Website Privacy Policy

Important: This privacy policy applies only to this website and not to any other services provided by Student & Campus Services GmbH.

In this privacy policy, “we”, “us”, or “our” refers to Student & Campus Services GmbH.

In the context of this Data Protection Declaration, we are pleased to inform you about the processing of your personal data and about your rights and entitlements as set out in the data protection regulations.

1. Controller

The person responsible for processing your personal data is:

Student & Campus Services GmbH
Joanneumring 3
A-8010 Graz, Austria
Phone: +43 660 7343165
Email: office@studo.com 

If you have any questions or concerns regarding the processing of your personal data, please contact us via the contact details provided above.

Alternatively, you can also contact our data protection officer:

Markus Dörfler
Data protection officer
Email: privacy@studo.com

The protection of your personal data is very important to us. We therefore process your data exclusively on the basis of the applicable legal regulations, in particular the General Data Protection Regulation (GDPR).

In this privacy policy, we inform you in accordance with Art. 13 GDPR about how we process your personal data in connection with your use of this website.

2. Data collected when visiting this website

2.1. Server logs

When you visit this website, we automatically collect certain information (server logs), including: the IP address of the querying computer, together with the date, time, query, the file that was queried (name and URL), the quantity of data transferred to you, a notification whether the query was successful, identification data of the browser and operating system used as well as the website from which the access took place (if the access takes place via a link).

Purpose: The server logs are stored in order to be able to inspect the system security, technically administer the website as well as optimise our offer.

Legal basis: We process these server log data on the basis of our legitimate interests (Art. 6(1)(f) GDPR) in ensuring the security, stability and technical integrity of our website and IT systems.

In the event of a hacker attack, this data will be forwarded to the law enforcement authorities. No data will be passed on to third parties beyond this. The server logs are stored for a maximum period of 3 months.

2.2. Cookies

Cookies are small text files that the website stores on your computer in order to recognise it; these can include information about the use of the website. The information contained in the cookies is used to determine whether you are logged in or which data you have already provided. Essential cookies (technically necessary) are set on the basis of our legitimate interests (Art. 6(1)(f) GDPR); all other cookies are used only with your consent (Art. 6(1)(a) GDPR.

Cookies are automatically accepted by most web browsers. You can prevent this by changing the settings of your browser. You can remove cookies stored on your PC at any time by deleting the temporary internet files. To prevent third-party cookies from being set, you can block third-party cookies in your browser settings. You can find instructions for the most common browsers here:

Firefox: here
Chrome: here
Edge / Internet Explorer: here
Safari: Apple's Safari blocks third-party cookies by default. 

You can review all relevant cookies stored on this website in the cookie settings, which can be accessed in the bottom left corner of the screen. Via the cookie settings, you can also change or withdraw your consent at any time with effect for the future.

In particular, we store the cookies named in the following beyond the respective session.

2.2.1. Google Analytics

We use Google Analytics, a web analysis service of Google Inc. (“Google”). By using Google Analytics, we are able to associate data, sessions and interactions across multiple devices with a user’s activities. Google Analytics uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of your usage of the website. The information regarding your use of the website created by the cookie is generally transmitted to a server of Google in the US and stored there.

Google acts as our data processor, may use the transmitted data only for carrying out the analytics activities we have commissioned, and is contractually obliged towards us to comply with the statutory data protection provisions.

We use IP anonymization, meaning that your IP address is first abbreviated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. The complete IP address is only transferred to a Google server in the USA and abbreviated there in exceptional cases. Google will use this information on our behalf to evaluate your use of the website, generate reports regarding the website activities and to provide us with additional services associated with the website usage and the internet usage. The IP address transferred from your browser within the scope of Google Analytics will not be combined with other Google data.

Legal basis: Your data are processed on the basis of your consent given via the cookie banner on our website (Art. 6 (1) (a) GDPR). You may withdraw your consent at any time by calling up the cookie banner via the link at the top of this notice. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Recipients of the data: By using Google Analytics provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, data are transmitted to Google. As Google’s headquarters are located in the USA, data may be transferred to the USA. The appropriate level of protection for the transfer of data to the USA results from Google’s participation in the EU‑US Data Privacy Framework.

You can prevent the storage of cookies through a corresponding setting within your browser software; we do point out that in this case you may not be able to use all functions of the website to their full extent. In addition, you can prevent Google from collecting data generated by the cookie and relating to your use of the websites (including your anonymised IP address) and processing of this data by Google by downloading and installing the browser plug-in available via the following link: (tools.google.com).

2.2.2 HubSpot

We use the tool HubSpot of HubSpot, Inc. (“HubSpot”) for our marketing activities.

HubSpot is an integrated software solution which we use to cover different aspects of our online marketing and to optimize our marketing, such as measure the performance of our campaigns and tailor our marketing communications, content management, reporting, etc. HubSpot acts as our data processor, may use the transmitted data only for carrying out the activities we have commissioned, and is contractually obliged towards us to comply with the statutory data protection provisions.

For this purpose, HubSpot sets cookies and similar technologies to collect information in pseudonymized form such as pages visited, click behaviour, technical usage data, device and browser information, cookie and tracking identifiers, etc..

Legal basis: The processing of your personal data for marketing and analytics is based on your consent (Art. 6(1)(a) GDPR). If you do not give or withdraw your consent, no HubSpot marketing/analytics cookies will be set and your data will not be used for this purpose.

Recipients of the data: By using HubSpot provided by HubSpot, Inc (“HubSpot”), 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, data are transmitted to HubSpot. As HubSpot’s headquarters are located in the USA, data may be transferred to the USA. The appropriate level of protection for the transfer of data to the USA results from HubSpot’s participation in the EU‑US Data Privacy Framework.

More information on HubSpot's privacy policy: https://legal.hubspot.com/privacy-policy.

More information on the cookies used by HubSpot: https://knowledge.hubspot.com/account/hubspot-cookie-security-and-privacy

According to HubSpot, data derived from cookies and similar tracking technologies is retained for a reasonable period from the date it was created, after which it is deleted or anonymised. The cookies themselves have a limited lifetime and expire after up to 6 months from the date they are set or last updated. You can withdraw your consent at any time with effect for the future, after which no further data will be collected for this purpose.

2.2.3 Cloudflare

To improve the performance of our website and to detect attacks on the website, we use the services of Cloudflare Inc., 101 Townsend Street, San Francisco, CA-94107, USA.

Some of the contents of the website are downloaded directly by your browser from the servers of Cloudflare, during the process of which, Cloudflare obtains knowledge about your IP address. This information is only used to provide IT security services.

Legal basis: The use of Cloudflare is based on our legitimate interests (Art. 6(1)(f) GDPR) in ensuring the security and availability of our website.

Recipients of the data: By using the Tool Cloudflare provided by Cloudflare Germany GmbH (“Cloudflare”). c/o Design Offices München Atlas, Rosenheimer Straße 143C – 8. Stock, 81671 München, Deutschland, data are transmitted to Cloudflare. As Cloudflare’s headquarters are located in the USA, data may be transferred to the USA. The appropriate level of protection for the transfer of data to the USA results from Cloudflare’s participation in the EU‑US Data Privacy Framework.

You can find the privacy statement of Cloudflare at
https://www.cloudflare.com/privacypolicy/. 

We keep your data for up to 7 days, unless you object earlier.

2.3. Queries via email

You can contact us directly via email. We process your data to the extent necessary to respond to your inquiry and to handle any resulting matters.

Legal basis: Your data is processed to carry out pre-contractual measures or to fulfil a contractual relationship. If you are not in a (pre-contractual) contractual relationship with us or your inquiry is not aimed at entering into a contract, the processing is based on our legitimate interest in responding to the inquiry.

Recipients of the data: The transfer of these data to third parties only takes place on the condition that the transfer is necessary for responding to the enquiry.

We process your data for as long as this is necessary for handling your enquiry and will delete your enquiry once processing has been completed, unless statutory retention obligations arising (e.g. from a contractual relationship) require us to retain it.

2.4. Personalised communication and content

When you visit our website, we first collect and analyse your usage behaviour in a pseudonymized form (specifically, pages visited, click behaviour, technical usage data, device and browser information, as well as cookie and tracking identifiers) – see above. If you subsequently fill out a form on our website – for example, to contact us or to access gated content, or otherwise engage with our digital communications – we link this usage data to the personal data you provided and to your customer account based on your consent. If you do not yet have a customer account, one will be automatically created in the background.

This processing is used to analyse your website behaviour and associate that behaviour with your customer profile to provide better / personalized advertising.

Legal basis: Your data is processed based on your consent, which you may revoke at any time by writing to us at partner-support@studo.com. Revoking your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to revocation.

Recipients of the data: By using HubSpot, provided by HubSpot, Inc. (“HubSpot”), 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland, data is transmitted to HubSpot, our data processor. Since HubSpot’s headquarters are located in the U.S., data may be transferred to the U.S. The appropriate level of protection for the transfer of data to the U.S. is ensured by HubSpot’s participation in the EU–U.S. Data Privacy Framework.

More information on HubSpot’s privacy policy: https://legal.hubspot.com/privacy-policy.

This data is not further transferred to third parties. Should a transfer become necessary, your separate consent would be required.

Retention period: We store your data until you revoke your consent.

Additional information: If you do not give your consent or revoke your consent, we will not perform personalized analysis or link your website behavior to your customer account. As a result, your use of our website and the handling of future inquiries may be less personalized, for example, because we may be less able to tailor content, services, or communications precisely to your interests.

2.5. Newsletter

If you have signed up for our newsletter, we may send you regular information by email about us and our range of services and partners. You sign up by checking the appropriate box and then clicking on the confirmation link in the follow-up confirmation email which is sent automatically (“double opt-in”). Upon receipt of the newsletter, your clicking and reading behavior is logged.

If you no longer wish to be contacted by us, you can unsubscribe yourself using the unsubscribe link in the newsletter or notify us of your request to unsubscribe at partner-support@studo.com.

Legal basis: The processing of your data is based on your consent, which you may revoke at any time. Revoking your consent does not affect the lawfulness of the processing carried out based on your consent before revocation.

Recipients of the data: By using the the email marketing tool HubSpot, provided by HubSpot, Inc. (“HubSpot”), 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland, data is transmitted to HubSpot. Since HubSpot’s headquarters are located in the U.S., data may be transferred to the U.S. The appropriate level of protection for the transfer of data to the U.S. is ensured by HubSpot’s participation in the EU–U.S. Data Privacy Framework.

Your data will be stored up to the time of revocation / unsubscribing from the newsletter.

3. Your rights as a data subject

With regard to your personal data, you have the following rights. To exercise these rights, please contact us setting out your specific request.

3.1. Right of access: You may request confirmation at any time as to whether we process personal data concerning you. If this is the case, you also have the right to obtain access to these data and related information based on Article 15 GDPR.

3.2. Right to rectification: If we have stored inaccurate or incomplete personal data about you, you may request the rectification of these data at any time.

3.3. Right to erasure: You may request the erasure of your personal data, provided that one of the grounds listed in Article 17 GDPR applies.

3.4. Right to restriction of processing: You may request the restriction of the processing of your personal data, provided that one of the grounds listed in Article 18 GDPR applies.

3.5. Right to data portability: You may request the transfer of your personal data in a structured, commonly used and machine‑readable format and have the right to transmit those data to another controller without hindrance from us, provided that one of the grounds listed in Article 20 GDPR applies.

3.6. Right to object: If we process your personal data on the basis of Article 6(1)(e) GDPR (public interest or exercise of official authority) or Article 6(1)(f) GDPR (legitimate interests), you may object to the processing.

3.7. Right to withdraw consent: You may withdraw the consent you have given to the processing of your data at any time. However, the lawfulness of the processing of your personal data up to the time of withdrawal remains unaffected.

3.8. Right to lodge a complaint with the data protection authority: If you consider that our processing of your personal data infringes data protection law, you have the right to lodge a complaint with the Austrian Data Protection Authority at the following address:

Österreichische Datenschutzbehörde

Barichgasse 40–42
1030 Vienna
Phone: +43 1 52 152‑0
Email: dsb@dsb.gv.at