As controller, the University of Graz takes data protection very seriously and will treat your personal data confidentially and in accordance with the legal requirements. 

In accordance with Articles 12 and 13 of the GDPR, this Data Protection Declaration aims to inform you, as a participant in the abovementioned event held by the University of Graz, of the purpose of processing your personal data, the legal basis for this and your rights in this regard. 

Scope, purpose(s) and legal basis/bases 

In connection with managing registrations for the event and organising and holding the event itself, we will process the following personal data for the purpose of fulfilling the contract or in order to take steps prior to entering into a contract in accordance with Article 6 (1) (b) of the GDPR: First and last name, e-mail address, address and affiliation.

We need to process this data in order to fulfil the contract. If you do not disclose this data to us, you will not be able to take part in the event.

If you would like to receive the STC 2026 newsletter, we will process the following personal data with your consent given for this purpose in accordance with Article 6 (1) (a) of the GDPR: e-mail address

You can withdraw your consent at any time without giving a reason. Withdrawing consent does not affect the lawfulness of processing before its withdrawal.

Photographs will be taken at the event for the purpose of reporting on and documenting it. We will publish a selection of these photos, without naming anyone featured in them, in media such as the conference website: https://stc2026.at

The image data is processed in the legitimate or public interests of the University of Graz with regard to public relations, presenting its activities and informing the public of how it fulfils its mandate as a university, in accordance with Article 6 (1) (f) resp (e) of the GDPR in conjunction with Paragraphs 3 (11) of the Universities Act (UG).

Storage period

Data that we process from you based on consent will be stored until your consent is withdrawn/erased 6 months after the event has ended. Aside from this, only your personal data that is absolutely required as evidence of your consent or your withdrawal will be stored for a period of three years from the time of your withdrawal of consent. 

Transmission of your personal data 

Your data will only be processed within the University and the Tourismusverband Region Graz (name and country); we will not transmit your data to other external recipients. 

Your rights 

Where the processing of your personal data is concerned, you are free to exercise the following rights with regard to the University of Graz as controller (adrian_daniel.boese@uni-graz.at) at any time: 

– The right to access your data (Article 15 of the GDPR), 

– The right to rectification (Article 16 of the GDPR),

– The right to erasure (Article 17 of the GDPR), 

– The right to restriction of processing (Article 18 of the GDPR), 

– The right to data portability (Article 20 of the GDPR), 

– The right to object (Article 21, of the GDPR),

– The right to withdraw consent (Article 7 (3) of the GDPR), which shall not affect the lawfulness of processing before its withdrawal. 

You also have the right to lodge a complaint (Article 77 of the GDPR). Complaints should be lodged with the relevant supervisory authority, which in Austria is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, e-mail: dsb@dsb.gv.at

Our contact details

Our contact details are as follows: University of Graz, Department of Chemistry, Heinrichstraße 28, 8010 Graz, e-mail:adrian_daniel.boese@uni-graz.at

Our data protection officer can be contacted at: dsba@uni-graz.at

Please send any general queries regarding data protection to datenschutz@uni-graz.at