1. CONTROLLER AND DATA PROTECTION OFFICER

The controller in terms of the GDPR and any other data protection regulations is:

Silicon Austria Labs GmbH

Sandgasse 34

8010 Graz

E-Mail: contact@silicon-austria.com

Website: https://silicon-austria-labs.com/

This data protection declaration applies to the web presence of SAL, which can be accessed via the domain www.silicon-austria-labs.com, and to further processing activities mentioned herein.

Data Protection Officer:

Sandgasse 34

8010 Graz

dpo@silicon-austria.com

2. WHAT IS PERSONAL DATA?

Personal data is any data relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, e-mail address or IP address. Information that cannot be traced back to you, for example information that has been anonymized, is not personal data. The processing of personal data (for example the collection, retrieval, use, storage or transmission thereof) always requires a legal basis, e.g. a law or your consent.

3. DATA PROCESSING ON OUR WEBSITE

3.1. Provision of our website

3.1.1. Type, purpose, and scope of processed data

We collect and use the personal data of our users (you) only insofar as is necessary for the functioning of our website and to provide our content, services and public communication.

Upon your access and use of our website, we collect personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file.

The following information is collected without any action on your part and stored:

• IP address of the requesting end device,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which our services are accessed (referrer URL),
• • Browser used, and, if applicable, the operating system of your end device and the name of your access provider.

We process this data for the following purposes:

• To ensure a smooth connection to the website
• To ensure the technical security and stability of the website,
• To detect and prevent misuse or attacks,
• To analyse errors and optimise website operations

3.1.2. Legal basis

Art. 6 para 1 lit f GDPR serves as the legal basis for the processing of this data, which is necessary to provide our website, ensure system security and enable a secure and comfortable use (through a smooth connection). Thus, processing your data is a legitimate interest of our company. In addition, there are no overriding interests of the website user, so the interest of the website operator prevails.

3.1.3. Storage period and erasure of data

The server logs are stored for 30 days and then automatically erased. Log files are stored to ensure technical security, for error analysis, and to detect and defend against attacks on our website. Storage beyond this scope occurs only to the extent necessary to investigate security incidents, errors or to assert, exercise, or defend legal claims.

To the extent that IP addresses are processed in the server log files, they are anonymized as soon as this is possible for the purposes stated above.

3.2. Registration/creation of a user account in the Chip2Sys member area

3.2.1. Type, purpose, and scope of processed data

On our website, we offer Chip2Sys program members to register in the member area by providing personal data. With the processed data, we create an individualized user account that can be used to access information and services regarding research projects and future SAL programs.

The following list shows you which personal data we process when you register:

• Username
• Password
• E-Mail address

3.2.2. Legal basis

Your personal data is being processed based on the declaration of consent voluntarily given by you during the registration in accordance with Art. 6 para 1 lit a GDPR. It is possible to withdraw your consent at any time with effect in the future by contacting the data protection officer under the abovementioned contact option.

3.2.3. Storage period and erasure of data

As soon as the registration or user account on our website is erased or modified, the data processed during the registration process will be erased. Personal data will only be stored further if required by law in individual cases.

3.2.4. Erasure/change of registration/user account

As a user, you can have your registration or user account erased at any time. You can also have your stored personal data changed at any time. To do so, please contact the data protection officer under the abovementioned contact option. Premature erasure of personal data is only possible insofar as this does not contradict contractual or legal obligations.

3.3.    Newsletter (CleverReach)

3.3.1. Type, purpose, and scope of processed data

On our website, you have the option to subscribe to our newsletter. To sign up, we need your email address and your consent to receive the newsletter.

The newsletter is sent via the service provider CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany (“CleverReach”). CleverReach acts as a data processor in accordance with Article 28 of the GDPR.

In connection with the distribution of the newsletter, CleverReach processes your email address and, if applicable, additional information used to manage and analyze the distribution of the newsletter. In particular, this may include information regarding the sending, delivery, opens, and interactions with the newsletter content (e.g., clicks on links contained therein).

This processing is carried out for the purpose of sending and managing our newsletter, as well as for evaluating and optimizing our newsletter communications.

3.3.2. Legal basis

Consent is given through the so-called double opt-in process. After you sign up, you will receive an email in which you must confirm your subscription. You will be added to the newsletter mailing list only after you have confirmed your subscription.

You may revoke your consent at any time with future effect. To do so, you can use the unsubscribe link at the bottom of each newsletter or contact us via the privacy contact options provided.

3.3.3. Storage period and erasure of data

Your data will be stored for as long as you remain subscribed to the newsletter. After you unsubscribe from the newsletter, your personal data will be erased from the newsletter distribution list, provided that no legal retention requirements or legitimate interests preclude further storage.

Data required to verify that consent has been given (e.g., the time of registration and confirmation via the double opt-in process) may be stored for the duration of the statutory limitation periods.

3.3.4. Data Transfer to CleverReach

CleverReach processes the data exclusively on our behalf and based on a data processing agreement in accordance with Article 28 of the GDPR.

4. DATA DISCLOSURE TO THIRD PARTIES

We will only share your personal data with third parties if:

• you have given explicit consent in accordance with Art. 6 para 1 lit a GDPR,
• it is legally permissible and necessary for the fulfillment of a contract with you,
• there is a legal obligation for the disclosure according to Art. 6 para 1 lit c GDPR,
• the disclosure is necessary according to Art. 6 para 1 lit f GDPR to protect legitimate interests and for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data.

Generally, no personal data will be passed on to third parties outside the European Union and the European Economic Area.

5. USE OF COOKIES

Our websites use cookies. A cookie is a small text file that is stored on your device via your browser.

We use cookies to make our websites more user-friendly. Some cookies remain on your device until you delete them. They allow us to recognize your browser the next time you visit.

Cookie Box: Integration of Third-Party Services and Content – External Media & Statistics

When you visit our website for the first time, a cookie box appears where you can select which cookies you accept. By default, you accept only the cookies that are necessary for the operation of the website. This website uses a Borlabs cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie settings—that is, it stores the consent you provided when you accessed the website. The Borlabs cookie does not collect any personal data.

For more information on which cookies are used and for what purposes, please refer to the website’s cookie box and the explanations provided in Section 5 of this Privacy Policy below. You can access the information about cookies in the cookie box at any time and change your settings by deleting the cookies in your browser and adjusting the settings in the cookie box. By accepting the respective cookies in the cookie box, you enable the selected third-party media, such as maps (Google Maps), video streaming (YouTube), links to social media (Facebook, Instagram, etc.), and analytics tools (e.g., Google Analytics), which have their own privacy policies. By enabling external media, your data may be transferred to countries outside the European Union or the European Economic Area. You can find links to the respective privacy policies in the cookie box, as well as further information in the sections below.

The legal basis for mandatory technical cookies is our legitimate interest in operating our website.

The legal basis for the cookies you select is your consent. You can revoke your consent at any time by deleting the cookies in your browser or changing the settings in the cookie box.   

5.1. Google Analytics 4

If you have given your consent, we use Google Analytics, a widely used web analysis tool from Google LLC, on our website. In the EU, the EEA and Switzerland the controller is Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, Ireland (“Google”). Google acts as a processor for us.

Google Analytics uses cookies that are stored in your browser and that allow us to gain insights into user behavior to improve our online presence and optimize advertising efforts. The information about your use of our website that is collected via cookies is generally transmitted to a Google server in the USA and stored there.

Google Analytics does not log or store your IP address. IP addresses are by default anonymized. Due to this IP anonymization, your IP address will be abbreviated within member states of the EU or the EEA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. All IP addresses collected from users in the EU are deleted before the data is stored in a data center or on a server.

During your visit to our website, your user behavior is recorded in the form of “events”. Events can include:

• Page views, first visit to the website, start of the session, web pages visited, your “click path”, interaction with the website, clicks on external links, interaction with videos, file downloads, adverts viewed/clicked on, language setting, your approximate location (region), date and time of the visit, IP address (in abbreviated form), technical information about your browser and the end devices you use (e.g. language setting, screen resolution), referrer URL (the previously visited page).

On behalf of the operator of this website, Google will use this information to analyze your use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our SAL website. 

Recipients of the information are or may be:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (als Auftragsverarbeiter gemäß Art. 28 DSGVO),
• Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

For data transfers to the USA, a decision by the European Commission is in place, in which the level of data protection for certified companies in the USA has been declared appropriate (“adequacy decision”). Google LLC is certified as such a company (see https://www.dataprivacyframework.gov/listAny data transfer to Google LLC in the USA therefore takes place on the basis of Art. 45 para 1 GDPR in conjunction with the EU-US Data Privacy Framework.

The maximum lifespan of Google Analytics cookies is two years.

Your data is being processed based on the declaration of consent voluntarily given by you in accordance with Art. 6 para 1 lit a GDPR. You actively give your consent by clicking on “Accept all” or by ticking the box for the respective processing purpose in the cookie box when you visit our website. No analysis cookies will be set before you give your consent. Once you agreed to processing, you can withdraw your consent by unchecking the respective box in the cookie box at any time (“Off” setting). You can also prevent the storage of cookies from the beginning by choosing the appropriate setting in the “Privacy settings” in the cookie box.   

To prevent information about your use of the website from being collected by Google Analytics and transmitted to Google Analytics, you can download and install a plugin for your browser at the following link: http://tools.google.com/dlpage/gaoptout?hl=deFor more information, please see the cookie box in the “Google Analytics” section.

5.2.    Google Tag Manager

We use the Google Tag Manager by Google LLC on our website. In the EU, the EEA and Switzerland the controller is Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, Ireland (“Google”). Google acts as a processor for us.

Google Tag Manager is a service for centrally managing various tracking tags (such as Google Analytics) using a single interface. Tags are small code elements that help us measure traffic and visitor behavior, understand the impact of our advertising, set up remarketing and target group optimizations, and test and optimize our website, among other things. The tags often come from internal Google products such as Google Ads or Google Analytics, but tags from other companies can also be integrated and managed via the Manager. The Google Tag Manager is just an auxiliary service that facilitates the integration and management of our tags via an interface. The Google Tag Manager is a domain and only implements tags, which means that it does not use its own cookies and does not collect any personal data. It merely triggers other tags that may collect data, but it does not access this data. The tags that collect data (e.g. Google Analytics), which we manage using Google Tag Manager, are listed in this data protection declaration.

The use of Google Tag Manager is based on our legitimate interest in accordance with Art. 6 para 1 lit f GDPR to analyze the behavior of website visitors and thus improve our offer technically and economically.

Google processes data mainly on servers within the EU. However, data may also be processed on servers in the USA. For data transfers to the USA, a decision by the European Commission is in place, in which the level of data protection for certified companies in the USA has been declared appropriate (“adequacy decision”). Google LLC is certified as such a company (see https://www.dataprivacyframework.gov/listAny data transfer to Google LLC in the USA therefore takes place on the basis of Art. 45 para 1 GDPR in conjunction with the EU-US Data Privacy Framework.

Further information on Google Tag Manager and Google's privacy policy can be found at https://policies.google.com/privacy?hl=de and https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/ .

5.3.    Google Ads Remarketing und Conversion-Tracking

We use Google Ads and Remarketing, widely used online advertising programs by Google LLC, on our website. In the EU, the EEA and Switzerland the controller is Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, Ireland (“Google”). Google acts as a processor for us.

As part of Google Ads and Remarketing, we use so called conversion tracking functions and remarketing functions. This means:

• Conversion-Tracking:When you click on a Google ad, a cookie is stored on your device that records information such as pages visited and the duration of the visit. This information helps us analyze the success of our ads and improve our marketing. The cookies are valid for 90 days and are not used to identify you personally. If you visit certain pages of our website when the cookie has not yet expired, Google and we can recognize that you have clicked on a specific ad and have been redirected to this page. Google Ads customers (us) each receive a different cookie. It is therefore not possible to track cookies via the websites of Google Ads customers. The data collected using the conversion cookie is used to create conversion statistics for Google Ads customers who use conversion tracking. The customers find out the number of users who clicked on their ad and were then redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
• Remarketing:With the help of remarketing, we can show you targeted advertising on other websites within the Google network. For this purpose, Google uses a cookie to store certain information about your surfing behavior to be able to present you with suitable advertisements from us again when you use the Internet again/later. This enables Google to determine the previous visit of each user to the website. The storage period for these cookies is 540 days. Within this period, the data collected can be used for the above-mentioned purposes unless you delete the cookies prematurely in your browser settings. According to its own statements, Google does not merge the data collected in the context of remarketing with personal data of the users of this website, which may be stored by Google. Further information on data protection at Google and how remarketing works can be found in Google's privacy policy.

Recipients of the information are or may be:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (als Auftragsverarbeiter gemäß Art. 28 DSGVO),
• Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

For data transfers to the USA, a decision by the European Commission is in place, in which the level of data protection for certified companies in the USA has been declared appropriate (“adequacy decision”). Google LLC is certified as such a company (see https://www.dataprivacyframework.gov/listAny data transfer to Google LLC in the USA therefore takes place on the basis of Art. 45 para 1 GDPR in conjunction with the EU-US Data Privacy Framework.

Your data is being processed based on the declaration of consent voluntarily given by you in accordance with Art. 6 para 1 lit a GDPR. You actively give your consent by clicking on “Accept all” or by ticking the box in the cookie box in section “marketing”. No cookies will be set before you give your consent. Once you agreed to processing, you can withdraw your consent by unchecking the respective box in the cookie box at any time. You can also prevent the storage of cookies from the beginning by choosing the appropriate setting in the cookie box. Additionally, you can prevent participation in remarketing by either:

1. installing the plug-in provided by Google under the following link: https://www.google.com/settings/ads/plugin which opens an external URL in a new window, or by;
2. deactivating the interest-based ads of providers that are part of the “About Ads” self-regulation campaign via the link http://www.aboutads.info/choices, which opens an external URL in a new window;however, this setting is deleted when the cookies are deleted.

5.4.    LinkedIn Insight Tag

Furthermore, we use the LinkedIn Insight Tag conversion tool on our website, a widely used tracking tool from LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. In the EU, the EEA and Switzerland the controller is LinkedIn Ireland Unlimited, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

The LinkedIn Insight Tag enables us to carry out targeted advertising campaigns and gain insights into the behavior of visitors to our website to measure the success of our ads or advertising measures on LinkedIn and consequently to optimize our online marketing measures by analyzing whether users were redirected to our website after clicking on a LinkedIn ad. Using the LinkedIn Insight Tag, LinkedIn is also able to determine the visitors to our website as a target group for the display of ads, so-called “LinkedIn Ads”. Thus, we use the LinkedIn Insight Tag to display the LinkedIn ads placed by us only to LinkedIn users who have also shown an interest in our website (retargeting). The tool creates cookies in your web browser for these purposes, which enable the collection of the following data, among others: IP address, device and browser properties and page events (e.g. page views), information that LinkedIn provides from user profiles (e.g. industry, location, job position). 

To evaluate our advertising campaigns on LinkedIn, LinkedIn provides us with your data in an anonymous, aggregated format. We collect statistical information about website visitors who have reached us via our LinkedIn campaigns. You can find more information on data protection at LinkedIn in the LinkedIn privacy policyhttps://de.linkedin.com/legal/privacy-policy).

Recipients of the information are or may be:

• LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (als Auftragsverarbeiter gemäß Art. 28 DSGVO),
• LinkedIn Ireland Unlimited, Wilton Place, Dublin 2, Irland.

For data transfers to the USA, a decision by the European Commission is in place, in which the level of data protection for certified companies in the USA has been declared appropriate (“adequacy decision”). LinkedIn Corporation is certified as such a company (see https://www.dataprivacyframework.gov/listAny data transfer to LinkedIn Corporation in the USA therefore takes place on the basis of Art. 45 para 1 GDPR in conjunction with the EU-US Data Privacy Framework.

Your data is being processed based on the declaration of consent voluntarily given by you in accordance with Art. 6 para 1 lit a GDPR. You actively give your consent by clicking on “Accept all” or by ticking the box in the cookie box when you visit our website. No cookies will be set before you give your consent. Once you agreed to processing, you can withdraw your consent by unchecking the respective box in the cookie box at any time. You can also prevent the storage of cookies from the beginning by choosing the appropriate setting in the cookie box.

You can object to the collection by the LinkedIn Insight Tag and use of your data to display LinkedIn ads. To do this, you can go to the pages set up by LinkedIn and follow the instructions there on the settings for usage-based advertising: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out?trk=microsites-frontend_legal_cookie-policy or https://www.linkedin.com/psettings/advertising?trk=microsites-frontend_legal_cookie-policy or declare your objection on the US site http://www.aboutads.info/choices/ .

5.5. Integration of external media

Content from external media is blocked by default. If external services are accepted, manual consent is no longer required to access this content.

There is no obligation to consent to the processing of your data to use this service. You can withdraw or adjust your selection at any time in the cookie box.

Some of the services we use process personal data in the USA. For data transfers to the USA, a decision by the European Commission is in place, in which the level of data protection for certified companies in the USA has been declared appropriate (“adequacy decision”). Certified companies can be accessed via the following link (see https://www.dataprivacyframework.gov/listAny data transfer to certified companies in the USA therefore takes place on the basis of Art. 45 para 1 GDPR in conjunction with the EU-US Data Privacy Framework.

Please note that not all functions of the website might be available due to individual settings.

We have integrated the following external media on our website:

• Google Maps
• YouTube

5.5.1.   Google Maps

Google Maps is an internet mapping platform that provides detailed geographical information. If you consent to the use of this service by ticking the respective box in the cookie box under “External media”, content from this platform will be displayed on our website. We have integrated Google Maps on our website to show you our locations.

Google Maps is a widely used mapping tool by Google LLC. In the EU, the EEA and Switzerland the controller is Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, Ireland (“Google”).

If you have consented to the use of the service via the cookie box (consent pursuant to Art. 6 para 1 lit a GDPR), your browser automatically connects to Google's servers and the content is automatically displayed. Google is responsible for all data processing. Further information on the purpose and scope of data processing as well as setting options to protect your privacy can be found in Google's privacy policy https://www.google.de/intl/de/policies/privacy.

Once you agreed to processing, you can withdraw your consent by unchecking the respective box in the cookie box at any time. You can also prevent the storage of cookies from the beginning by choosing the appropriate setting in the cookie box. However, if you configure your browser to reject all cookies, this may restrict the functionality of this and other websites.

5.5.2.   YouTube

We have integrated YouTube videos on the website to be able to present interesting videos directly on our site.

YouTube is a service by Google LLC. In the EU, the EEA and Switzerland the controller is Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, Ireland (“Google”).

If you have consented to the use of the service via the cookie box (consent pursuant to Art. 6 para 1 lit a GDPR), your browser automatically connects to YouTube’s/Google’s servers and the content is automatically displayed. Depending on the settings, various data (cookies) are transmitted. Google is responsible for all data processing. Further information on the purpose and scope of data processing as well as setting options to protect your privacy can be found in Google's privacy policy https://www.google.de/intl/de/policies/privacy.

Once you agreed to processing, you can withdraw your consent by unchecking the respective box in the cookie box at any time. You can also prevent the storage of cookies from the beginning by choosing the appropriate setting in the cookie box. However, if you configure your browser to reject all cookies, this may restrict the functionality of this and other websites.

6.    Plugins

Our website contains plugins of the following social networks:

• „LinkedIn“ (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland)
• “Facebook” (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland),
• “Instagram” (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland),
• “YouTube” (Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA),
• X (Twitter) (X Corp., 865 FM 1209, Building 2, Bastrop, TX 78602, USA bzw. X Internet Unlimited Company One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland),

It is possible that personal data about website users is collected via these plugins, transmitted to the respective service and linked to the user’s respective service. Within our online services, those social plugins are marked by buttons of the respective services. Based on the data transmitted to the respective service via the social plugins, the service may be able to link you to your account if you have one on their platform. The social media buttons are integrated using the so-called Shariff solution. This solution, developed by Heise and c’t, prevents a connection to a social network if you open a webpage containing a social media button without activating the button. This means that information is only transmitted to the social network when you use the button.

Please check out the data protection information of the respective social network on their website if you want to learn more about the scope and purpose of the data collection as well as further processing and use of your data by the respective service. There you will also find further information about your respective data protection rights and settings to protect your privacy.

• “Facebook”

https://www.facebook.com/policy.php

https://www.facebook.com/help/186325668085084

• “Instagram”

https://help.instagram.com/519522125107875

• “LinkedIn”

https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

• “X” bzw. “Twitter”

https://x.com/privacy?lang=de

• “YouTube”

Datenschutzerklärung – Datenschutzerklärung & Nutzungsbedingungen – Google

6.1. Use of WordPress Plugins

Our website is based on the WordPress content management system and uses various plugins for technical implementation, security, optimization, and to expand the functionality of our website.

Some of these plugins process personal data, in particular IP addresses, usage data, cookie consents, or data actively entered by the user (e.g., via forms). Processing is carried out exclusively to the extent necessary and on the basis of the respective legal grounds pursuant to Art. 6(1)(a), (b), or (f) of the GDPR.

Plugins relevant to data protection include, in particular:

• Borlabs Cookie for managing and documenting cookie consent
• Akismet Anti-Spam for detecting and preventing spam entries
• Redirection for managing redirects and optional logging of technical access data
• WP Activity Log for logging security-related activities within the system
• Elementor Pro (if forms or interactive content are used)
• TranslatePress (if language-related settings are stored)
• Smush (if external image optimization services or CDN functions are used)

To the extent that plugins transfer data to external service providers or to third countries (in particular the United States), this is done exclusively on the basis of appropriate safeguards in accordance with Art. 44 et seq. of the GDPR, in particular adequacy decisions by the European Commission or standard contractual clauses.

Purely technical plugins that serve exclusively for internal administration or the display of the website and do not transfer any personal data to third parties are not listed separately.

7.    Social Media

7.1. Type, purpose and scope of processed data

SAL is represented on social networks and platforms to communicate with the respective users and inform them about news.

We have no influence on the type and scope of data processed by the provider of the respective network/platform nor on the type of processing and use or the possible transfer of this data to third parties. We cannot monitor or control this. Please note that social media/platforms and their features are used voluntarily and on a person’s own responsibility. When deciding to use the respective service, the terms of use and data protection of the respective provider apply.

SAL uses social media and other platforms to complete the existing communication channels of SAL, such as the website, press releases, the newsletter, products in prints, and events.

7.2. Legal basis

The use of social networks and platforms is in the interest of SAL to fulfill and improve targeted public relations in accordance with Art. 6 para 1 lit f GDPR.

Currently used social networks and platforms are:

• YouTube (Google LLC): 1600 Amphitheatre Parkway, Mountain View, California 94103, USA; data protection declaration: https://policies.google.com/privacy/partners
• LinkedIn Inc.: LinkedIn Ireland Unlimited Company, Gardner House, 2 Wilton Pl, Dublin 2, D02 CA30, Irland; data protection declaration: https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy
• Kununu: New Work SE, Am Standkai 1, 20457 Hamburg, Deutschland; data protection declaration: https://privacy.xing.com/de/datenschutzerklaerung
• Instagram (Facebook Ltd.): Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; data protection declaration: https://help.instagram.com/519522125107875

8.    Hyperlinks

Our website contains hyperlinks to websites of other providers. When activating these hyperlinks, you will be redirected from our website directly to the website of the respective provider. One sign that you are redirected to another website is the change in the URL. We cannot accept any responsibility for the confidential handling of your data on third-party websites, as we have no influence on whether these third-parties comply with data protection regulations. Please inform yourself about the handling of your personal data by these third parties directly on their respective website.

9. REGISTRATION AND ADMINISTRATION OF EVENTS

9.1. Type, purpose and scope of processed data

The personal data provided by you as part of your registration or administration of one of our events will be processed by us for the purpose of managing your registration and participation in the event.

In particular, we process the following types of data:

• Sex,
• First name,
• Last name,
• Academic title,
• E-mail address,
• Company,
• Job title,
• Phone number,

9.2. Legal basis and storage period

The legal basis is the fulfillment of the contract or the implementation of pre-contractual measures (Art. 6 para 1 lit b GDPR). Without you providing the mandatory data, we cannot process your registration or participation in the event.

Another legal basis for the processing of the data voluntarily provided by you is our legitimate interest (Art. 6 para 1 lit f GDPR). The legitimate interest lies primarily in further improving the quality of service for you as part of the organization of the event.

Your personal data will only be stored for as long as is necessary to fulfill the purpose. If the data is relevant under tax law, the retention period is at least seven (7) years (see Section 132 (1) BAO). Further retention periods may result from statutory retention periods or for the purpose of asserting, exercising or defending legal claims.

10. PICTURES, VIDEOS, VIDEO TALKS TAKEN AT EVENTS

10.1. Type, purpose and scope of processed data

Among other things, we organize road shows, trade fairs, research conferences and similar events. At these events, we may take photos, videos,video talks, and live streams of participants in connection with the respective event.. These pictures, videos, and video talks are used and processed to present the event and the research and development work, both online and offline (in the annual report, on our social media accounts, on the website, etc.). In some cases, we may pass this footage on to the press for publication.

10.2. Legal basis and storage period

Art. 6 para 1 lit f GDPR and § 12 (2) Z 4 DSG serve as the legal basis for the abovementioned processing of your personal data. Processing the abovementioned data is necessary to present the respective events and the research and development work and serves a legitimate interest of SAL. If necessary, we will obtain your consent for the processing of pictures, video, video talks (Art. 6 para 1 lit a GDPR)).

Pictures, videos, video talks will be erased as soon as there is no longer a legitimate interest to present the respective event or as soon as the person in question objects to the data processing. You are under no obligation to be photographed or recorded. If you do not agree to being photographed or published, please inform the photographer immediately or contact the event organization.

11. DATA SUBJECT RIGHTS

According to the GDPR, you have the following rights regarding the processing of your personal data:

• According to Art. 15 GDPR, you can request information about your personal data processed by us. In particular, you can request information about the processing purposes, the categories of personal data, the categories of recipients to whom your personal data has or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to complain, the origin of your data if not collected by us, and the transfer to third countries or international organizations.
• According to Art. 16 GDPR, you can immediately request the rectification of incorrect data or the completion of your personal data that is saved by us.
• According to Art. 17 GDPR, you can request the erasure of your personal data saved by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons to public interest, or for the establishment, exercise or defense of legal claims.
• According to Art. 18 GDPR, you can request the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful, we no longer need the data and you object to the erasure of the data because you need it for the assertion, exercise or defense of legal claims. The rights according to Art. 18 GDPR still apply to you if you have objected to the processing according to Art. 21 GDPR.
• According to Art. 20 GDPR, you can request to receive your personal data that you have provided to us in a structured, established and machine-readable format, or you may request that it be transferred to another person responsible.
• According to Art. 7 para 3 GDPR, you can withdraw your consent given to us by contacting the data protection officer under the abovementioned e-mail address. Consequently, we are not allowed to continue the data processing that was based on your consent in the future.
• According to Art. 21 GDPR, you have the right to object to the processing of your personal data, provided that the processing is based on the legitimate interest of SAL to process your personal data according to Art. 6 para 1 lit f GDPR. To do so, please contact dpo@silicon-austria.com.

If you believe that the processing of your personal data violates data protection law or your data protection rights have otherwise been violated in any way, you can contact the Austrian data protection authority (dsb@dsb.gv.at) or our data protection officer (dpo@silicon-austria.com) with your concerns.

12. UPDATES AND CHANGES TO THIS DATA PROTECTION DECLARATION

SAL reserves the right to update or modify this data protection declaration at any time without prior notice. The version currently published on the website applies.

13. Version