PRIVACY NOTICE

"We", AOP Orphan Pharmaceuticals GmbH (see details below) organized the Pulmonary Hypertension Academy (the “PH Academy”), welcome you to the PH Academy platform and would like to inform you about all PH Academy related data-protection issues in accordance with the General Data Protection Regulation (EU regulation 2016/679, in short: "GDPR"):

1. Data Controller

AOP Orphan Pharmaceuticals GmbH, is an Austrian corporation with its seat at Leopold-Ungar-Platz 2, 1190 Vienna. It is represented by its Board and can – pertaining to data-protection issues – also be reached under This email address is being protected from spambots. You need JavaScript enabled to view it..

2. Purpose of Data Processing

For you to be able to log in, partake, and access the 6th PH Academy, certain personal data must be processed. The purpose for such processing activities includes the possibility to log-in, be contacted in the future, receive photos and videos of the event, receive training certificates, manage the event.

3. Categories of Personal Data to be Processed

The following categories of personal data may be processed:

Category of Data Purpose and Examples of Personal Data
Access data Log-In
E-mail address, IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transmitted in each case, website from which the request comes, browser, operating system and its interface, language and version of the browser software, cookies, etc.
Contact data Future Contacting
E-mail address, names, country, employer, etc.
Event data Event Management
Status data regarding participation and log-in

4. Transfer of Personal Data

Your personal data may be transferred to affiliated companies and external service providers supporting us with, amongst other services, storage and administration of data, IT support, organizational measures, legal and tax consultancy, management consultancy. We make sure that any service provider is carefully selected and contractually bound to uphold relevant and applicable data protection legislation.

Among these service providers are also companies that process your data outside the European Union or have their headquarters there. In the case of such companies, we select companies that process the data at locations for which there is an adequacy decision by the Commission (Article 45 GDPR). If this requirement is not met, we only commission these service providers if they provide appropriate safeguards (Article 46 GDPR), for example by concluding the EU standard contractual clauses.

Category of Data Service Providers (Service)
Access data
  • ZUPmedia Dienstleistungs OG, Mauermannstr. 8/2, 5023 Salzburg (organizational activities, administration, IT support, etc.)
  • Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052 (data storage, IT support, etc.)
Personal Data
  • AOP Orphan Pharmaceuticals GmbH, Leopold-Ungar-Platz 2, 1190 Vienna, (organizational activities, administration, data storage, IT support, etc.)
  • ZUPmedia Dienstleistungs OG, Mauermannstr. 8/2, 5023 Salzburg (organizational activities, administration, IT support, etc.)
  • Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052 (data storage, IT support, etc.)
Contact data
  • AOP Orphan Pharmaceuticals GmbH, Leopold-Ungar-Platz 2, 1190 Vienna, (organizational activities, administration, data storage, IT support, etc.)
  • ZUPmedia Dienstleistungs OG, Mauermannstr. 8/2, 5023 Salzburg (organizational activities, administration, IT support, etc.)
  • Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052 (data storage, IT support, etc.)
Employment data
  • AOP Orphan Pharmaceuticals GmbH, Leopold-Ungar-Platz 2, 1190 Vienna, (organizational activities, administration, data storage, IT support, etc.)
  • ZUPmedia Dienstleistungs OG, Mauermannstr. 8/2, 5023 Salzburg (organizational activities, administration, IT support, etc.)
  • Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052 (data storage, IT support, etc.)
Event data
  • AOP Orphan Pharmaceuticals GmbH, Leopold-Ungar-Platz 2, 1190 Vienna, (organizational activities, administration, data storage, IT support, etc.)
  • ZUPmedia Dienstleistungs OG, Mauermannstr. 8/2, 5023 Salzburg (organizational activities, administration, IT support, etc.)
  • Vimeo.com, Inc., 330 West 34th Street, New York, New York 10001 (Streaming platform, statistic data)

5. Legal Basis for Processing of Personal Data

With your participation in the 16th PH Academy, whether in connection with its initiation, performance or termination, the legal basis for processing is Article 6 paragraph 1 sentence 1 lit b GDPR. Your data will be stored until the end of the statutory retention period, which is generally seven years. In all other cases, the legal basis is Article 6 paragraph 1 sentence 1 lit f of the GDPR, according to which the processing of personal data may be carried out without the consent of the data subject if the processing is necessary to safeguard the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular if the data subject is a child. Communication outside a contractual relationship is in our mutual interest. We store your data until the purpose resulting from the legitimate interest is fulfilled.

If a contractual relationship is established between us regarding the participation in an event, we will subsequently process your data for the purpose of performing and, if necessary, terminating the contractual relationship. This typically results in the processing of further data. In this respect, the legal basis of the processing is Article 6 paragraph 1 sentence 1 lit b GDPR. In this case, we store the data until the end of the statutory retention period, which is generally seven years.

6. Data Protection

We maintain up-to-date technical measures to ensure data security, in particular to protect your personal data from risks during data transmission and from third parties gaining knowledge of them. These measures are always adapted to the current state of the art.

7. Your Rights in connection with the Processing of Personal Data

With regard to data privacy, you have various rights. However, these rights may be subject to conditions which we will insist on. In detail, you have the following rights:

Right of access by the data subject (Article 15 GDPR):
In accordance with Article 15 GDPR, you have the right to receive information about your personal data processed by us at any time and free of charge. We will send you this information in electronic form or as a copy upon request.
In accordance with Article 16 GDPR, you can demand that we correct processed incorrect personal data.

Right to erasure (Article 17 GDPR):
Under the conditions of Article 17 GDPR, you can demand from us the immediate erasure of the personal data concerning you. You can demand the erasure of your personal data if, among other things, they are no longer necessary for the purposes for which they were collected or processed, if you revoke any consent, you may have given and no other legal basis applies, if you have objected to the processing and there are no overriding legitimate reasons for the processing or if the data processing was unlawful.

Right to restriction of processing (Article 18 GDPR):
You have the right to request that the processing of your personal data be restricted if the conditions of Article 18 GDPR are met.

Right to data portability (Article 20 GDPR):
This right exists if the data processing was carried out with your consent or was necessary for the performance of the contract.

Right to object (Article 21 GDPR):
Under Article 21 GDPR, you have the right to object at any time to the processing of personal data concerning you for reasons arising from your particular situation. We will then no longer process your personal data unless we can prove compelling and legitimate reasons for processing which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

Right to lodge a complaint with a supervisory authority (Article 77 GDPR)
Furthermore, you have the right to complain about us to the supervisory authority responsible for us in accordance with Article 77 GDPR.

Last updated: Vienna, April 2021