Privacy Policy

for Students, Event Participants, and Website Visitors of 42 Vienna

The protection of your personal data ^[1] (“Data”) is of particular concern to us. In this Privacy Policy, we therefore inform you in accordance with Articles 13 and 14 of the General Data Protection Regulation (“GDPR”) about how we, as the data controller, process your Data in the context of

• providing our campus (“42 Campus”) infrastructure and other support services to you, to enable you to complete IT and software development training modules (“42 Modules”) of the worldwide 42 Network (Association 42, 96 Boulevard Bessières, 75017 Paris, " 42 Network"); and
• the organization and administration of events (e.g. workshops, projects, job fairs; " Events"); and
• the provision of our website https://www.42vienna.com (“Website”).

Controller of your Data and contact

The person responsible under data protection law for Data processing within the scope of this Privacy Policy is:

What categories of Data do we process?

In connection with providing the infrastructure of the 42 Campus and support services for completing 42 Modules, we process Data that falls under the following categories:

• Name
• Contact information (e-mail address, phone number)
• Information on 42 Modules attended / to be completed
• Other disclosed Data (e.g. address, curriculum vitae)
• Photos and videos
• Data in connection with access to the 42 Vienna Campus

Some of the aforementioned Data is not collected directly from you, but is transmitted to us by the 42 Network if, during the registration process for the completion of 42 Modules, you indicate to the 42 Network that you wish to use the 42 Campus infrastructure and services of 42 Vienna for their completion.

In connection with the organization and administration of Events, we process Data that fall under the following categories:

• Name
• Contact information (e-mail address, phone number)
• Other disclosed Data (e.g. address, curriculum vitae)
• Photos and videos
• Data in connection with access to the 42 Vienna Campus

In connection with the provision of our Website, we process Data that fall under the following categories:

• IP address and IP location
• Other access Data (such as information on your browser, system Data on devices and operating systems used, date and time of server request, referrer URL).

We collect this Data automatically with the help of so-called cookies (see point 3 e.).

How do we process your Data?

Completion of 42 Modules

If you would like to complete 42 Modules at the 42 Campus and make use of the associated services of 42 Vienna, we process your Data for this purpose on the basis of the fulfillment of (pre)contractual obligations pursuant to Article 6 para 1 lit b GDPR as well as for the fulfillment of legal obligations pursuant to Article 6 para 1 lit c GDPR (e.g. accounting) and for the protection of our legitimate interests pursuant to Article 6 para 1 lit f GDPR.

Registration for and participation in Events

If you participate in an Event organized by 42 Vienna, which is or will be organized independently of the 42 Network, we process your Data for the purpose of processing the registration and participation based on the fulfillment of (pre)contractual obligations pursuant to Article 6 para 1 lit b GDPR as well as for the fulfillment of legal obligations pursuant to Article 6 para 1 lit c GDPR (e.g. accounting) and for the protection of our legitimate interests pursuant to Article 6 para 1 lit f GDPR.

Taking photos and / or videos within the framework of 42 modules and events.

Provided that you have given us your consent in accordance with Article 6 para 1 lit a GDPR, we will take photos and / or videos of you in the context of our Events or during 42 Modules and use them for publication on our Website, in (print) publications and on the social media pages of 42 Vienna.

The photos and/or videos are used exclusively for public relations or advertising purposes of 42 Vienna. You are aware that photos and/or videos can be accessed on the internet by any person. Despite all technical precautions, it cannot be ruled out that such persons may use the photos and/or videos or pass them on to other persons.

You can withdraw your consent at any time by e-mail to hello@42vienna.com with effect for the future.

Campus access control & video surveillance

For the protection of property and IT infrastructure, for the purpose of exercising domiciliary rights as well as for the prevention of criminal offences, the Campus of 42 Vienna is protected by access systems. Access is only possible with an appropriate Campus Card. Access by means of the Campus Card is registered. In addition, publicly accessible areas, especially entrance and exit areas, are equipped with video surveillance systems, which are also marked accordingly in each case. Video recordings are deleted after 72 hours at the latest.

The Data processing takes place on the basis of Art 6 para 1 lit f GDPR. We have a legitimate interest to protect our staff, property and Data processing equipment.

Website

Contact

In case of inquiries via our contact form on the Website, telephone or e-mail, we process your Data (name, e-mail address, telephone number as well as other disclosed Data) for the purpose of administrating your inquiry. Depending on the request, the Data processing is based on the fulfillment of (pre)contractual obligations pursuant to Article 6 para 1 lit b GDPR or based on our legitimate interests pursuant to Article 6 para 1 lit f GDPR.

Cookies, analytics tools and plug-ins

Our Website uses cookies and analytics tools provided by third parties to make the Website user-friendly. Cookies are small text files that are temporarily stored on your terminal device with the help of the browser and/or that your browser saves. In addition, you will find plug-ins from third-party providers on our Website, through which the Website is equipped with additional functionalities. When you visit our Website, these plug-ins are deactivated by default, so they do not send any Data to third parties without any action on your part.

The collection of your Data in connection with cookies, analysis tools and plug-ins is based on your consent pursuant to Article 6 para 1 lit a GDPR (or in connection with Section 165 para 3 Austrian Telecommunications Act, “TKG”) in the case of so-called "persistent"cookies, which are stored on the end device of the Website visitor).

You can reject the storage of individual cookies or the use of analysis tools as well as the activation of plug-ins by means of configuration in the cookie banner. You can revoke any consent you may have given to the use of cookies and analysis tools and to the activation of plug-ins at a later time with effect for the future at any time by means of configuration in the cookie banner (accessible via the button located at the bottom right edge of the screen) or alternatively via your browser settings.

When cookies are set or when analysis tools are used and plug-ins are activated on the basis of voluntary consent, your Data is sometimes transferred to recipients in third countries outside the EEA, in particular to the USA. The USA is not certified by the European Court of Justice as having an adequate level of data protection; in particular, there is a risk that Data may be viewed by US authorities for control and monitoring purposes. By giving your consent, you agree that cookies and analysis tools from third-party providers in the USA or from other insecure third countries may be used and accept a possible lower level of data protection (Article 49 para 1 lit a GDPR).

Cookies that are absolutely necessary for the functioning of the Website (technically necessary cookies) cannot be rejected or deactivated. In these cases, the Data processing is based on our legitimate interest pursuant to Article 6 para 1 lit f GDPR to be able to provide our Website in an appropriately functional manner.

External links

On our Website you will find external links that lead to websites of social media platforms (Facebook, Instagram and LinkedIn). The external links are displayed on the Website as a button with the logo and name of the respective social media service. When you visit our Website, these buttons do not send any Data to third parties without any action on your part.

When you click on a social media button, you will be redirected to the website of a third party (the respective social media service provider). After redirection, we have no influence on the use of cookies and on the Data collected by the third-party provider. The social media service providers use their own cookies and process your Data in accordance with their own privacy policies. We recommend that you check the respective privacy statements before voluntarily providing Data to these providers.

In this context, please note that clicking on the external links may result in your Data being transferred to and processed in third countries outside the EEA, in particular the USA. The European Court of Justice has not certified an adequate level of data protection in the USA; in particular, there is a risk that Data may be viewed by US authorities for control and monitoring purposes.

Storage duration

We process your Data for as long as necessary to fulfill the purpose underlying the respective processing and in accordance with legal documentation and retention obligations. When Data processing is no longer necessary, we will delete your Data.

Session cookies are only needed for the duration of your current session and are deleted again or lose their validity as soon as you leave our Website or your current session expires.

Persistent cookies are stored for a maximum duration of 13 months.

Who will your Data be shared with?

Your Data will be transmitted to the following recipients in the course of processing for the above-mentioned purposes and, if necessary, due to legal or official obligations:

• The 42 network (in particular if required for the completion of 42 Modules)
• IT Service Provider
• If necessary to legal representatives, advisors, notaries, courts and administrative authorities
• If necessary to banks and insurance companies

Insofar as your Data is processed by our service providers (processors), we ensure that they only process your Data within the scope of our order and for the respective purposes stated above.

Transfer to countries outside the EEA

If the above-mentioned recipients of your Data are located outside the EEA and the country in question has also not been determined by decision of the EU Commission to have an adequate level of data protection, we will ensure that the transfer is made on the basis of standard contractual clauses or otherwise in accordance with Articles 46, 47 or 49 of the GDPR.

What rights do you have?

Right to information

As long as we process your Data, you have the right to information about the purposes of processing, the categories of Data, the origin and the recipients of your Data and the duration of storage.

Rectification and erasure of Data

If we process inaccurate or incomplete Data, you have the right to rectification of such Data. If your Data is processed unlawfully, you may also request us to erase your Data. You may also request the erasure of your Data if your Data is processed unlawfully, subject to legal obligations preventing the erasure of your Data.

Limitation of processing

You may request us to limit the processing of your Data in certain cases.

Data portability

You have the right to receive the Data, which you have provided to us, in a structured, commonly used and machine-readable format. You have the right to direct transmission of those Data to another controller as far as this is technically feasible.

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of Data concerning you. If you object to processing of your Data, we shall cease to process this Data unless our legitimate interests to processing your Data prevail. Where Data are processed for direct marketing purposes, you shall have the right to object at any time to processing of Data concerning you. In this case, we will cease the processing of your Data for marketing purposes immediately.

Withdrawal of consent

You have the right to withdraw your consent to process your Data (where such processing is based on Art 6 para 1 lit a GDPR) at any time. This does not affect the lawfulness of the Data processing carried out up to this point.

Complaint

You have the right to lodge a complaint with the supervisory authority, if you believe that the processing of your Data violates data protection law or your rights to protection of your Data have been infringed. In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).