The processing of personal data is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “GDPR”) and, in the context of the Slovak Republic, by Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments and Supplements to Certain Acts (hereinafter referred to as the “Personal Data Protection Act”). The supervisory authority for personal data processing is the Office for Personal Data Protection, located at Hraničná 12, 820 07 Bratislava 27, Slovak Republic, Company ID: 36 064 220.
The GDPR has been applicable since 25 May 2018, and all personal data are processed in accordance with the GDPR and the Personal Data Protection Act.
The controller of personal data pursuant to § 5 letter o) of the Personal Data Protection Act is the Technical University of Košice, with its registered office at Letná 1/9, 042 00 Košice, Slovak Republic, Company ID: 00 397 610, which processes personal data in accordance with the applicable legal regulations. Any withdrawal of consent to the processing of personal data may be sent to: [info@edihcassovium.sk](mailto:info@edihcassovium.sk).
Reasons and purpose of personal data processing
The Personal Data Protection Act allows for the processing of personal data based on the data subject’s consent, or even without consent (on legal grounds).
The main purpose of processing your personal data is commercial communication between the EDIH CASSOVIUM consortium and you as our client, with the aim of providing you with our services at the highest quality. This purpose is primarily fulfilled through electronic communication in the form of a contact form. Processing of the personal data you provide is an essential part of our operations. Without the provision and processing of personal data, we would not be able to offer our services to clients and other data subjects in the required scope and quality. To fulfill all legal obligations, it is also necessary to process personal data not only for the proper fulfillment of services or delivery of goods to you as our client but also for accounting, handling complaints, or record-keeping for state authorities.
We also process your personal data for the purpose of informing you about our products and services within direct marketing.
Providing your personal data is voluntary, especially by filling out the contact form on our website, as well as through registration or subscription to marketing emails or newsletters.
* Name and surname
* Email address
* Phone number
* Address
* IP address and cookies
We most often obtain your personal data directly from you, mainly through:
* Electronic communication
* Filling out and submitting the contact form on our website
* Registration on our website
* Participation in our consortium’s activities on social media
The personal data provided may be disclosed to and processed by third parties if necessary for fulfilling our obligations or providing our services to you. Personal data may be processed in the countries of the European Union and countries that are parties to the European Economic Area Agreement.
If required by law or by a decision of a relevant public authority or court, your personal data may also be provided to the following categories of recipients:
* Legal and law firms
* Experts and court-appointed experts
* Debt collection agencies and bailiffs
* Courts and law enforcement authorities
* Accounting firms, auditors, and tax advisors
* Other authorized state authorities
Your rights as a data subject
As a data subject, you have the right to request access to information under Article 15 of the GDPR regarding the processing of your personal data, particularly the purpose of the processing, the identification of the recipient, the expected period of retention of personal data, the right to lodge a complaint with a supervisory authority, and more.
You have the right to erasure, portability, and restriction of the processing of your personal data.
You have the right to be informed about the source of personal data if it was not obtained directly from you.
Right to withdraw consent to the processing of personal data at any time
According to Article 7 of the GDPR, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Withdrawal of consent must be as easy as giving it. Consent withdrawal can be sent to: [info@edihcassovium.sk](mailto:info@edihcassovium.sk).
Upon your request addressed to the contact person listed in these Rules and Conditions of Personal Data Processing, we will provide a copy of the personal data we process about you via email, unless you request another method.
You have the right to have inaccurate personal data rectified without undue delay. Considering the purposes of the processing, you also have the right to have incomplete personal data completed.
Right to erasure (right to be forgotten)
You have the right to have your personal data erased if at least one of the following applies:
* Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed
* You have withdrawn your consent and there is no other legal ground for processing
* You object to processing carried out on the grounds of public interest or legitimate interest and no overriding legitimate grounds exist
* Your personal data was unlawfully processed
* Your personal data must be erased to comply with a legal obligation under Slovak or EU law
* Your personal data was collected in connection with the offer of information society services under § 15(1) of the Act
However, your right to erasure may not be granted in specific cases where data processing is necessary for:
* Exercising our right to freedom of expression or information
* Compliance with a legal obligation
* Establishment, exercise, or defense of legal claims
* Archiving, research, or statistical purposes, where erasure would likely make it impossible or seriously impair the achievement of the objectives of the processing
Right to restriction of processing
As a data subject under the GDPR, you have the right to have the controller restrict processing where one of the following applies:
* You contest the accuracy of personal data, for a period allowing the controller to verify it
* Processing is unlawful and you oppose erasure, requesting restriction instead
* The controller no longer needs the personal data, but you require it for legal claims
* You have objected to processing pursuant to Article 21(1) of the GDPR pending verification of whether the controller’s legitimate grounds override yours
If processing is restricted, the personal data may be processed, except for storage, only with your consent or for legal claims, or to protect the rights of another person, or for important public interest of the Union or a Member State. You will be informed before the restriction is lifted.
Right to data portability
If our processing is based on your consent or a contract, you have the right to request the transfer of personal data concerning you to another controller.
Right to object
If you have reasons related to your particular situation, you have the right to object to the processing of your personal data if it is based on our legitimate interest. However, if our legitimate interest outweighs your interest, we may continue processing your data despite your objection. We may also continue processing if it is necessary for legal claims.
Retention period
Your personal data will be retained for the period necessary to fulfill the rights and obligations arising from the contract between you and the EDIH CASSOVIUM consortium (or its members), not only during the contractual relationship but also after service provision or activity, in connection with EDIH CASSOVIUM’s record-keeping and administrative duties. If no valid contract is concluded, your data will be retained only as long as necessary for record-keeping purposes.
