Data Protection Notice

Cookies & Serverlogs

• Necessary Cookies

  The Parliament‘s website places cookies to ensure its functionality and – with your consent – one cookie to carry out web analysis.

  Necessary cookies: So-called session cookies are used. These are text files that are stored on the user’s computer and enable to clearly distinguish different users. These cookies are deleted when the browser is closed.

  Moreover, for reasons of failure safety and load distribution, a cookie is placed which is deleted after 24 hours. It exclusively contains information on which of the Parliament’s web servers is and/or was connected to the user’s device so that the session can be continued after the connection has been interrupted and re-established. This cookie is neither read nor evaluated in any way by other system components of the Parliament’s website.

  The setting of these cookies is necessary for the functionality of the Parliament’s website (and thus the performance of the Parliamentary Administration’s tasks). Data is not transmitted to third parties.

• Web Analysis Cookies

  With your consent, the Parliament’s website places a cookie by Matomo, an open source software for the statistical tracking of visits to the website (web analysis). The user’s IP address is anonymized prior to further processing. The information generated by the cookie is stored on a Parliamentary Administration’s server for the purpose of analysing website usage. Such information is not transmitted to third parties.

• Server Logs

  Each time you access the Austrian Parliament's websites, in particular the following data is stored in a log file (server logs) for a limited time:

  IP address, request details and destination address, name of the requested file and volume of data transferred, date and time of server request, notification of whether the retrieval was successful, processing time of the request in microseconds, user agent, SSL version used, referrer, http protocol version, http method
  This data is used exclusively to control and ensure system security. We will neither analyse personal data nor create user profiles. Nevertheless, we reserve the right to analyse your IP address in the event of attacks on the Parliament's internet infrastructure.

Registration on the website

• Purpose(s) of processing

  Personalisation of the website (profile) and provision of services such as watch lists, saved searches, subscriptions, and notifications

• Legal bases for the processing

  Consent: you can withdraw your consent to receive certain services at any time by making appropriate changes to your profile; this leads to the deletion of your data (from the corresponding mailing list).

  You can also delete your profile entirely. Withdrawal of consent does not affect the lawfulness of processing on the basis of your consent before its withdrawal.
  
  

• Categories of personal data concerned

  title (optional), first and last name, e-mail address, password, postal code and city (optional), country (optional), date of registration and date of confirmation of registration (time of clicking on the link transmitted by email), internal key for validation of the e-mail confirmation, which is transmitted together with the e-mail, watch list entries (optional), saved searches (optional), (optional) settings to suscriptions & notifications e. g. subscribed topics. For subscribing to event invitations, see Registration for the invitation subscription (event database).

• Storage period

  Until consent is withdrawn for individual services or your media profile is deleted. Data history is not saved.

• Recipients

  The data will not be passed on to third parties.

Registration for Media Representatives

• Media Profile

  Purpose(s) of processing: Personalization of the website (media profile) and provision of services for media representatives (journalists including foreign correspondents)

  Legal bases for the processing: 

  • Consent: You can withdraw your consent to receive certain services at any time by making appropriate changes to your profile; this leads to the deletion of your data (from the corresponding mailing list).
  • You can also delete your profile entirely. Withdrawal of consent does not affect the lawfulness of processing on the basis of your consent before its withdrawal.

  Categories of data processed: Gender, first and last name, nationality, date of birth, place of birth (optional), country of birth (optional), e-mail address, phone number, information on media activity (name of medium, department, format (optional), focus (optional), type of medium(i. e. agency - online medium - print medium - radio - TV - freelancer), function (photographer – camera operator – writer/editor - technician), issuer and number of press card (respectively ORF or APA employee card), information on the medium's headquarters (country, city, postal code - postal address (optional) - phone number (optional)- website (optional)), password, application for a permanent access pass.

  Storage period: Storage period lasts until consent is withdrawn/your media profile is deleted or there is the announcement that you are no longer active as a media representative. However, this is no longer than two years after your profile was last active. Data history is not saved.

• Permanent Access Pass

  In case you apply for a permanent access pass, the following applies:

  Membership in the association Vereinigung der Parlamentsredakteurinnen und ‑redakteure or a contractual relationship with the Austrian Broadcasting Corporation (ORF) as host broadcaster is a prerequisite for the issuing of a permanent access pass.

  Purpose(s) of processing: Issuance of a permanent access card, access controls

  Legal bases for the processing: Compliance with legal obligations (Parliament Building rules, security clearance according to § 55a Abs. 1 Z 2 Sicherheitspolizeigesetz)

  Categories of data processed: In addition to the data collected in the course of registration for media representatives, register queries in the central population register and security policing systems are carried out by the Federal Ministry of the Interior (BMI) or its subordinate offices (security clearance).

  Storage period: until consent is withdrawn/your media profile is deleted or there is the announcement that you are no longer active as a media representative. However, this is no longer than two years after your profile was last active.

  Recipients: At least once a calendar year: Offices of the Federal Ministry of the Interior to carry out the security clearance. ORF (if commissioned by them) or the Vereinigung der Parlamentsredakteurinnen und –redakteure will receive relevant extracts from your data (in particular first and last name, medium, office address, e-mail and phone numbers).

  The provision of personal data is required for the accreditation as a media representative. Failure to provide the data will result in the rejection of your application for a permanent access pass.

Registration of the visit and access to Parliament buildings

• General Remarks

  The following applies to registering your visit and access to the Parliament buildings, unless other information is provided for individual cases under the following points:

• Purpose(s) of processing

  Visitor management, access control, documentation (non-personal statistics)

• Legal bases for the processing

  Performance of (pre)contractual steps (bookings); pursuit of legitimate interests (access control to ensure security)

• Categories of personal data concerned

  First and last name, date of birth, e-mail address, accessibility information (optional), day and time of visit

   

• Data source

  In the case of group registrations, where applicable by the registering person.

• Recipients

  If necessary, your data will be disclosed to selected employees of processors working for the security department. Your data will only be transmitted to third parties if the Parliamentary Administration is required to do so by law or court decision.

Registration for public guided tours

• General Remarks

  Please also note the information on data processing in connection with access to the parliament buildings, which you can find under "Registration of the visit and access to Parliament buildings”.

• Purpose(s) of processing

  Organisation and conduct of guided tours

• Legal bases for the processing

  Performance of (pre)contractual steps (bookings)

• Categories of personal data concerned

  Requested tour (day, time, and language), title (optional), first and last name, gender, date of birth, e-mail, postal adress (street, postal code, city – optional), country (optional), telephone number (optional), information on the group (optional): first and last name of participants, gender, date of birth, e-mail, child: yes/no.

• Data source

  In the case of group registrations, where applicable by the registering person

• Recipients

  Your data will only be transmitted to third parties if the Parliamentary Administration is required to do so by law or court decision.

Booking of individual guided tours for groups

• General Remarks

  Please also note the information on data processing in connection with access to the parliament buildings, which you can find under "Registration of the visit and access to Parliament buildings”.

• Purpose(s) of processing

  Organisation and conduct of guided tours

• Legal bases for the processing

  Performance of (pre)contractual steps (bookings)

• Categories of personal data concerned

  Requested tour (day, time and language), title (optional), first and last name, date of birth as well as contact details (e-mail, telephone number, if necessary postal adress) of the person registering, group name, number and, if relevant, age of participants.

• Data source

  Where applicable, by the person registering the group

• Recipients

  Your data will only be transmitted to third parties if the Parliamentary Administration is required to do so by law or court decision.

  Please note that the group leader must then register separately for access to the parliament building and must provide the first and last name of all participants; for that matter, the explanations under Registration of the visit and access to Parliament buildings apply.

Registration for events

• General Remarks

  Please also note the information on data processing in connection with access to the parliament buildings, which you can find under "Registration of the visit and access to Parliament buildings”.

• Purpose(s) of processing

  Event planning and organisation, administration, and documentation of participants

• Legal bases for the processing

  Performance of a task in the public interest (Art. 30 (3) B-VG, public relations, documentation)

• Categories of personal data concerned

  First and last name, title (optional), academic degree (optional), date of birth, institution (optional), e-mail address, postal address (optional), postal code and city (optional), country (optional), comments on accessibility (optional), event title and date

• Storage period

  The data will be deleted after the end of the event (usually on the working day following the event)

• Data source

  We may receive your data from external cooperation partners of the respective event.

• Recipients

  If necessary, cooperation partners of the respective event

  Note: Some events are organised in cooperation with external partners. In such cases, the circle of invited guests is determined jointly by the Parliamentary Administration and its cooperation partners. Registration data is provided to the cooperation partners as far as necessary for the organisation of the event. The cooperation partners agree to erase, after the event has taken place, all personal data which they received exclusively for the preparation and the performance of the event. The same applies to the Parliamentary Administration vice versa. Obligations under the GDPR are fulfilled by the cooperation partner in whose area the relevant data processing is undertaken. Data subjects may exercise their rights under the GDPR in respect of and against each of the cooperation partners.

Image and sound recordings at events

• Purpose(s) of processing

  (live) reporting and information in the context of public relations by publishing recordings in various analogue and digital media; documentation (picture and video database)

• Legal bases for the processing

  Performance of a task in the public interest (Art. 30 (3) B-VG, especially public relations, documentation)

• Categories of personal data concerned

  Image and/or sound recordings, description (in particular, if known: first and last name, title or academic degree, institution)

• Storage period

  Unlimited

• Data source

  We may receive your data from external cooperation partners of the respective event

• Recipients

  Possibly processors (photo server), media, cooperation partners of the respective event, public

Use of the Parliamentary Library

• General

  When visiting the Parliamentary Library (visiting exhibitions, using the open stacks area, reading room, and service zone), the general information concerning registration of the visit and access to the Parliament buildings applies.

  In case you want to order a volume in advance for use in the Parliamentary Library or want to use the services of the Virtual Reading Room, you must register on the Parliamentary Library's search portal. If you wish to take out items on loan from the Parliamentary Library, further data will be collected and a personal library card will be issued. The following additional information applies in these cases:

• Purpose(s) of processing

  Provision of (pre)ordered volumes and notification of users or loans of items; personalisation and subscription services; establishment, exercise or defence of legal claims

• Legal bases for the processing

  Consent (personalisation and subscription services); performance of (pre)contractual steps in conjunction with the rules governing the Parliamentary Library’s use; pursuit of legitimate interests (legal claims). You can withdraw your consent to the personalisation and subscription services at any time by corresponding changes to your profile settings. Withdrawal of consent does not affect the lawfulness of processing on the basis of your consent before its withdrawal.

• Categories of personal data concerned

  First and last name, e-mail address, password, order data or, if applicable, date of issue of the personal library card, postal address (street, house number, postal code, city), telephone number and borrowing data, if applicable personalisations (favorites, saved searches) and/or subscriptions

• Storage period

  Until consent is withdrawn for individual personalisation or subscription services or your Parliamentary Library’s search portal profile is deleted (max. two and 1/2 years after the last login).

• Recipients

  The data is processed in the Alma library system, operated by the IT service provider Ex Libris GmbH. Your data will only be transmitted to third parties if the Parliamentary Administration is required to do so by law or court decision, or with your respective consent.

  As is the case of visiting the Parliamentary Library, the provision of data is also required for pre-ordering volumes and taking them out on loan. If your data is incomplete or omitted, you will not be able to use the relevant services of the Parliamentary Library.

Video surveillance

• General

  The buildings used by Parliament are subject to real-time and recorded video surveillance. The recorded data is not evaluated unless such evaluation is required for a specific reason. Evaluations are recorded and performed on the basis of a four-eyes principle (by two different and unrelated organizational units).

• Purpose(s) of processing

  Protection of persons and property; prevention, containment and investigation of criminally relevant behavior insofar as this affects self-protection (protection of legislative bodies and their members, employees and property) and responsibility to protect (especially functionaries/organs of other authorities and visitors); exercise of rules for the Parliament buildings; maintaining order in the Chambers.

• Legal bases for the processing

  Performance of a task in the public interest (Art. 30 (3) B-VG; President of the National Council’s domestic authority over the Parliament buildings in accordance with Section 14 (1) Rules of Procedure Act; rules for the Parliament buildings; exercise of sittings’ security in accordance with Section 13 (2) Rules of Procedure Act); pursuit of legitimate interests (self-protection and responsibility to protect).

• Categories of personal data concerned

  (Pixelated) image data, location, and time of image recording

• Storage period

  Storage takes place to the extent permitted by law. If video surveillance recordings are saved in a specific case for purposes of protection or evidence, they will be deleted after procedures have been completed.

• Recipients

  Possibly, your data will be disclosed to select employees of processors working for the security department. If necessary for evidentiary purposes (e.g. if a crime is suspected, in case of an obligatory exchange of information between authorities), your data will be passed on to the relevant authorities. Your data will only be transmitted to third parties if the Parliamentary Administration is required to do so by law or court decision.

Communications with the Parliamentary Administration

• General inquiries and requests (contact forms, Email or post)

  Purpose(s) of processing: processing your request, logging of business cases

  Legal bases for the processing: performance of (pre)contractual steps, fulfillment of legal obligations (storage provisions), performance of a task in the public interest (Art. 30 (3) B-VG, administrative communication)

  Categories of data processed: Contact details (e. g. telephone number, e-mail address, postal address), possibly first and last name, job title, institution or company name, your request, and further communication

  Storage period: in accordance with the prescribed retention periods of written records (discarding periods according to the office regulations for business cases to be dealt with by the Parliamentary Administration; possibly archiving)

  Recipients: if necessary on a case-by-case basis, your request will be forwarded to the Parliamentary Administration’s competent organizational unit, parliamentary groups, or other federal departments. Otherwise, your data will be transmitted to third parties only if the Parliamentary Administration is required to do so by law or court decision, or with your respective consent.

• Newsletter

  The Parliamentary Administration offers newsletters on a variety of topics (e. g. updates by the parliamentary correspondence or the Budget Office, specialized information, etc.). The following provisions apply to these newsletters:

  Purpose(s) of processing: sending and administration of newsletters

  Legal bases for the processing: Consent - You can withdraw your consent to receive newsletters at any time. Please use the unsubscribe options of the respective newsletter or – as a registered user – the setting options in your profile. Withdrawal of consent does not affect the lawfulness of processing on the basis of your consent before its withdrawal.

  Categories of data processed: e-mail address, possibly first and last name, topics

  Storage period: until withdrawal of your consent; if you withdraw your consent, your data is deleted from the respective mailing list.

  Recipients: The data will not be passed on to third parties.

• Registration for the invitation subscription (event database)

  Purpose(s) of processing: sending and administrating invitations to events

  Legal bases for the processing: Consent - you can withdraw your consent to receive event invitations at any time; this leads to the deletion of your data. Withdrawal of consent does not affect the lawfulness of processing on the basis of your consent before its withdrawal.

  Categories of personal data concerned: Form of address, first and last name, title or academic degree (optional), institution/function (optional), e-mail address, postal address (street, postal code, city – optional), country (optional), comments on accessibility (optional), selection of subscribed subject areas (optional as a registered user), invitations sent, and registrations made so far

  Storage period: until withdrawal of your consent

  Recipients: The data will not be passed on to third parties.

• Applications

  Purpose(s) of processing: processing and assessing the application, conducting the selection process, making contact and, if consent given, keeping the application for future selection processes

  Legal bases for the processing: fulfillment of legal obligations (Ausschreibungsgesetz 1989, Beamten-Dienstrechtsgesetz 1979, Vertragsbedienstetengesetz 1948), performance of (pre)contractual steps, consent (keeping the application for future selection processes)

  Categories of data processed: Data provided with the application (in particular, CV data, letter of motivation, etc.) and during the selection process

  Storage period: The storage or erasure of data is based on§ 20 Bundes-Gleichbehandlungsgesetz, §§ 280 et seq. Beamten-Dienstrechtsgesetz 1979 (upon acceptance into employment) or - if consent has been given regarding keeping your application for future selection processes - until withdrawal of consent. You can withdraw your consent to keeping your application at any time. In this case, your personal data may be stored only within the applicable statutory retention periods.

  Recipients: Your data is treated confidentially and transmitted to third parties only according to legal obligations.

  For the relevant information regarding applications and inquiries via the Republic of Austria’s Jobbörse, please refer to the website www.jobboerse.gv.at/information.

• Possible future and actual contractors

  Purpose(s) of processing: Obtaining offers and cost estimates as well as contractual negotiations; following a contract’s conclusion: fulfilling or asserting contractual or legal rights and obligations

  Legal bases for the processing: performance of (pre)contractual steps, fulfillment of legal obligations (retention periods, Bundesvergabegesetz 2018), pursuit of legitimate interests (legal claims)

  Categories of data processed: regularly, first and last name, contact details, organizational data (company or company name, postal address, etc.), contracted performance, possibly function, payment data, evidence such as excerpts from the company register, trade register, criminal record, etc. are processed.

  Storage period: according to the applicable (legal) retention periods