Data Privacy Statement
Data privacy is of utmost importance to the JKU. In general, the JoIS homepage can be visited without disclosing personal information. However, the use of special services may require asking for and processing personal information. This kind of information processing - as well as passing information on to any third party (as long as there is no legal basis in this regard) will be done only with your explicit consent.
Customize Browser Cookie Settings:
Server Log Files
Information on this website is automatically ascertained and stored in server log files which your browser then transmits to us without our assistance. These are:
This information does not allow us to identify a specific individual. The JKU does not link this data with other data sources. However, in the event of any specific indication regarding any illegal use of our website, we reserve the right to retrospectively review the collected data.
for sending notifications and processing data regarding the workflow of the journal management system
I. Indication of contact data:
The party responsible for the data processing described below is Institute of Business Informatics - Communications Engineering of Johannes Kepler University of Linz (JKU), Altenberger Strasse 69, 4040 Linz, firstname.lastname@example.org.
The data protection officer can be reached at Johannes Kepler University of Linz (JKU), Staff Office for Data Protection, Altenberger Strasse 69, 4040 Linz, email@example.com.
II: Background of the processing / Indication of the purpose for which the personal data are to be processed / Legal basis of processing / Categories of recipients of personal data:
III. Indication of the criteria for determining the retention period:
Storage of the personal data of the party concerned lasts until objection is raised.
IV. Information on the rights of those concerned:
Under the legal circumstances of the Data Protection Act of 2000, the parties concerned are entitled to information, correction or deletion and to revocation. As of 25 May 2018, under the currently applicable General Data Protection Regulation (GDPR) there are the following rights of those concerned:
The party concerned by data processing is entitled to demand confirmation from JKU if it processed the personal data concerned. If such is the case, then the party is entitled to information about this personal data and to the following items of information: a) The purposes of processing; b) The categories of personal data that are processed; c) The recipients or categories of recipients in relation to whom the personal data is being disclosed, in particular in the case of recipients in third countries or with international organisations; d) If possible, the planned retention period for storage of the personal data, or where this is not possible, the criteria for determination of that period of retention; e) The existence of the right to correction or deletion of the personal data relating to it or to restriction of processing by the party responsible or of any right of objection to such processing; f) The existence of a right of appeal to a regulatory authority; g) If the personal data was not collected from the party concerned, all possible information about the origin of the data; h) The existence or non-existence of any automatic decision making, including profiling.
In case of a request for information, JKU makes a copy of the personal data available. For all additional copies applied for by the party concerned, JKU may demand an appropriate fee on the basis of the administrative costs. If the party concerned makes the request electronically, then the information must be provided in a conventional electronic form, unless otherwise indicated. The right to receive a copy may not impair the rights and freedoms of other parties.
The party concerned is entitled to demand correction by JKU of incorrect personal data relating to it without delay. Taking the purposes of processing into account, the party concerned is entitled to demand completion of incomplete personal data, including by means of a supplemental statement. In addition, the party concerned may demand immediate deletion of the personal data relating to it from JKU. JKU must comply with this demand without delay if any of the following reasons obtains: a) The personal data are no longer needed for the purposes for which they were collected or otherwise processed. b) The party concerned revokes its consent on which processing was based, and there is a lack of any other legal basis for processing. c) The party concerned raises an objection (see below) against processing. d) The personally data was processed illegally. e) Deletion of the personal data is required to meet a legal obligation which JKU is subject to. f) The personal data was collected in regard to services offered by the information company (consent of a child). The right to deletion is in particular not applicable if the processing is required to meet a legal obligation of JKU or to perform a task lying in the public interest or in the exercise of governmental authority which was transferred to JKU, or required for assertion, exercise or defence of legal claims.
The party concerned is entitled to demand restriction of processing by JKU if any of the following prerequisites obtains: a) The correctness of the personal data is contested by the party concerned, and more specifically, for a period of time that makes it possible for JKU to review the correctness of the personal data; b) The processing is illegal and the party concerned rejects deletion of the personal data and instead demands restriction on the use of the personal data; c) JKU no longer needs the personal data for purposes of processing, but the party concerned does need it for assertion, exercise and defence of legal claims; d) The party concerned has raised objection to processing until it is established whether JKU’s justified reasons outweigh those of the party concerned. If processing was restricted, then such personal data may only be processed with the consent of the party concerned or for
assertion, exercise or defence of legal claims or for the protection of rights of another individual or legal entity or for reasons of an important public interest of the European Union or a Member State (apart from storage). A party concerned which has obtained restriction of processing will be informed by JKU before the restriction is lifted.
The party concerned is entitled at any time to raise an objection to processing of personal data relating to it, which: a) is required for the performance of a task, or b) lies in the public interest or in the exercise of governmental authority, or c) was assigned to JKU, or d) is required to defend the legitimate interests of JKU or a third party. As of the date of the objection, JKU will no longer process the personal data, unless a) JKU can show pressing and justifiable reasons for processing; b) The interests, rights and freedoms of the party concerned take precedence; or c) Processing serves the assertion, exercise or defence of legal claims. If personal data are processed to engage in direct advertising, then the party concerned has at all times the right to raise objection to processing of personal data relating to it for the purposes of such advertising. In the event of such an objection, the personal data will no longer be processed for such purposes.
The party concerned is entitled to be given the personal data relating to it, which it has provided to JKU (in the framework of its voluntarily given consent), in a structured, conventional and machine readable form. It is additionally entitled to transmit this data to another party responsible without interference by JKU. In the exercise of its right to data portability, the party concerned can have the personal data transmitted directly from one party responsible to another party responsible, provided this is technically possible.
V. Right of appeal to the regulatory authority:
Every party concerned is entitled, without prejudice to any other administrative law or judicial system appeal, to appeal to a regulatory authority, in particular in the Member State of its domicile, its workplace or the venue of assumed violation, if the party concerned is of the opinion, that the processing of the personal data relating to it is in breach of these guidelines.