the provisions of the study contract only if you provide your data and if we are allowed to process it.

Upon expiry of your study contract, your personal data will be deleted step-by-step in accordance with the valid legal retention obligations.

The above-mentioned data is processed by automated means for the purpose of meeting the provisions of the study contract and based on legal obligations. This data is held for 80 years, starting from the end of the academic year, in which the study contract expires, in accordance with Art. 13 para. 8 of the University of Applied Sciences Studies Act (Fachhochschulgesetz, FHG) as proof of student graduation.

Data processed as part of course unit organisation, invoicing for tuition fees, mandatory contributions to the Austrian National Union of Students and library fees will be deleted after 10 years.

The data processed in the course of the student evaluation are stored for 7 years in accordance with the certification period of the QM system pursuant to § 22 (4) of the Higher Education Quality Assurance Act (HS-QSG).

Your social security number or alternative code will already be deleted after 2 years, starting from the end of the academic year, in which the study contract expires, in accordance with Art. 8 para. 5 of the Documentation in Education Act (Bildungsdokumentationsgesetz). Data processed during your application for a study place will also be deleted after 3 years. Data collected during the elections of the Austrian National Union of Students (ÖH) will be deleted after 2 years, starting from the last election day, in accordance with Art. 61 para. 2 of the Regulations on Student Union Elections (Hochschülerschafts-Wahlordnung, HSWO).

The data processed within the framework of the time recording app will be deleted at the end of the following semester.

All data (log files) collected in connection with the locking system are stored for a period of one month. After this period they will be irrevocably deleted.

The retention period may be extended in all cases where judicial or administrative proceedings are pending in which CAMPUS 02 has party status and in which this data is at issue.

Your personal data is treated as confidential and is generally processed only by CAMPUS 02 staff members internally.

However, data processors who have been commissioned by us can also process data for the purposes mentioned if they can ensure adequate data security. For example, in cases where support is required, external IT service providers can see and process the above-mentioned data categories.

We transfer personal data to the Agency for Quality Assurance and Accreditation Austria (AQ Austria), Renngasse 5, 1010 Vienna, Austria, based on Art. 28 para. 3 of the Act on Quality Assurance in Higher Education (Hochschul-Qualitätssicherungsgesetz, HS-QSG) in connection with Art. 23 paras. 1 and 4 of the FHG and on the Regulation governing the provision of information on UAS degree programmes (Verordnung zur Fachhochschul-Bereitstellung von Informationen über den Studienbetrieb).

Personal data is also transferred to the Bundesrechenzentrum GmbH (BRZ) within the framework of the data network of universities and universities of applied sciences in accordance with § 7a of the Education Documentation Act. In order to ensure the proper allocation of matriculation numbers, the following characteristics shall be stored: matriculation number, surname and first name(s), date of birth, gender, nationality, date of university entrance qualification, identification as invalid matriculation number, and area-specific personal identification number (BF) of the students for 99 years.

The Austrian National Union of Students (ÖH) receives personal student data according to Art. 6 of the Student Union Act (HochschülerInnnenschaftsgesetz, HSG). To be able to ensure lawful ÖH elections, this data is also transferred to the Electoral Commission of the ÖH to serve as the basis for the electoral roll in accordance with Art. 42 para. 6 of the HSG. Members of the Electoral Commission of CAMPUS 02 can also access the electoral roll.

Data required for verifying the entitlement requirements of students requesting a grant must be transferred by automated means to the Styrian study grant office upon their request according to Art. 3 para. 1 in connection with Art. 40 para. 7 of the Student Support Act (Studienförderungsgesetz, StudFG).

The Master’s theses to be written in the course of the degree programme (author, acknowledgements to named persons, etc.) are passed on to Turnitin LLC for plagiarism assessment. This transfer serves to ensure compliance with the “Rules of Good Scientific Practice” (Art 6, Paragraph 1, Letter c or f GDPR)

The Master’s theses that students have to write in the course of your studies are available to the public in print form at CAMPUS 02’s library and electronically via the library software (currently Aleph) (Art. 19 para. 3 of the FHG). In the interest of CAMPUS 02, the departments also make a few selected Bachelor’s theses available to the public.

We use Microsoft Office 365 as the cloud service for our e-mail correspondence as well as for the provision of on-line classes and online examinations.

Hosting is mainly provided within the European Union in accordance with European data protection laws. Some services and technical support can also be provided from outside of the EU. Some profile data (names, password, PUID number) is also saved in the US.

Data transfers to providers in the US are permitted under Art 49 (1) lit d GDPR for reasons of substantial public interest. In order to safeguard the public interest of scientifically based education, it is necessary for CAMPUS 02 to use Microsoft’s Cloud Service for its study and teaching activities. Further information on data processing can be found in Microsoft’s privacy policy (https://privacy.microsoft.com/en-gb/privacystatement).

In fulfilment of the study contract (Art. 6 Para. 1 letter b GDPR), CAMPUS 02 will provide you with software tools so that you can carry out your tasks and duties. For example, the cloud service “Unipark” provided by the company Questback is made available for conducting online surveys. Data is therefore transferred to Questback for the purpose of conducting the survey. Further information on data processing can be found in Questback’s data protection information (https://www.questback.com/data-privacy/).

To ensure that sufficient parking spaces can be made available to part-time students (due to legitimate interest according to Art 6 para 1 lit f GDPR), individual master data are transmitted to Arivo Parking Solutions GmbH.

Apart from the data recipients mentioned, CAMPUS 02 does generally not disclose information to third parties. Third parties are asked to directly contact the student.

Please note that we will update this privacy statement from time to time (e.g. due to law amendments, usage of new technology, new study opportunities). We recommend that you regularly check it for updates.

In general, you have right of access, the right to rectification, to erasure, to restrict, to data portability, to withdraw and to object.

Please contact us – we will be happy to help.

Data Protection Coordination Team
at CAMPUS 02
CAMPUS 02 University of Applied Sciences
Körblergasse 126, 8010 Graz, Austria
+43 316 6002-348

Data Protection Officer
at CAMPUS 02


If you believe that processing your data violates data protection laws or that your data protection rights have been infringed in some other way, you can also file a complaint with the supervisory authority. In Austria, the competent supervisory authority is the Austrian Data Protection Authority in Barichgasse 40-42, 1030 Vienna, telephone no.: +43 1 52 152-0, e-mail: dsb@dsb.gv.at.