WU (Vienna University of Economics and Business) is committed to protecting your personal data. Your personal data are kept confidential and processed in accordance with the provisions of the applicable data protection laws. In fulfillment of the regulations of the General Data Protection Regulation (GDPR), in particular Article 13, we would like to inform you about the types of personal data that are processed in connection with your visit to our publicly accessible WU website or when accessing the content provided at the wu.ac.at domain, and we would also like to inform you about the purposes for which these data are processed. The Privacy Policy primarily refers to the pages of the WU website that are publicly accessible, that means they can be accessed without prior registration.

Contact information

You can contact us at:

If you have any questions regarding the content of this Privacy Policy, please contact IT‑SERVICES at wu-web@wu.ac.at. For any other matters related to data protection, please contact the WU data protection team at datenschutz@wu.ac.at.

Which types of personal data are processed and for which purposes?

When you visit the WU website, we collect the following data:

1. Server log files

We process only the technically necessary data that are provided to us automatically as a result of your visit to the WU website. These data are logged in server log files. The following categories of personal data are logged:

• The IP address you are accessing the site from

• Access date and time

• Access method (e.g. GET)

• Accessed URL

• Access protocol used (e.g. HTTP/1.1)

• HTTP response status code

• File size

• Referring page (referrer URL)

• Operating system and browser type (user agent)

Log files are saved for a period of 4 weeks. We process these data to ensure proper operations and to monitor the performance of the WU website. If you have given your consent, we also process these data to generate user statistics.

2. Cookies

We use so-called cookies on the WU website. Cookies are small files stored on your end device by your browser when you visit a website. The next time you visit the WU website using the same end device, the information stored in the cookies is sent back to us. Cookies enable us to recognize the browser of your end device on your next visit to the WU website and to ensure the WU website is optimally displayed in accordance with your preferences and settings. Some cookies on the WU website are so-called session cookies. They will be deleted automatically once you leave our website. Other cookies will be deleted after expiry of the period mentioned in the cookie settings.

Our website uses the following types of cookies, the scope and functionality of which are explained below:

• Strictly necessary cookies are set to ensure that our website functions properly.

• Statistics cookies help us make the WU website as user-friendly as possible. We use these cookies to analyze our website’s access statistics, find out more about how our visitors use the WU website, and improve our services.

• Marketing Cookies are set to integrate third-party website services to display advertising that may be of interest to you.

For detailed information on the cookies used on the website, please see the “Cookie settings” menu. Here you can review and change the settings any time you wish. You can also change the settings for handling cookies directly in your browser, or you can delete cookies. For details, please see the help menu in your browser. Please note that blocking or deleting cookies can limit certain functions of the website.

If you enable statistics cookies or marketing cookies or click the “Select all” button, your data are processed on the basis of your consent (Art. 6 (1) item a of the GDPR). By consenting to the use of such cookies, you also expressly consent to your data being transferred to the USA (Art. 49 (1) item a of the GDPR).

You can withdraw your consent at any time. However, this withdrawal does not affect the lawfulness of processing before the withdrawal. The easiest way to do that is by adjusting the settings in your individual cookie preferences accordingly.

For further information on cookies, please see the cookie settings (in “Individual cookie preferences”) and the following section.

3. Tracking and analysis

3.1. Google Analytics

This website uses Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). We use Google Analytics to analyze and improve the user experience on our website. In addition, Google Analytics, together with GoogleAds, allows us to analyze and optimize the effectiveness of our advertising measures and enhance the services we offer. As a consequence of using Google Analytics, data are transferred to the USA, or the transfer of data to the USA cannot be ruled out. For organizations participating in the Data Privacy Framework (DPF), the EU Commission recognizes an adequate level of data protection. Accordingly, the transfer of data to the USA is based on the DPF. Such data are processed on the basis of your consent (Art. 6 (1) item a of the GDPR), which you expressly gave by setting your cookie preferences.

You can withdraw your consent at any time. However, this withdrawal does not affect the lawfulness of processing before the withdrawal. The easiest way to do that is by adjusting the settings in your individual cookie preferences accordingly.

You can prevent the storage of cookies by selecting the appropriate settings in your browser; please note, however, that if you do this you may not be able to use the full functionality of this website. Please also see item 2, Cookies, above.

For more information on how data are processed by Google Analytics, please see Google’s Privacy Policy at https://policies.google.com/privacy?hl=en or https://support.google.com/analytics/answer/6004245?hl=en.

3.2. Meta pixel

For our website, we use the “Meta pixel” service provided by “Meta” (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) to analyze, measure the performance of, and optimize our online offer.

The Meta pixel serves the purpose of showing the ads placed by us only to Facebook users who are interested in the services we offer. In addition, the Meta pixel helps us to analyze the effectiveness of our ads for statistical purposes by allowing us to see whether users were referred to our website after having clicked on a Facebook ad, and how they used our website.

Integrating the Meta pixel provides Meta with the information that you clicked on our ad or accessed our website. The data collected do not allow any conclusions as to the identity of the users. If you are registered with Facebook, Meta can link the recorded information to your account. Even if you do not have a Facebook account or are not logged in when you visit our website, it is possible that Meta processes and retains your IP address and additional identification data.

As a consequence of using the Meta pixel, data are transferred to the USA, or the transfer of data to the USA cannot be ruled out. For organizations participating in the Data Privacy Framework (DPF), the EU Commission recognizes an adequate level of data protection. Accordingly, the transfer of data to the USA is based on the DPF.

Data are processed on the basis of your consent (Art. 6 (1) item a of the GDPR), which you expressly gave by setting your cookie preferences.

You can withdraw your consent at any time. However, this withdrawal does not affect the lawfulness of processing before the withdrawal. The easiest way to do that is by adjusting the settings in your individual cookie preferences accordingly.

For more information on the Meta pixel and its functionality, please see the Meta Help Centre and Meta’s Privacy Policy.

3.3. LinkedIn Insight Tag

For our website, we use the “LinkedIn Insight Tag” service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland to analyze, measure the performance of, and optimize our online offer.

We use the service to optimize our advertising measures and to enhance the services we offer. As a consequence of using the LinkedIn Insight Tag, data are transferred to the USA, or the transfer of data to the USA cannot be ruled out. For organizations participating in the Data Privacy Framework (DPF), the EU Commission recognizes an adequate level of data protection. As of 1.9.2023, LinkedIn does not participate in the DPF. The transfer of data to the USA is therefore still based on standard contractual clauses.

Such data are processed on the basis of your consent (Art. 6 (1) item a of the GDPR), which you expressly gave by setting your cookie preferences. By consenting to the use of LinkedIn’s cookies, you also expressly consent to your data being transferred to the USA (Art. 49 (1) item a of the GDPR).

You can withdraw your consent at any time. However, this withdrawal does not affect the lawfulness of processing before the withdrawal. The easiest way to do that is by adjusting the settings in your individual cookie preferences accordingly.

You can prevent the storage of cookies by selecting the appropriate settings in your browser; please note, however, that if you do this you may not be able to use the full functionality of this website. Please also see item 2, Cookies, above.

For more information on how data are processed by LinkedIn, please see the LinkedIn Privacy Policy.

3.4. X Ads

For our website, we use the services provided by Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland to analyze, measure the performance of, and optimize our online offer.

We use these services to analyze and optimize our advertising measures and to enhance the services we offer. As a consequence of using these services, data are transferred to the USA, or the transfer of data to the USA cannot be ruled out. For organizations participating in the Data Privacy Framework (DPF), the EU Commission recognizes an adequate level of data protection. As of 1.9.2023, X does not participate in the DPF. The transfer of data to the USA is therefore still based on standard contractual clauses.

Such data are processed on the basis of your consent (Art. 6 (1) item a of the GDPR), which you expressly gave by setting your cookie preferences. By consenting to the use of Twitter’s cookies, you also expressly consent to your data being transferred to the USA (Art. 49 (1) item a of the GDPR).

You can withdraw your consent at any time. However, this withdrawal does not affect the lawfulness of processing before the withdrawal. The easiest way to do that is by adjusting the settings in your individual cookie preferences accordingly.

You can prevent the storage of cookies by selecting the appropriate settings in your browser; please note, however, that if you do this you may not be able to use the full functionality of this website. Please also see item 2, Cookies, above.

For more information on how data are processed by Twitter, please see the Twitter Privacy Policy.

3.5. Matomo

To analyze and optimize our online offer, the WU website uses the “Matomo” open-source software, which we operate on WU servers. Such data are processed on the basis of your consent (Art. 6 (1) item a of the GDPR), which you expressly gave by setting your cookie preferences. You can withdraw your consent at any time. However, this withdrawal does not affect the lawfulness of processing before the withdrawal. Please also see item 2, Cookies, above.

3.6. Hotjar

In connection with our website, we use Hotjar, a web analytics service provided by Hotjar Ltd, Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta ("Hotjar"). We utilize Hotjar to analyze website usage and enhance our website. Additionally, it allows us to optimize the user experience on our website and further develop our offerings.

Hotjar enables us to understand user interactions with our website by collecting information such as mouse movements, clicks, and scrolling behavior. This information assists us in making our online offerings more user-friendly and efficient.

In the course of using Hotjar, anonymized personal data is collected and processed. Hotjar may collect information such as IP addresses, browser data, device type, operating system, and similar data. The collected data is stored on Hotjar's servers.

The processing of this data is based on your consent (Art. 6(1)(a) GDPR), which you have expressly granted to us through your selected cookie settings.

You can withdraw your consent at any time, but this withdrawal does not affect the lawfulness of data processing conducted before the withdrawal. The simplest way to do this is through the corresponding controls in the Individual Cookie Settings.

You can also prevent the storage of cookies by adjusting your browser settings; however, please note that in this case, you may not be able to fully utilize all the functions of this website. See also section 2. Cookies above.

For more information about data processing in connection with Hotjar, please refer to Hotjar's privacy policy at https://www.hotjar.com/legal/policies/privacy.

4. Social media

4.1. Social media share buttons

The WU website uses social media buttons to allow users to share content from the pages to their social networks. Unlike other share buttons, the solution used by WU does not pass on any data to social media operators when you simply access the WU website. Only if you click on the share button will your data be transferred to the relevant social network. If you do not click on the share button, no data will be exchanged between you and the relevant social network.

4.2. Online presence in social media

We maintain online profiles on social networks and platforms. We operate our social media pages to inform the public about the fulfillment of the university’s responsibilities (public relations) in connection with the tasks entrusted to it by law, as well as for communication (responding to relevant inquiries). This is an additional service in addition to WU’s existing information and communication services, making it possible for users to communicate with WU.

In respect of our social media presence, we refer to information we provide on the relevant social media in our Social Media Data Protection Statement.

4.3. Video player

4.3.1. YouTube

We have embedded YouTube videos on our website that are stored on http://www.YouTube.com. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The videos have been embedded on our website using a technical method whereby no cookies are set (YouTube no cookie), that means none of your personal data as the user will be transferred to Google as long as you do not play the videos. Only if you play the videos will your IP address and, where applicable, activity data be transferred to Google. We do not have any influence on the type and extent of the data transferred and/or retained.

As a consequence of using this service, data are transferred to the USA, or the transfer of data to the USA cannot be ruled out. For organizations participating in the Data Privacy Framework (DPF), the EU Commission recognizes an adequate level of data protection. Accordingly, the transfer of data to the USA is based on the DPF.

Data are processed on the basis of your consent (Art. 6 (1) item a of the GDPR), which you expressly gave by setting your cookie preferences.

If you are logged in to your YouTube account, you enable Google to link your surfing behavior directly to your personal profile. You can prevent this by logging out from your YouTube account.

For more information on the purpose and scope of data processing and the options to set preferences to protect your privacy, please see Google’s Privacy Policy at https://policies.google.com/privacy?hl=en&gl=de.

4.3.2. Vimeo

We use Vimeo of Vimeo Inc., 555 West 18th Street, New York 10011, USA, to embed videos.

The videos have been embedded on our website in a manner so that none of your personal data as the user will be transferred to Vimeo as long as you do not play the videos. Only if you play the videos will your IP address and, where applicable, activity data be transferred to Vimeo. We do not have any influence on the type and extent of the data transferred and/or retained.

As a consequence of using this service, data are transferred to the USA, or the transfer of data to the USA cannot be ruled out. 

For organizations participating in the Data Privacy Framework (DPF), the EU Commission recognizes an adequate level of data protection. As of 1.9.2023, Vimeo does not participate in the DPF. The transfer of data to the USA is therefore still based on standard contractual clauses.

The European Court of Justice has not certified an adequate level of data protection for the USA. In particular, there is a risk that US authorities may be able to access your data for supervisory and monitoring purposes and that no effective legal remedies are available against this.

Data are processed on the basis of your consent (Art. 6 (1) item a of the GDPR), which you expressly gave by setting your cookie preferences. Your consent also means that you agree to your data being processed in the USA although there are no appropriate safeguards to ensure an adequate level of data protection (Art. 49 (1) item a of the GDPR).

If you are logged in to your Vimeo account, you enable Vimeo to link your surfing behavior directly to your personal profile. You can prevent this by logging out from your Vimeo account.

For more information on the purpose and scope of data processing and the options to set preferences to protect your privacy, please see Vimeo’s Privacy Policy at https://vimeo.com/privacy.

5. Chatbot

The WU website uses the AI-OS platform provided by Leftshift One to provide and display the chatbot, which is operated on WU's servers.

The chatbot is primarily aimed at WU students and individuals interested in studying and is designed so that no personal data is processed in principle. Questions can be asked anonymously (i.e. without providing the name or other personal information). Questions asked and associated conversations (or interactions with the chatbot) are logged and processed to improve the accuracy of the chatbot in answering future questions.

This data is not disclosed and is deleted after 30 days.

In the event that the chatbot does not have an answer to a question, it is possible to automatically generate an email and send it directly to a support employee. The generated email contains the asked question along with the conversation history and optional free text. To do this, the chatbot also requests the name and email address of the user so that the email can be generated and answered. The name and email address are not stored in the chatbot logs, but are sent directly to the support. For such cases, the provisions of the data protection declaration for students apply.

What is the legal basis for processing your data?

• Art. 6 (1) item a of the GDPR – consent

Your consent is required before we can process any personal data obtained from statistics or marketing cookies. You can withdraw your consent to any future data processing at any time. However, any processing of your data which occurred before consent was withdrawn remains legal and unaffected.

• Art. 6 (1) item f of the GDPR – pursuit of legitimate interests

The setting of strictly necessary cookies and the resulting processing of personal data is carried out in pursuit of our legitimate interest in providing our WU website for use without technical problems.

Does the processing involve any automated decision-making (profiling)?

No, no automated decision-making or profiling is involved.

Are you obligated to provide your personal data?

Consent to statistics and marketing cookies is voluntary. You are in no way obligated to provide the data associated with this consent.

Strictly necessary cookies are placed automatically when the WU website is accessed. Without collecting the personal data resulting from these cookies, we would not be able to provide the WU website for use without technical problems.

If you want to prevent cookies being saved on your computer altogether, you can also set this in your internet browser. Once set, cookies can also be deleted again. More information on managing your browser settings can usually be found in your browser’s help menu. Please also see item 2, Cookies, above.

To which other parties do we pass on your data?

As a general rule, we do not transmit your personal data to any third parties. In some cases, however, we may share your data with external service providers we cooperate with (currently, for example, Fonda Interaktive Medien und Kommunikation GmbH, Plan2Net GmbH and Noodles agency GmbH) for website maintenance, development and design purposes.

If you have given your consent, we will transmit personal data collected by statistics cookies and marketing cookies to the third parties mentioned in the “Cookie settings” in accordance with Art. 49 (1) item a of the GDPR.

You can withdraw your consent to any future data processing at any time. The easiest way to do that is by adjusting the settings in your individual cookie preferences accordingly.

What are your rights as a data subject?

As a data subject in the context of these data processing operations, you have the following rights vis-a-vis WU: information and access, rectification, deletion, restriction of data processing, data portability, and objection. As a data subject, you also have the right to file a complaint with the Austrian Data Protection Authority. Further information on your rights as a data subject is available on our website at Your rights as a data subject.

To exercise any of these rights, please contact the WU data protection team at datenschutz@wu.ac.at.

References to third-party websites (external links)

The WU website contains links to external, i.e. third-party websites that are not under WU’s control. WU does not have any influence on the contents and data protection standards of such linked websites. WU shall not be held liable for any external links.

Updates and amendments of this Data Privacy Policy

As our website and the services we offer on it are continuously enhanced, or following a change of legal requirements or requirements by authorities, it may become necessary to amend this Data Privacy Policy. The latest Data Privacy Policy can always be found on our website.