Privacy Policy
Last updated: 22.07.2026
1. Data Controller
The data controller for this website is:
Cluster of Excellence Circular Bioengineering
Muthgasse 18
1190 Vienna, Austria
Email: info@circularbioengineering.at
Data Protection Officer at BOKU: datenschutz@boku.ac.at
Web Hosting
This website is hosted by:
BOKU University
Gregor-Mendel-Straße 33
1180 Vienna, Austria
The hosting provider may process server log files and technical data necessary for the operation and security of the website. Legal basis: Legitimate interest (Art. 6 para. 1 lit. f GDPR).
BOKU University
Gregor-Mendel-Straße 33
1180 Vienna, Austria
The hosting provider may process server log files and technical data necessary for the operation and security of the website. Legal basis: Legitimate interest (Art. 6 para. 1 lit. f GDPR).
2. General Information
The protection of your personal data is important to us. We process your data in accordance with the applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
3. Data Collection on This Website
3.1 Server Log Files
When you visit our website, our web server automatically collects and stores information in so-called server log files. This information includes:
- Browser type and version
- Operating system used
- Referrer URL (previously visited page)
- Host name of the accessing computer (IP address)
- Time of the server request
- HTTP status code
Legal basis: Legitimate interest (Art. 6 para. 1 lit. f GDPR) for the technical provision and security of the website.
Storage duration: Log files are automatically deleted after 90 days.
3.2 Cookies
This website uses cookies for essential functions as well as, subject to your consent, cookies for additional functionality. For detailed information on the cookies and services used, please see our Cookie Policy.
To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and the related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/.
The legal bases for the processing of personal data in this context are Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents. The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. However, if you do not provide the personal data, we will not be able to manage your consents.
To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and the related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/.
The legal bases for the processing of personal data in this context are Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents. The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. However, if you do not provide the personal data, we will not be able to manage your consents.
3.3 Contact Forms
If you contact us via info@circularbioengineering.at, the data you provide (name, email address, message content) will be stored for the purpose of processing your inquiry.
Legal basis: Consent (Art. 6 para. 1 lit. a GDPR) or contract performance (Art. 6 para. 1 lit. b GDPR).
Storage duration: Until the inquiry is resolved and for a maximum of 2 years, unless statutory retention obligations require longer storage.
4. Legal Bases, Purposes, Recipients, Storage Duration and Automated Decision-Making
4.1 Purpose of Processing
We process personal data exclusively for the following purposes: provision, operation and security of the website; responding to inquiries; and, subject to your consent, the display of embedded third-party content (e.g. videos, maps).
4.2 Legal Bases
Processing is based on Art. 6 para. 1 GDPR, in particular: lit. a (consent, e.g. for functional cookies and embedded third-party content), lit. b (contract performance, e.g. processing of inquiries), and lit. f (legitimate interest, e.g. technical provision and security of the website). Where processing is based on consent, you may withdraw it at any time with effect for the future.
4.3 Recipients of Data
Your personal data is transmitted to the following recipients:
- BOKU University as hosting provider of this website (see Section 1);
- IT service providers acting on our behalf as processors, where applicable;
- Google Ireland Limited / Google LLC, if you consent to functional services (YouTube, Google Maps). In this case, data may also be transferred to third countries outside the EU/EEA, in particular the USA. This transfer is safeguarded by Google LLC’s certification under the EU-U.S. Data Privacy Framework and, for processing at other Google locations, by EU standard contractual clauses concluded by the provider with its sub-processors. Details can be found in our Cookie Policy.
4.4 Storage Duration
Unless a specific storage period is stated within this privacy policy, personal data will be stored only for as long as necessary to fulfil the purpose for which it was collected. In any case, the data will be stored for as long as statutory retention obligations exist or limitation periods for potential legal claims have not yet expired.
4.5 Automated Decision-Making
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place on this website.
4.6 Obligation to Provide Data
You are neither legally nor contractually obliged to provide personal data on this website. Providing data (e.g. when contacting us) is voluntary; however, without it we may be unable to process your inquiry or provide the requested service.
5. Third-Party Services
Microsoft Teams Integration
This website contains a login link that redirects to Microsoft Teams for authorized consortium members. When you click this link, you leave our website and are subject to Microsoft’s privacy policy.
Data controller for MS Teams: Microsoft Corporation
For information on data processing in Microsoft Teams, please refer to: https://privacy.microsoft.com/en-us/privacystatement
Note: We do not collect or store login credentials or personal data through this redirect.
6. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR),
- Right to rectification (Art. 16 GDPR),
- Right to erasure (Art. 17 GDPR),
- Right to restriction of processing (Art. 18 GDPR),
- Right to data portability (Art. 20 GDPR),
- Right to object (Art. 21 GDPR),
- Right to withdraw consent (Art. 7 para. 3 GDPR).
7. Right to Lodge a Complaint
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority:
Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40-42
1030 Vienna, Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at
Barichgasse 40-42
1030 Vienna, Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at
8. Data Security
We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons.
9. External Links
Our website may contain links to external websites. We have no control over the content and data protection practices of these sites and assume no responsibility for them.
10. Changes to This Privacy Policy
We reserve the right to update this privacy policy to reflect changes in our data processing practices or legal requirements. The current version is always available on this page.