Data protection policy for online applications

Data protection policy for online applications

Privacy statement

Considering its responsibility for data processing, Bertha von Suttner Privatuniversität St. Pölten GmbH, Campus-Platz 1, 3100 St. Pölten, Austria,, takes the topic of data protection and confidentiality very seriously. The university thus follows applicable Austrian and European data protection regulations. In the following, Bertha von Suttner Privatuniversität St. Pölten GmbH would briefly like to explain the most important aspects of the topic according to current data protection policy.

Data collection and the purposes of the processing

Data are processed automatically for the purpose of processing your online application. That application constitutes the conclusion of a preliminary contract under civil law and makes automated data processing unavoidable. 
Your application can only be processed by means of the online application provided and by your disclosing the required information (fields marked with an asterisk * are mandatory). Your application cannot be processed if the necessary data are not provided. 

If the admissions process concludes with you being accepted to study at the university, the further processing of the data shall take place for the purpose of fulfilling the training contract, or on the basis of the reporting duties legally incumbent on Bertha von Suttner Privatuniversität GmbH; information on this will be provided separately if a training contract is concluded.

In addition to this, your data will be used for the purpose of directly marketing our own, similar products or services (degree courses, continuing education courses or events the university offers or that have been newly accredited, and which are closely related to the interests you have expressed). This use is justified as a legitimate interest of Bertha von Suttner Privatuniversität GmbH. You can object to this processing for the purposes of direct marketing at any time by e-mailing or via the postal address given in the legal section without this affecting the legality of the processing prior to the withdrawal of your consent.

What data are stored?

We store all the information that you provide as part of your online application.

How long are the data stored?

If your application is rejected, the data you provide will be erased within six months of the admissions process coming to an end, apart from your name and form of address, your home address, country, telephone number, e-mail address and the educational programme you selected.

For the purposes of direct marketing, your data, including, but not limited to, your name, home address and e-mail address, will be processed for a period of 3 years after you last contact us, unless you have objected to the processing by e-mailing the above e-mail address, in which case these data will also be deleted after 6 months. 

If your application concludes with you being accepted to study at Bertha von Suttner Privatuniversität GmbH and thus with the conclusion of a training contract, your data will be added to your student file. In the context of the training contract, you will be informed separately about the legal consequences of concluding a contract. 

Recipients of transferred data

The data collected will be used by members of staff working for Bertha von Suttner Privatuniversität GmbH. In order to fulfil the above purposes, your data may be transferred to members of staff working for Fachhochschule St. Pölten GmbH, Campus-Platz 1, 3100 St. Pölten, Austria.

If your application is sent from abroad, then the authenticity of your graduation certificates may be checked with the Austrian Federal Ministry of Education, Science and Research or with the higher education institute in your country.

Data security

All data are stored on servers that are run with a high security standard and are protected against access by unauthorised people, and against misuse.

Other rights of the data subject

In addition to this, you have the following rights: 

  • Right of access to relevant personal data
  • Right to rectification, erasure or restriction of processing
  • Right to data portability

You may assert these rights towards Bertha von Suttner Privatuniversität GmbH as the entity responsible for processing the data (

  • Right to lodge a complaint

with the Austrian Data Protection Authority – Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, Austria, e-mail: – as the relevant supervisory authority.

If you have any further questions or suggestions, you are welcome to e-mail us at any time at