Privacy Policy

1. Controller

The controller within the meaning of the GDPR is:

2. Data Collected and Purposes

We collect and process personal data only to the extent necessary for conducting the Summer School Bootcamp and for communication with participants, partner universities, and interested parties.

• Contact enquiries via the contact form or email (name, email address, message content) — purpose: responding to the enquiry, legal basis: Art. 6(1)(b) and (f) GDPR.
• Programme enrolments, forwarded by the inviting university (name, study programme, university email address) — purpose: programme administration, legal basis: Art. 6(1)(b) GDPR.
• Technical usage data when visiting this website (IP address, browser type, access timestamp) — purpose: server operation and security, legal basis: Art. 6(1)(f) GDPR.

3. International Data Transfers

The programme is conducted in cooperation with the National University of Sciences and Technology (NUST) in Pakistan. Programme-related data (in particular participant lists) are transferred to NUST for this purpose. Pakistan is not currently recognised as a country with an adequate level of data protection under the GDPR. The transfer is based on Art. 49(1)(b) GDPR (performance of a contract) and the explicit consent of participants under Art. 49(1)(a) GDPR, obtained at the time of registration.

4. Retention and Deletion

Personal data is deleted or blocked as soon as the purpose for storage no longer applies and no statutory retention obligations stand in the way. Contact enquiries are deleted once fully processed. Programme-related data is retained for three years after programme completion and then deleted.

5. Your Rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection (Art. 21 GDPR).

To exercise your rights, please contact us in writing at the address above, or by email at:

You also have the right to lodge a complaint with the Austrian Data Protection Authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, Austria — dsb.gv.at

6. Cookies

This website uses no tracking cookies and no third-party analytics tools. Only technically necessary cookies required for website operation are set; these do not transfer personal data to third parties.

7. Updates to This Policy

This privacy policy is current as of August 2026. We reserve the right to update it in the event of changes in the legal framework or our data processing practices.