Aithyra complies with its legal information obligations regarding the protection of personal data with this privacy policy. The legal basis is primarily derived from the following regulations:

• General Data Protection Regulation (GDPR) – EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data
• Austrian Data Protection Act (DSG)
• Research Organization Act (FOG)

This privacy policy informs you about which personal data Aithyra processes, how, and for what purpose – whether through our website (www.aithyra.at), in the context of our research activities, scientific events, communications, or collaborative projects. We also inform you about your rights as a data subject.

Please read this privacy policy carefully. By using our website, participating in projects, events, or contacting Aithyra, you agree to the terms of this privacy policy.

Protecting your personal data is a top priority for Aithyra. If you do not agree with the processing of your data, certain services or features may be restricted.

Legal Basis for Processing

Aithyra processes personal data only within the scope permitted by law:

• based on your explicit consent
• for the fulfillment of contracts
• to comply with legal obligations
• in the public interest
• based on legitimate interests (e.g., IT security, optimization of communication)

Data processing occurs, for example, when registering for events, submitting inquiries, using our e-learning services, subscribing to newsletters, contacting us via forms, or participating in scientific collaborations.

Purposes and Types of Data Processing

The type and scope of processed data depend on the specific purpose, for example:

• Contact and communication data
• Event registration data
• Scientific content within research projects
• Log files and IP addresses when using our website
• Usage data for digital services (e.g., e-learning)

Transfer to Third Parties and International Transfers

Aithyra only shares personal data with third parties when:

• it is necessary to fulfill a contract,
• there is a legal obligation,
• you have explicitly consented,
• there is a legitimate interest (e.g., in cooperation with research institutions).

Data transfers to third countries occur only when appropriate safeguards are in place in accordance with the GDPR (e.g., adequacy decisions, standard contractual clauses).

Data Retention

Your data will only be stored as long as necessary for the respective purpose or as required by law. You will be informed of specific retention periods upon request or in connection with the relevant data processing.

Your Rights

As a data subject, you have the following rights under the GDPR:

• Right to access your stored data
• Right to rectify inaccurate or incomplete data
• Right to erasure if no legal grounds for retention exist
• Right to restriction of processing
• Right to data portability
• Right to object to processing for reasons relating to your particular situation
• Right to withdraw consent at any time with future effect

Right to Lodge a Complaint

If you believe that Aithyra is unlawfully processing your personal data, you have the right to lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).

Contact

If you have any concerns regarding the processing of your personal data or wish to exercise your rights, please contact:

AITHYRA GmbH – Research Institute for Biomedical Artificial Intelligence of the Austrian Academy of Sciences
Helmut-Qualtinger-Gasse 2, Stiege 2
1030 Vienna, Austria
Email: data-privacy@aithyra.at  
Website: www.aithyra.at 

Changes to this Privacy Policy

Aithyra reserves the right to amend this privacy policy as needed. The most current version will always be available on our website.