Website Privacy Policy

Important: This privacy policy applies only to this website and not to any other services provided by Student & Campus Services GmbH.

In this privacy policy, “we”, “us”, or “our” refers to Student & Campus Services GmbH.

In the context of this Data Protection Declaration, we are pleased to inform you about the processing of your personal data and about your rights and entitlements as set out in the data protection regulations.

1. Controller

The person responsible for processing your personal data is:

Student & Campus Services GmbH

Joanneumring 3
8010 Graz, Österreich
Phone: +43 660 7343165
Email: office@studo.com

If you have any questions or concerns regarding the processing of your personal data, please contact us via the contact details provided above.

Alternatively, you can also contact our data protection officer:

Markus Dörfler
Data protection officer
Email: privacy@studo.com

The protection of your personal data is very important to us. We therefore process your data exclusively on the basis of the applicable legal regulations, in particular the General Data Protection Regulation (GDPR).

In this privacy policy, we inform you in accordance with Art. 13 GDPR about how we process your personal data in connection with your use of this website.

2. Data collected when visiting this website

2.1. Server logs

When you visit this website, we automatically collect certain information (server logs), including: the IP address of the querying computer, together with the date, time, query, the file that was queried (name and URL), the quantity of data transferred to you, a notification whether the query was successful, identification data of the browser and operating system used as well as the website from which the access took place (if the access takes place via a link).

Purpose: The server logs are stored in order to be able to inspect the system security, technically administer the website as well as optimise our offer.

Legal basis: We process these server log data on the basis of our legitimate interests (Art. 6(1)(f) GDPR) in ensuring the security, stability and technical integrity of our website and IT systems.

In the event of a hacker attack, this data will be forwarded to the law enforcement authorities. No data will be passed on to third parties beyond this. The server logs are stored for a maximum period of 3 months.

2.2. Cookies

Cookies are small text files that the website stores on your computer in order to recognise it; these can include information about the use of the website. The information contained in the cookies is used to determine whether you are logged in or which data you have already provided. Essential cookies (technically necessary) are set on the basis of our legitimate interests (Art. 6(1)(f) GDPR); all other cookies are used only with your consent (Art. 6(1)(a) GDPR.

Cookies are automatically accepted by most web browsers. You can prevent this by changing the settings of your browser. You can remove cookies stored on your PC at any time by deleting the temporary internet files. To prevent third-party cookies from being set, you can block third-party cookies in your browser settings. You can find instructions for the most common browsers here:

Firefox: here
Chrome: here
Edge / Internet Explorer: here
Safari: Apple's Safari blocks third-party cookies by default.

You can review all relevant cookies stored on this website in the cookie settings, which can also be accessed here. Via the cookie settings, you can also change or withdraw your consent at any time with effect for the future.

In particular, we store the cookies named in the following beyond the respective session.

2.2.1. Google Analytics

We use Google Analytics, a web analysis service of Google Inc. (“Google”). By using Google Analytics, we are able to associate data, sessions and interactions across multiple devices with a user’s activities. Google Analytics uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of your usage of the website. The information regarding your use of the website created by the cookie is generally transmitted to a server of Google in the US and stored there.

Google acts as our data processor, may use the transmitted data only for carrying out the analytics activities we have commissioned, and is contractually obliged towards us to comply with the statutory data protection provisions.

We use IP anonymization, meaning that your IP address is first abbreviated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. The complete IP address is only transferred to a Google server in the USA and abbreviated there in exceptional cases. Google will use this information on our behalf to evaluate your use of the website, generate reports regarding the website activities and to provide us with additional services associated with the website usage and the internet usage. The IP address transferred from your browser within the scope of Google Analytics will not be combined with other Google data.

Legal basis: Your data are processed on the basis of your consent given via the cookie banner on our website (Art. 6 (1) (a) GDPR). You may withdraw your consent at any time by calling up the cookie banner via the link at the top of this notice. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Recipients of the data: By using Google Analytics provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, data are transmitted to Google. As Google’s headquarters are located in the USA, data may be transferred to the USA. The appropriate level of protection for the transfer of data to the USA results from Google’s participation in the EU‑US Data Privacy Framework.

You can prevent the storage of cookies through a corresponding setting within your browser software; we do point out that in this case you may not be able to use all functions of the website to their full extent. In addition, you can prevent Google from collecting data generated by the cookie and relating to your use of the websites (including your anonymised IP address) and processing of this data by Google by downloading and installing the browser plug-in available via the following link: (tools.google.com).

2.2.1 Cloudflare

To improve the performance of our website and to detect attacks on the website, we use the services of Cloudflare Inc., 101 Townsend Street, San Francisco, CA-94107, USA.

Some of the contents of the website are downloaded directly by your browser from the servers of Cloudflare, during the process of which, Cloudflare obtains knowledge about your IP address. This information is only used to provide IT security services.

Legal basis: The use of Cloudflare is based on our legitimate interests (Art. 6(1)(f) GDPR) in ensuring the security and availability of our website.

Recipients of the data: By using the Tool Cloudflare provided by Cloudflare Germany GmbH (“Cloudflare”). c/o Design Offices München Atlas, Rosenheimer Straße 143C – 8. Stock, 81671 München, Deutschland, data are transmitted to Cloudflare. As Cloudflare’s headquarters are located in the USA, data may be transferred to the USA. The appropriate level of protection for the transfer of data to the USA results from Cloudflare’s participation in the EU‑US Data Privacy Framework.

You can find the privacy statement of Cloudflare at https://www.cloudflare.com/security-policy.

We keep your data for up to 7 days, unless you object earlier.

 3. Your rights as a data subject

With regard to your personal data, you have the following rights. To exercise these rights, please contact us setting out your specific request.

3.1. Right of access: You may request confirmation at any time as to whether we process personal data concerning you. If this is the case, you also have the right to obtain access to these data and related information based on Article 15 GDPR.

3.2. Right to rectification: If we have stored inaccurate or incomplete personal data about you, you may request the rectification of these data at any time.

3.3. Right to erasure: You may request the erasure of your personal data, provided that one of the grounds listed in Article 17 GDPR applies.

3.4. Right to restriction of processing: You may request the restriction of the processing of your personal data, provided that one of the grounds listed in Article 18 GDPR applies.

3.5. Right to data portability: You may request the transfer of your personal data in a structured, commonly used and machine‑readable format and have the right to transmit those data to another controller without hindrance from us, provided that one of the grounds listed in Article 20 GDPR applies.

3.6. Right to object: If we process your personal data on the basis of Article 6(1)(e) GDPR (public interest or exercise of official authority) or Article 6(1)(f) GDPR (legitimate interests), you may object to the processing.

3.7. Right to withdraw consent: You may withdraw the consent you have given to the processing of your data at any time. However, the lawfulness of the processing of your personal data up to the time of withdrawal remains unaffected.

3.8. Right to lodge a complaint with the data protection authority: If you consider that our processing of your personal data infringes data protection law, you have the right to lodge a complaint with the Austrian Data Protection Authority at the following address:

Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Phone: +43 1 52 152‑0
Email: dsb@dsb.gv.at