Skip to content

Data Protection Policy

This policy applies to the processing of personal data by us, directly or indirectly, from all individuals with “personal data” being defined as any data that relates to an identified or identifiable individual or a person who may be identified by means reasonably likely to be used.

We are committed to complying with any applicable legislation relating to Personal data and we shall ensure that personal data is collected and processed in accordance with provisions of the european data protection law (General Data Protection Regulation – GDPR) and other applicable local law, if any.

We do not collect or process personal data without having a lawful reason to do so (Article 6 GDPR).

We may have to collect and process your personal data where necessary for the performance of a contract to which you are party, or when it is necessary for compliance with a legal obligation to which we are subject or where required, with your prior consent. We may also collect and process your personal data for FFG legitimate interests except where such interests are overridden by your interests or fundamental rights and freedoms.

We will keep personal data that is processed accurate and, where necessary, up to date.  Also, we only keep Personal data for as long as necessary for the purposes for which it is processed.


Your Personal data is collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.


Depending on the participant status of the data subject the data are processed for one or more of the purposes listed below.

Processing Purpose Data Categories
Participant Management,
General Organisation
- regarding the Summer School Alpach
  • Gender
  • Age
  • Nationality
  • First Name
  • Last Name
  • Adress
  • Phone
  • E-Mail
  • Name & Address of concurring University/Institute
  • Sponsoring Country
  • Length of time studying in the country, the applicant seeks funding
  • Field of Study
  • Level of Study
  • Detailed Information on the scientific background of the applicant
  • Detailed Information on engeineering background
  • C.V. detailing academic career
  • Name and short description Bachelor or Master/PhD (if applicable)
  • Description of how a participation in the Summer School could be of benefit to your professional career
  • Description of what the candidate can offer to make the Summer School a success
  • If you are selected to participate, do you agree that FFG and ESA may take photos/videos of you throughout your participation and use these images in their promotional activities?
  • Have you already been involved in an ESA Academy's activity? If yes, which one?


The recipients only receive the data they require, not your full data record. Your data will only be forwarded when the organisational process makes it necessary and when a legal basis exists.

Recipient Categories
organising societies / agencies, other service providers (fulfilment agents)

We may also be obliged to disclose Personal data to regulatory authorities, courts, and government agencies where required by law, regulation or legal process, or to defend the interests, rights or property of the FFG or related third parties.
Otherwise, we will not share your Personal data with other parties unless you request it or have given us prior approval to such sharing.


We are committed to ensure protection of your rights under applicable laws. You will find below a table summarizing your different rights:

Right of access:

You can request access to your personal data. You may also request rectification of inaccurate personal data, or to have incomplete personal data completed.

You can request any available information as to the source of the personal data, and you may also request a copy of your personal data being processed by us.

Right to be forgotten

Your right to be forgotten entitles you to request the erasure of your personal data in cases where:

  • the data is no longer necessary;
  • you choose to withdraw your consent;
  • you object to the processing of your Personal data by automated means using technical specifications;
  • your Personal data has been unlawfully processed;
  • there is a legal obligation to erase your Personal data;

erasure is required to ensure compliance with applicable laws.

Right to restriction of processing

You may request that processing of your personal data be restricted in the cases where:

  • you contest the accuracy of the Personal data;
  • we no longer need the Personal data, for the purposes of the processing;

you have objected to processing for legitimate reasons.

Right to data portability

You can request, where applicable, the portability of your personal data that you have provided to us, in a structured, commonly used, and machine-readable format you have the right to transmit this data to another person without hindrance from us where:

  • the processing of your Personal data is based on consent or on a contract; and
  • the processing is carried out by automated means.

You can also request that your Personal data be transmitted to a third party of your choice (where technically feasible).

To exercise these rights, you can send your Request or Complaint to