§ 25 BbgDSG
Data processing for scientific and historical research purposes
(1)Public bodies may process personal data, including data within the meaning of Article 9(1) of Regulation (EU) 2016/679, without consent for a specific research project and transmit them to other bodies or persons for that purpose, where the legitimate interests of the data subject are not impaired due to the nature of the data, their public availability or the manner of use, or where the public interest in the conduct of the research project outweighs the legitimate interests of the data subject and the purpose of the research cannot be achieved by other means. The transmitted data may not be processed for other purposes.
(2)The data shall be anonymised as soon as the research purpose permits. Until then, the characteristics by means of which individual details relating to personal or factual circumstances can be attributed to a specific or identifiable natural person shall be stored separately. They shall be erased as soon as the research purpose permits.
(3)Public bodies engaged in scientific and historical research may only publish personal data where
(4)Personal data may be transmitted, in accordance with paragraph 1, sentence 1, to third parties or bodies that are not subject to the provisions of this Act only where they undertake to comply with the provisions of paragraph 1, sentence 2, and paragraphs 2 and 3.
(5)The right of access pursuant to Article 15 of Regulation (EU) 2016/679, of rectification pursuant to Article 16 of Regulation (EU) 2016/679, of restriction of processing pursuant to Article 18 of Regulation (EU) 2016/679 and of objection pursuant to Article 21 of Regulation (EU) 2016/679 shall not apply insofar as the exercise of these rights would render impossible or seriously impair the specific research purposes, or the exercise or granting of these rights is impossible or would require disproportionate effort.
(6)Einzelnorm