Information on Personal Data Processing

Basic Information

Controller: Kempelenov Institute of Intelligent Technologies, association of legal entities, abbr.: KInIT, registered office: Sky Park Offices, Bottova 7939/2A, 811 09 Bratislava – Staré Mesto, Company ID: 53290046, represented by Mária Bieliková, statutory representative, and Ing. Marián Šimko, statutory representative, hereinafter referred to as "we", "us" and other grammatical forms, or as "controller".

Data Protection Officer: dpo@kinit.sk

Supervisory Authority: Office for Personal Data Protection of the Slovak Republic, Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava, Slovak Republic, https://dataprotection.gov.sk/

Preamble

We process your personal data in accordance with the principles of lawfulness, transparency, confidentiality and integrity. Below you will find information on the purposes, manner of processing, legal bases, retention periods and your rights. If you have any questions, please contact the Data Protection Officer at the email address above.

We pay maximum attention to the protection of your personal data when processing it. We respect the principles of lawfulness, minimisation, transparency, confidentiality and integrity in accordance with the Regulation and the Act.

Collection and Processing of Personal Data

We most often obtain your personal data directly from you, particularly when you contact us in connection with the operation of this website. We process your personal data through the following operations: collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, regrouping or combination, restriction, erasure or destruction. We process ordinary personal data, in particular name, surname, email address, name of employer and your job title. The purpose of the processing is to enable you to access, search, upload and work with datasets and to communicate with you in case of your questions or needs. We process your personal data on the legal basis of Article 6(1)(f) of the Regulation – processing necessary for the purposes of the legitimate interests pursued by us as the controller or by a third party. Our legitimate interest is to be available, to provide you with information, to respond to your queries and to make your datasets accessible or to enable you to work with published datasets. We build long-term relationships and partnerships based on common scientific research interests; therefore we will process your data for a period of 3 years from the last contact.

Cookies

Based on your consent pursuant to Art. 6(1)(a) of the Regulation, we may store analytical, marketing and statistical cookies as well as Facebook pixels on your device.

Based on our legitimate interest pursuant to Art. 6(1)(f) of the Regulation, we may store technical, so-called necessary cookies on your device. Our legitimate interest is the proper functioning of the website. The storage period for cookies is 72 hours.

Disclosure of Your Personal Data

We use the services of external companies in the areas of accounting, law, marketing, IT, office space management and other services. These entities are bound by confidentiality and may process your personal data only within the contractually defined scope and in a manner pursuant to Article 28 of the Regulation.

Recipients may include European Union bodies, the Office of the Government of the Slovak Republic and individual ministries in the case of financing individual programmes such as the Recovery Plan, Horizon Europe and others. Specific institutions are always listed for individual activities.

Additional recipients may include courts, law enforcement authorities, banks, bailiffs or lawyers, notaries, state authorities, supervisory, inspection and control bodies, municipalities, self-governing regions, natural persons who are parties to proceedings before the relevant entity. Personal data is provided to these recipients for example when accessing a file, etc.

Third parties are considered primarily public authorities and institutions to which we are obliged to provide personal data on the basis of a legal provision when fulfilling our statutory obligations.

Transfer to Third Countries

We do not transfer personal data to third countries. The USA has provided adequate guarantees for the protection of personal data with effect from 20 September 2023 pursuant to Commission Decision 2023/1795.

Your Rights

As a data subject, you have the right to:

• access to your personal data (in particular to request confirmation of whether data is being processed or not, categories of processed data, purpose of processing, source of collection, retention period);
• rectification or completion of inaccurate data;
• restriction of processing pursuant to Art. 18 of the GDPR (e.g. if data is inaccurate or unlawfully processed);
• object in cases specified in Art. 21 of the GDPR;
• erasure of data whose purpose of processing has ended, or in cases specified in Art. 17 of the GDPR;
• withdraw consent to processing you have provided to us at any time.

If you believe that your rights regarding the processing of personal data have been violated, or that the Personal Data Protection Act 18/2018 or the GDPR has been violated, you may file a complaint to initiate personal data protection proceedings with the Office for Personal Data Protection of the Slovak Republic, Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava, Slovak Republic; www.dataprotection.gov.sk.

Please send your questions and requests regarding personal data protection by email to dpo@kinit.sk or by post to our postal address.

Final Provisions

More information on the processing of personal data for other purposes, such as newsletter subscription, events, information for job or cooperation applicants, or our activities on social networks, can be found on our main website kinit.sk.

We may change this Privacy Policy at any time, especially with regard to legislative changes in the field of personal data protection that may be adopted in the future.