Privacy Policy

(Version: 19.08.2026)

Controller

Research Center Pharmaceutical Engineering GmbH
Inffeldgasse 13
8010 Graz
Austria
Phone: +43 316 873 30901
Email: dataprotection@rcpe.at

Introduction

The protection of your personal data is important to Research Center Pharmaceutical Engineering GmbH (“RCPE”). We process personal data in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the Austrian Telecommunications Act 2021 (TKG 2021).

This Privacy Policy provides information about the processing of personal data in connection with the ECCPM website and related event activities, including event registration, participation in events, and communication with us. Further information on the individual processing activities is provided in the relevant sections of this Privacy Policy. To download and digitally store our Privacy Policy, click here.

Contacting Us

When you contact us by telephone or email, we process the personal data you voluntarily provide in order to respond to your inquiry, communicate with you, and manage our relationship with you.

Processing is based on Article 6(1)(b) GDPR where necessary for the performance of a contract or the implementation of pre-contractual measures. Otherwise, processing is based on RCPE’s legitimate interest in handling and responding to inquiries pursuant to Article 6(1)(f) GDPR.

Your personal data will not be disclosed to third parties unless this is necessary to process your request, required by applicable law, or you have given your consent.

General Data Retention Period

Unless a more specific data retention period is stated in this Privacy Policy, we retain personal data only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, or to establish, exercise, or defend legal claims.

Specific data retention periods applicable to individual processing activities are described in the relevant sections of this Privacy Policy.

Cookies

This website uses cookies. Cookies are small text files that are stored on your device when you visit this website.

We use the following categories of cookies on this website:

Necessary cookies, which are required for the operation and essential functionality of the website.
Functional cookies, which enable certain convenience and performance features of the website.
Analytics cookies, which help us understand how visitors use this website and enable us to improve our online services. Further information can be found in the section “Google Analytics 4”.

When you first visit this website, you will be informed about the use of cookies through a cookie banner. Necessary cookies are placed because they are required for the operation of this website. Analytics cookies are only used if you provide your explicit consent.

The cookies used on this website and your consent preferences are managed through the cookie consent tool Borlabs Cookie. You can review and modify your cookie preferences at any time and withdraw any consent previously granted with effect for the future by using the “Cookies” link at the bottom of the website.

You may also configure your browser to accept cookies only on a case-by-case basis or to reject cookies altogether. Please note that disabling cookies may affect the functionality of this website.

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics 4 uses cookies to analyze the use of this website and to help us continuously improve our online services.

The following information may be processed: pages visited, time spent on the website, browser information, device information, approximate location data (e.g., region), information about the origin of a website visit, and usage data regarding interactions with the website. Data is generally processed in pseudonymized form.

Processing is carried out exclusively on the basis of your explicit consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021). Consent is obtained through our cookie consent tool. Providing consent is voluntary and not required for the general use of the website.

The recipient of the data is Google Ireland Limited. A transfer of personal data to servers of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, cannot be excluded. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF). An adequacy decision of the European Commission pursuant to Article 45 GDPR therefore exists for such transfers.

Data processed through Google Analytics 4 is retained for a period of 14 months and is automatically deleted thereafter.

You may withdraw your consent at any time with effect for the future through the cookie settings available via the “Cookies” link at the bottom of the website.

Further information on data processing is available in Google’s Privacy Policy.

Microsoft 365

RCPE uses Microsoft 365 for communication with prospective participants, attendees, speakers, and other contacts in connection with ECCPM events, including the ECCPM Forum and related event activities. This includes communication by email as well as the collection and processing of information through Microsoft Forms. The service is provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

Depending on the nature of the interaction, personal data may be processed, including contact details (such as first and last name, and email address), communication content (such as email correspondence), information provided through Microsoft Forms, and usage and metadata (such as IP address, device information, and log data).

Processing is based on Article 6(1)(b) GDPR where necessary for the performance of a contract or the implementation of pre-contractual measures. Otherwise, processing is based on RCPE’s legitimate interest in ensuring efficient and secure communication pursuant to Article 6(1)(f) GDPR.

Where Microsoft processes personal data as a processor on behalf of RCPE, such processing is governed by a data processing agreement in accordance with Article 28 GDPR.

The recipient of personal data is Microsoft Ireland Operations Limited. A transfer of personal data to servers of Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA, cannot be excluded. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework (DPF). An adequacy decision of the European Commission pursuant to Article 45 GDPR therefore exists for such transfers.

Further information on data processing is available in Microsoft’s Privacy Statement.

Embedded YouTube-Videos

This website contains embedded videos provided through the video platform YouTube. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“YouTube”).

The videos are embedded using YouTube’s enhanced privacy mode. When embedded YouTube videos are played, personal data may be transmitted to YouTube, including your IP address, browser information, device information, and information regarding your interaction with the video.

You may withdraw your consent at any time with effect for the future through the cookie settings available via the “Cookies” link at the bottom of the website.

Further information on data processing is available in Google’s Privacy Policy.

Event Registration

Registration for ECCPM events is carried out via the event platform Eventbrite. The service is provided by Eventbrite Operations (IE) Limited, 97 South Mall, Cork, T12 XV54, Ireland (“Eventbrite”).

If you register for an event through the registration form embedded on this website, personal data will be processed for the purpose of organizing and conducting the event, managing registrations, communicating with participants, processing payments and fulfilling contractual obligations.

Depending on the event and the information provided during registration, the following categories of personal data may be processed:

First and last name
Email address
Company or organization
Billing address
Payment and transaction information

Processing is based on Article 6(1)(b) GDPR where necessary for the performance of a contract or the implementation of pre-contractual measures.

As part of the registration process for the ECCPM Forum and related event activities, participants may be asked to provide consent to the creation and use of photographs and video recordings for documentation and promotional purposes. Where such consent is provided, the related processing is based on Article 6(1)(a) GDPR.

Participation in the ECCPM Forum and related event activities is not dependent on providing such consent. Participants who do not wish to provide consent may register by email so that appropriate arrangements can be made to avoid their identification in photographs and video recordings taken during the ECCPM Forum and related event activities.

Where Eventbrite processes personal data as a processor on behalf of RCPE, such processing is governed by a data processing agreement in accordance with Article 28 GDPR. Eventbrite may also process personal data as an independent controller for certain processing activities in accordance with its own Privacy Policy.

A transfer of personal data to servers of Eventbrite, Inc., 95 Third Street, 2nd Floor, San Francisco, California 94103, USA, cannot be excluded. Eventbrite, Inc. is certified under the EU-U.S. Data Privacy Framework (DPF). An adequacy decision of the European Commission pursuant to Article 45 GDPR therefore exists for such transfers.

Where RCPE receives participant lists or other event-related information in connection with registrations made through Eventbrite, such data will be processed exclusively for event administration and related communication.

Further information on data processing is available in Eventbrite’s Privacy Policy.

Photographs and Video Recordings

Photographs and video recordings may be created during the ECCPM Forum and related event activities for documentation and promotional purposes. Such photographs and video recordings will only be created and used on the basis of your consent (Article 6(1)(a) GDPR). They may be made available to the public, including publication on the RCPE and ECCPM websites, on social media platforms (e.g., Instagram, LinkedIn, and YouTube), in printed materials (e.g., brochures, flyers, posters, reports), in presentations, and in other publications.

Recipients of Personal Data

Internal recipients: Relevant departments within RCPE, in particular Marketing.
External recipients: Media representatives and press contacts in the context of public relations activities.
Public: Where photographs and video recordings are published (e.g., on the RCPE website, on the ECCPM website, on social media platforms, in printed and promotional materials, in presentations, or in other publications), personal data may be made accessible to an indefinite number of people.

Please note: Content published on the internet may be accessed worldwide. Further use by third parties cannot be excluded. Complete deletion of personal data cannot be guaranteed for technical reasons.

Instagram: When publication takes place on Instagram, personal data will also be transferred to the provider Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Further information on data processing is available in Meta’s Privacy Policy.
LinkedIn: When publication takes place on LinkedIn, personal data will also be transferred to the provider LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Further information on data processing is available in LinkedIn’s Privacy Policy.
YouTube: When publication takes place on YouTube, personal data will also be transferred to the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information on data processing is available in Google’s Privacy Policy.

Transfer to Third Countries

When using Instagram, LinkedIn, and YouTube, personal data may be transferred to servers of Meta Platforms, Inc., 1 Meta Way, Menlo Park, California 94025, USA, LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, California 94085, USA, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. Meta Platforms, Inc., LinkedIn Corporation, and Google LLC are certified under the EU-U.S. Data Privacy Framework (DPF). An adequacy decision of the European Commission pursuant to Article 45 GDPR therefore exists for such transfers.

Data Retention Period of Photographs and Video Recordings

Photographs and video recordings will generally be processed and retained for as long as necessary for the purposes described above or until consent is withdrawn. In detail, the following retention periods and restrictions apply:

Company website and presentations: After withdrawal of your consent, your photographs and video recordings will no longer be used for the creation of new content and will be removed where technically and organizationally feasible.
Printed and promotional materials: Materials that have already been produced and distributed (e.g., brochures, flyers, posters, reports) cannot be recalled after withdrawal of your consent. Materials that have already been printed or are in the process of being printed may continue to be used for a reasonable phase-out period determined on a case-by-case basis, where necessary to avoid disproportionate economic effects. Your photographs and video recordings will no longer be used for reprints or new print orders after withdrawal of your consent.
Social media platforms (e.g., Instagram, LinkedIn, and YouTube): After withdrawal of your consent, your photographs and video recordings will no longer be used for the creation of new content. Content already published will be removed where technically and organizationally feasible. The further storage and availability of photographs and video recordings on the internet depend on the terms, technical conditions, and deletion processes of the respective social media platform (see “Recipients of Personal Data”).

Provision of Personal Data

The provision of personal data and participation in photographs and video recordings are voluntary. No disadvantages will arise from withholding consent.

Right to Withdraw Consent

Consent may be withdrawn at any time with effect for the future by sending an email to dataprotection@rcpe.at. The lawfulness of processing carried out prior to the withdrawal remains unaffected.

Further information on data processing is available in RCPE’s Privacy Policy.

Your Rights as a Data Subject

In accordance with the General Data Protection Regulation (GDPR), you have the right to access your personal data that we process (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR), and objection (Article 21 GDPR).

Right to Lodge a Complaint with a Supervisory Authority

If you think that the processing of your personal data violates the data protection law or that your data protection rights have otherwise been infringed, you can lodge a complaint with a supervisory authority (Article 77 GDPR). In Austria, this is the Austrian Data Protection Authority:

Austrian Data Protection Authority
Barichgasse 40-42
1030 Wien
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at