Privacy Policy

TU Wien i²c Innovation Incubation Center (i²c) is pleased that you are visiting our website. Data protection and data security when using our websites are very important to us. We would therefore like to inform you which of your personal data we collect when you visit our websites and for what purposes it is used.

As changes to the law or adjustments to our internal processes may result in changes to this privacy policy, we recommend that you read it regularly. The declaration can be accessed, saved and printed at any time at (https://i2c.tuwien.ac.at/privacy-policy/).

This Privacy Policy describes the policies of TU Wien Innovation Incubation Center (i²c), Taubstummengasse 11, Vienna 1040, Austria, email: office@i2c.tuwien.ac.at, phone: +43 58 801 406 677 on the collection, use and disclosure of your information that we collect when you use our website ( https://i2c.tuwien.ac.at ). (the “Service”). By accessing or using the Service, you are consenting to the collection, use and disclosure of your information in accordance with this Privacy Policy. If you do not consent to the same, please do not access or use the Service.

Personal data is information about a person that relates either to personal characteristics or to factual circumstances. This includes, for example, name, address, telephone number, date of birth, e-mail address, etc. However, information that does not allow any conclusions to be drawn about your person is not considered personal data.

a) Scope
We collect and use the personal data of our users only insofar as this is necessary for the provision and operation of our websites and the services offered. We use your personal data to provide the information, products and services we offer, to answer your questions and to operate and improve our websites and applications. If we use contracted service providers for individual functions of our offer, we always select them carefully, monitor them regularly and inform you in detail below about the respective processing operations and storage periods.

b) Legal basis
The collection and use of our users' personal data is only carried out on the basis of a corresponding legal basis. By being represented on digital communication channels that are frequently used by our legally defined target group, we fulfil our university tasks for target group-specific public relations work (Art. 6(1)(e) GDPR in conjunction with § 3 UG).

We also process data on the basis of your consent in accordance with Art. 6(1)(a) GDPR. This concerns web statistics and marketing cookies, which are only processed on the basis of your consent.

c) Data erasure and storage duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

If you wish to make use of the services offered by us on our website, it is necessary for you to provide further data. Details can be found below in the description of the specific data processing operations. In particular, personal data is used as follows:

a. Newsletter

If you sign up for our newsletter, we use your email address to send you regular updates about our offers, events and occasionally relevant news. The processing is based on your consent in accordance with Art. 6 (1) (a) GDPR.

To send you newsletters we collect:

• First Name and Last Name
• Email
• Your affiliation to a category, e.g. student, researcher, founder, investor, etc.

After signing up, you will receive an email asking you to confirm your subscription (double opt-in). Your email address will only be added to our mailing list after this confirmation.

Your data is used solely for sending the newsletter and documenting your consent.

We use Brevo as our newsletter and email communication service provider. Brevo processes your data on our behalf in accordance with Art. 28 GDPR. This includes storing your contact details, managing mailing lists, sending newsletters, and logging subscription or opt-out actions. Brevo may use cookies or similar tracking technologies to measure newsletter performance (e.g. delivery rates, open rates, link clicks) and ensure the security and functionality of the service.

For more information on how Brevo processes personal data, please refer to Brevo’s Privacy Policy.

Your data is stored only for as long as you are subscribed to the newsletter. You can withdraw your consent at any time and unsubscribe from the newsletter by using the unsubscribe link included in every newsletter or by contacting us directly.

b. Enquiries/Contact Form

If you contact us via the contact options offered on our website, we will process your voluntarily provided personal data (name, email address, content of your inquiry) in order to be able to answer your inquiry. This is done on the basis of our overriding interests pursuant to Art 6 para 1 lit f GDPR and, depending on the content, for pre-contractual measures pursuant to Art 6 para 1 lit b GDPR. We store this data as long as it is necessary to respond to your request, but for no longer than six months after the last contact.

We use cookies on this website. To learn more about how we use these and your choices in relation to these tracking technologies, please refer to our  Cookie Policy.

We use tracking and analysis tools to continuously optimise our website and design it to meet your needs. These measures enable us to statistically record the use of our website by visitors and to further develop the online offering on the basis of the knowledge gained.

We use Microsoft Clarity and Google Analytics to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft and Google collect and use your data, visit the  Microsoft Privacy Statement and Google's Data Privacy Policy respectively.

The legal basis for these technically unnecessary cookies is the voluntary consent in accordance with Art. 6(1)(a) GDPR, which is explicitly given by the selection in the cookie banner ("COOKIE SETTINGS").

This website uses conversion tracking from the social media platforms listed below, provided that the "Marketing" cookie category has been agreed to. With "conversion tracking" or visit action evaluation, the behaviour of users can be tracked after they have been redirected to the i²c website by clicking on a link. This process is used to evaluate the effectiveness of i²c’s marketing campaigns for statistical and market research purposes and can help to optimise future advertising measures.

The data collected by our tracking and analysis tools does not allow the i²c to draw any conclusions about your identity. However, the data is stored and processed by the companies listed below so that a connection to the respective user profile is possible and these companies can use the data for their own advertising purposes in accordance with the respective data usage guidelines (see below). You can enable these companies and their partners to place adverts on and outside their platforms. A cookie may also be stored on your computer for these purposes.

• Meta (Facebook, Instagram) (https://www.facebook.com/privacy/explanation, https://www.facebook.com/policies/cookies)
• LinkedIn (https://www.linkedin.com/legal/privacy-policy, https://de.linkedin.com/legal/cookiepolicy)

YouTube videos are also displayed on this website. We generally ensure that YouTube only processes data about you if you have given your consent in accordance with Art. 6(1)(a) GDPR. By loading YouTube videos, you consent to a connection to YouTube servers being established and cookies being set by this provider. Further information on how YouTube processes your data can be found at https://policies.google.com/privacy.

i²c operates channels on Instagram, Facebook, LinkedIn, X (formerly: Twitter) and YouTube. The operators of these social media platforms collect data on every visit, for example in the form of cookies. This means that personal data is processed, regardless of whether the user is registered or not. This data is made available to i²c in anonymised form by the social media operator through the respective Insight function. Consent to the execution of the visit action evaluation may only be given by users who are older than 14 years of age. If you are younger, please ask your legal guardian for permission.

We are committed to protecting your privacy and treating your personal data confidentially. In order to prevent the loss or misuse of data stored by us, we use comprehensive technical and organisational security measures, which are regularly reviewed and adapted to technological progress. Please note, however, that the structure of the Internet may mean that data protection regulations and the aforementioned security measures are not complied with by third parties outside our area of responsibility. Unencrypted data transmitted by e-mail, for example, may be read by third parties. We have no technical influence on such processes. It is the responsibility of users to protect the data they provide against misuse by means of suitable measures such as encryption or other measures.

Our websites contain so-called hyperlinks to websites of other providers. If you activate these hyperlinks, you will be forwarded directly from one of our websites to the website of the other provider. You can recognise this by the change of URL, among other things. We cannot accept any responsibility for the confidential handling of your data on third-party websites. Please refer directly to these websites for information on how these companies handle your personal data.

When your personal data is processed on the basis of "fulfilment in the public interest" and on the basis of "legitimate interests", you have the right to object to the processing of your personal data if there are reasons for this arising from your particular situation or if the objection is directed against direct advertising. In the case of direct marketing, you have a general right to object, which we will implement without you having to specify a particular situation.

The GDPR gives you the following rights as a data subject of the processing of personal data:

• Right to information
• Right to rectification
• Right to cancellation
• Right to restriction of processing
• Right to data portability
• Right of cancellation
• Right to object

To assert your rights, please contact office@i2c.tuwien.ac.at.

You also have the option of lodging a complaint with a data protection supervisory authority. The data protection supervisory authority responsible for us is the Austrian Data Protection Authority: Email: dsb.@dsb.gv.at; Tel: +43 1 52 152-0.

11.12.2025