Privacy Policy

Privacy Policy Terms

Controller
The Slovak Centre of Scientific and Technical Information (CVTI SR)
Address: Lamačská cesta 8/A, 840 05 Bratislava, Slovak Republic
Company Registration Number: 00 151 882

Contact Information
Director’s Secretariat: +421 2 69 253 102, sekretariat(at)cvtisr.sk

If you have any questions or wish to exercise your rights in connection with the processing of your personal data, please contact the controller or the data protection officer via email at: gdpr(at)cvtisr.sk.

Compliance with GDPR
CVTI SR processes personal data of data subjects in compliance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as other data protection legislation. CVTI SR has implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risks of processing personal data.

Joint Processing Purposes
In certain cases, CVTI SR has defined a joint purpose for processing together with other entities, and in such cases, it acts as one of the joint controllers. Detailed information about these joint purposes is available in the attached records of processing activities, specific joint purpose information, and in the main sections of contracts between joint controllers published on CVTI SR’s relevant websites.

Legal Grounds for Processing

  • On the basis of contractual and pre-contractual relationships (Article 6(1)(b) GDPR)
  • Based on the legitimate interests of the controller (Article 6(1)(f) GDPR)
  • For the performance of a task carried out in the public interest (Article 6(1)(e) GDPR)
  • For compliance with a legal obligation of the controller (Article 6(1)(c) GDPR)
  • Based on the consent of the data subject (Article 6(1)(a) GDPR)

Retention Periods
We will retain personal data for as long as necessary to achieve the purpose for which the data were processed. If your personal data are processed in fulfillment of the controller’s legal obligations and a legal regulation specifies a retention period or criteria for determining it, we will retain the data and related documentation for the period required by the relevant regulation. Retention of personal data is governed by Act No. 395/2002 Coll. on Archives and Registries, as amended, in conjunction with the controller’s Retention Schedule.

Data Subject Obligations
Please be advised that data subjects are required to provide their personal data if the processing is necessary for compliance with the controller’s legal obligation.

Data subjects are also required to provide personal data when it is a contractual requirement arising from an agreement between the controller and the data subject. Providing personal data within the scope of pre-contractual and contractual relationships is necessary; otherwise, failing to provide such data may prevent the conclusion or performance of the contract.

Consent-Based Processing
Providing personal data based on consent is voluntary. If we process personal data based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. We inform data subjects about how to withdraw consent at the time of obtaining consent.

Right to Object
If we process personal data based on our legitimate interests (Article 6(1)(f) GDPR) or because it is necessary for the performance of a task carried out in the public interest (Article 6(1)(e) GDPR), data subjects have the right to object at any time on grounds relating to their particular situation to the processing of their personal data carried out on this legal basis.

If you object to processing for direct marketing purposes, we will stop processing your data for these purposes.

Automated Decision-Making
Your personal data will not be used for automated individual decision-making, including profiling.

Data Sources
CVTI SR typically obtains personal data directly from data subjects. In some cases, we may obtain personal data from other sources, such as your employer, publicly available sources, or registers. If we obtain personal data from sources other than the data subject, we will also provide the data subject with information about the source and the categories of personal data obtained.

Transfer of Personal Data to Third Countries
When using services from our suppliers in connection with online activities on social media or in connection with software products and communication services provided by Microsoft Corporation, data are transferred to third countries—the United States of America (USA). Transfers rely on standard contractual clauses approved by the Commission:

If any other transfer to a third country or international organization is necessary, and the conditions under which it occurs, data subjects will be informed separately. If it is not a country ensuring an adequate level of protection as defined by a decision of the European Commission, other mechanisms in accordance with GDPR will be used for the transfer. In cases where no adequacy decision or appropriate safeguards exist, such transfers will only occur with the explicit consent of the data subject (after being informed about the risks such transfers may entail due to the absence of an adequacy decision and appropriate safeguards) or when necessary for the performance of a contract between the data subject and the controller or for the implementation of pre-contractual measures at the data subject’s request.

Rights of the Data Subject
If the processing of personal data is based on consent, this consent can be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

The data subject also has the following rights under GDPR (Articles 15 to 22):

  • Right of Access to Personal Data: Obtain confirmation as to whether CVTI SR processes your personal data and receive a copy of it.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Ask for your data to be deleted when it’s no longer needed or processing is unlawful.
  • Right to Restriction of Processing: Request limited processing under certain conditions.
  • Right to Data Portability: Receive your personal data in a structured, machine-readable format, or have it transferred to another controller.
  • Right to Object: Object to processing on grounds related to your particular situation if based on legitimate interests or public tasks. If objecting to direct marketing, processing for that purpose will cease.
  • Right Not to Be Subject to Automated Decisions: Ensure that no decision is based solely on automated processing, including profiling.

Lodging Complaints
Each data subject has the right to lodge a complaint with the supervisory authority—the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, phone: +421 2 3231 3214, https://dataprotection.gov.sk

Application “Science at Your Fingertips VR”
The Science at Your Fingertips VR application is operated by the Slovak Centre of Scientific and Technical Information, Lamačská cesta 7315/8A, 811 04 Bratislava, Slovak Republic.

No Data Collection
Through this application, no personal data are collected.

Meta Platforms Ireland Ltd. Data Processing
For further information on how Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland processes personal data in connection with offering the application in the Meta Store, please read their privacy policies at:

Social Networks
This privacy policy applies to personal data processed on CVTI SR profiles.
The CVTI SR profiles have only the standard user-level administrator functionalities. The operators of social networks have their own rules, service infrastructure, and data protection provisions. It is necessary to become familiar with the privacy policies of the social media platform providers regarding data processing.

Social Media Platform Privacy Policies

Statistical Data Processing by Facebook Insights
When managing our profile established on Facebook, your personal data may be processed for statistical purposes through a feature called Facebook Insights, which Facebook provides to us free of charge under fixed terms of use. Further information about these insights can be found at:

Cookies
Our websites use cookies. Detailed information about the cookies we use and the conditions under which they are processed can be found in the cookie notices on individual websites. In accordance with applicable legislation, all cookies except those that are necessary for website functionality are processed only with the visitor’s express consent.

Security of Personal Data
CVTI SR has taken appropriate technical and organizational measures based on current threat assessments to secure the processing of personal data in compliance with the General Data Protection Regulation (GDPR) and the Act No. 18/2018 Coll. on the Protection of Personal Data. Personal data are stored on CVTI SR’s servers, in the data center of the Ministry of Education, Science, Research and Sport of the Slovak Republic, or on the servers of contracted service providers. The terms of processing and required security measures are established in data processing agreements under Article 28 GDPR.

Detailed information on personal data protection is available at: https://www.cvtisr.sk/en/privacy-policy.html?page_id=24136