1. Controller
AGMT Arbeitsgemeinschaft Medikamentöse Tumortherapie gemeinnützige GmbH
Gentzgasse 60/21
1180 Vienna, Austria
Phone: +43 (0) 662 640 44 12
E-Mail: datenschutz@agmt.at
Data Protection Contact:
Dr. Daniela Wolkersdorfer
E-Mail: datenschutz@agmt.at
2. General Information on Data Processing
The protection of your personal data is of particular importance to us. We process your personal data exclusively on the basis of the applicable legal provisions, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act (TKG).
Personal data is processed only to the extent necessary:
- for providing a functional website,
- for providing our services,
- for communication with interested parties, members and event participants,
- or on the basis of your consent.
3. Provision of the Website and Server Log Files
When visiting our website, information is automatically collected and stored in server log files.
Processed Data
- IP address
- date and time of access
- accessed pages
- browser type and browser version
- operating system used
- referrer URL
- hostname of the accessing device
Purpose of Processing
- technically secure provision of the website
- system security and stability
- error analysis and prevention of misuse
Legal Basis
Art. 6(1)(f) GDPR
(legitimate interest in a secure and functional website)
Retention Period
Server log files are generally stored for a maximum of 14 days.
Recipients
Hosting service providers within the European Union.
4. Contact Forms and Communication
If you contact us via contact form or e-mail, the information you provide will be processed for handling your request.
Processed Data
- name
- e-mail address
- message content
- voluntarily provided additional information
Purpose of Processing
Handling your request and communicating with you.
Legal Basis
- Art. 6(1)(b) GDPR (pre-contractual measures)
- Art. 6(1)(f) GDPR (legitimate interest in communication)
Retention Period
Data will be deleted no later than 12 months after completion of processing unless statutory retention obligations apply.
5. Membership and Online Member Administration
In the context of membership administration, we process personal data of our members.
Processed Data
- name
- contact details
- membership status
- participation in projects or events
- newsletter status
- technical identifiers used in online forms
Purpose of Processing
- maintaining the membership register
- communication related to membership
- organizational administration and documentation
Legal Basis
- Art. 6(1)(b) GDPR (membership relationship)
- Art. 6(1)(c) GDPR (legal obligations)
Retention Period
Data is stored in accordance with statutory retention obligations for up to 7 years after termination of membership.
Recipients
- hosting service providers within the European Union
- Mailchimp for newsletter administration
6. Newsletter (Mailchimp)
We use “Mailchimp”, a service provided by Intuit Inc., USA, to distribute newsletters.
Processed Data
- e-mail address
- name (optional)
- IP address
- date and time of registration
- usage data (e.g. opening and click behaviour)
Purpose of Processing
Distribution of newsletters and statistical evaluation to improve our information services.
Legal Basis
Art. 6(1)(a) GDPR (consent)
Consent may be withdrawn at any time via the unsubscribe link contained in each newsletter.
International Data Transfers
Data may be processed in the USA. Mailchimp uses Standard Contractual Clauses pursuant to Art. 46 GDPR.
Retention Period
Until consent is withdrawn.
7. Cookies
Our website uses cookies to provide certain functions and improve user experience.
Cookies are small text files stored on your device. They do not cause any damage.
Technically necessary cookies are used on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.
Where external services or optional functions use cookies, this takes place only after your consent pursuant to Art. 6(1)(a) GDPR.
You may configure your browser to notify you about cookies or to allow cookies only in individual cases or disable them entirely.
Disabling cookies may limit the functionality of the website.
8. Google Maps
Our website uses Google Maps to display geographical information and event locations.
Provider:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland
When Google Maps is accessed, personal data may be processed, including:
- IP address
- browser and device information
- location data (if enabled)
- usage data
Google Maps is integrated only after your consent via our cookie banner.
Legal Basis
Art. 6(1)(a) GDPR (consent)
International Data Transfers
Data transfers to the USA cannot be excluded. Google uses Standard Contractual Clauses pursuant to Art. 46 GDPR.
Further information:
https://policies.google.com/privacy
9. Microsoft Teams
For online meetings, video conferences and webinars, we use Microsoft Teams, a service provided by Microsoft Ireland Operations Limited, Dublin, Ireland.
The following data may be processed:
- name and contact details
- meeting metadata
- IP address and technical device information
- audio, video and chat data
Purpose of Processing
Conducting online meetings, webinars and digital communication.
Legal Basis
- Art. 6(1)(b) GDPR
- Art. 6(1)(f) GDPR
Where recordings are made, participants will be informed separately and consent obtained where required.
International Data Transfers
Processing outside the European Union, particularly in the USA, cannot be excluded. Microsoft uses Standard Contractual Clauses pursuant to Art. 46 GDPR.
Further information:
https://privacy.microsoft.com/en-us/privacystatement
10. External Links and Social Media
Our website contains links to external websites and social media platforms, particularly LinkedIn.
By clicking such links, you leave our website. The respective operators are solely responsible for the content and data protection practices of their websites.
Data is transferred to the respective provider only when you actively click the link.
11. Integration of Third-Party Content
Our website may include content provided by external providers, such as maps or technical services.
To display such content, external providers may need to process users’ IP addresses, as this is technically necessary for delivery of the content.
12. Rights of Data Subjects
Under Articles 15–22 GDPR, you have the following rights:
- right of access
- right to rectification
- right to erasure
- right to restriction of processing
- right to data portability
- right to object
- right to withdraw consent with future effect
You also have the right to lodge a complaint with the competent supervisory authority.
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
https://www.dsb.gv.at
13. No Automated Decision-Making
No exclusively automated decision-making pursuant to Art. 22 GDPR takes place.
14. Amendments to this Privacy Policy
We reserve the right to amend this privacy policy if required due to legal, technical or organizational developments.
The current version is always available on our website.