GDPR
Information and guidance concerning the processing of personal data provided to the data subject
Data subjects:
Data subject: Job applicants
Controller: Slovak National Center for Quantum Technologies, interest association of legal persons, seated at Dúbravská cesta 9, 841 04 Bratislava, registered in the registry of interest association of legal persons led by the District Office Bratislava, ID No.: 54 255 422, e-mail: qute@qute.sk
Recipients: Not provided to any recipients.
Purpose of processing: Selection procedure for filling a vacant position.
Legal basis: Consent of the data subject. Specific consent is required for the purpose of processing in the candidate database after the end of the selection procedure
List of personal data: Name, surname, e-mail address, telephone number, home address, details to the extent that the applicant provides them in his/her CV
Storing period: Until the end of the completion of the selection procedure for the vacant post. If the association as the controller is interested in processing personal data after the end of the selection procedure, the period for which the processing takes place has been specified in a special instruction and consent granted for such processing.
Failure to provide the aforementioned personal data will make it impossible to ensure the proper fulfilment of the association's need to fill the vacancy.
Personal data shall not be disclosed outside the scope provided for by a specific regulation.
The association as a controller, does not transfer personal data to a third country.
There is no profiling or automated decision-making based on the personal data provided by the association as a controller or by any processor.
Data subject: Suppliers or Customers - Natural persons (including natural persons carrying out business activity on the basis of trade or other similar manner).
Controller: Slovak National Center for Quantum Technologies, interest association of legal persons, seated at Dúbravská cesta 9, 841 04 Bratislava, registered in the registry of interest association of legal persons led by the District Office Bratislava, ID No.: 54 255 422, e-mail: qute@qute.sk
Processor: Účtovníctvo na kľúč s.r.o., Igram 199, 900 84 Igram, IČO: 3587983 (external accountant)
Recipients: Processor.
Purpose of processing: Fulfilment of the contract – in particular bookkeeping, invoicing, delivery of performance.
Legal basis: Fulfilment of the contract, to which a data subject is a party, a special regulation.
List of personal data: Name, surname, e-mail address, telephone number, home address, VAT ID number, VAT ID number and tax identification number of the natural person - entrepreneur.
Purpose | Legal basis |
accounting | special regulation |
issuing invoices | special regulation |
supply of goods (services) | performance of the contract |
Storing period: 10 years from the date of termination of the contractual relationship, unless a specific regulation imposes the retention of data for a longer period.
Failure to provide the aforementioned data will make it impossible to ensure the proper fulfilment of the contract.
Personal data shall not be disclosed outside the scope provided for by a specific regulation.
The association as a controller, does not transfer personal data to a third country.
There is no profiling or automated decision-making based on the personal data provided by the association as a controller or by any processor.
Data subject: Natural persons as participants in events organised by the association
Controller: Slovak National Center for Quantum Technologies, interest association of legal persons, seated at Dúbravská cesta 9, 841 04 Bratislava, registered in the registry of interest association of legal persons led by the District Office Bratislava, ID No.: 54 255 422, e-mail: qute@qute.sk
Processor:
- Fyzikálny ústav SAV, v.v.i., Dúbravská cesta 9, 845 11 Bratislava, IČO: 00166537
- Slovenská akadémia vied (SAV), Štefánikova 49, 814 38 Bratislava, IČO: 00037869
Recipients: Processor.
Purpose of processing: Marketing.
Legal basis: Granted consent by the data subject
List of personal data: Visual likeness of the natural person captured on images and visual and audio recordings
Storing period: 5 years from the day of its execution
Personal data shall not be disclosed outside the scope provided for by a specific regulation.
The association as a controller, does not transfer personal data to a third country.
There is no profiling or automated decision-making based on the personal data provided by the association as a controller or by any processor.
Data subjects may exercise the following rights in relation to the processing of their personal data with the Controller:
The data subject shall have the right to withdraw his or her consent at any time, which are related to him or her and for which him or her granted the consent. If the data subject withdraws its consent, it does not affect the lawfulness of processing based on consent before its withdrawal. The data subject may withdraw consent in the same way as he or she gave consent or by sending a notification of withdrawal of consent to the email address qute@qute.sk The association shall cease processing the personal data immediately after the data subject's withdrawal of consent.
The data subject shall have the right to obtain from the association confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:
- the purposes of the processing;
- the origin of the personal data, i. e. where the controller obtained the personal data (if not from the data subject);
- the categories of personal data concerned;
- expected storing period of the personal data, if not possible, information on criteria for its determination;
- the right to request from the Data Controller the rectification, erasure or restriction of the processing of personal data relating to the data subject, or the right to object to the processing of personal data;
- the right to lodge a complaint with a supervisory authority - Office for the Protection of Personal Data of the Slovak Republic (Úrad na ochranu osobných údajov SR), if data subject claims that his or her rights are directly affected set by the Act No. 18/2018 Coll. on the protection of the personal data;
- the association is obliged to provide the data subject with his or her personal data that it processes. For the repeated provision of personal data requested by the data subject, the association may charge a reasonable fee corresponding to the administrative costs. The controller is obliged to provide the personal data to the data subject in the manner requested by the data subject (e.g. by e-mail);
- the right to obtain personal data pursuant to the above paragraph shall not adversely affect the rights of other natural persons.
The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. If the data subject considers that more personal data are necessary for the fulfilment of the specific purpose of the processing of personal data, the data subject shall have the right to have the incomplete personal data completed.
The data subject shall have the right for the association to delete her personal data without undue delay if:
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- the data subject withdraws consent on which the processing is based and where there is no other legal ground for the processing;
- the data subject objects to the processing of the data, which are processed because of the legitimate interest of the association in the protection of property and the data subject's legitimate reasons for the protection of personal data override the legitimate interest of the association;
- it is proven that the personal data have been unlawfully processed;
- the reason for deletion is the fulfilment of an obligation under Act No. 18/2018 Coll. on the Protection of Personal Data, a special regulation or an international agreement to which the Slovak Republic is bound.
The data subject shall have the right to obtain from the controller restriction of processing, if:
- the accuracy of the personal data is contested by the data subject, for a period enabling the association to verify the accuracy of the personal data;
- the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
- the association no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
- the data subject objects to the processing of the data, which are processed because of the legitimate interest of the association in the protection of property and the data subject's legitimate reasons for the protection of personal data override the legitimate interest of the association.
If the processing of personal data has been restricted on the basis of the above, in addition to storage, the association may only process the personal data with the consent of the data subject or for the purpose of exercising a legal claim, for the protection of persons or for reasons of public interest.
The data subject whose processing of personal data is restricted on the basis of the foregoing shall be informed by the Controller before the restriction on the processing of personal data is lifted.
The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where technically feasible, whereby this right shall not adversely affect the rights and freedoms of others.
If the data subject claims that his or her rights provided for by Act No. 18/2018 Coll. on the Protection of Personal Data are directly affected, he or she has the right to file a petition for the initiation of proceedings for the protection of personal data with the Office for the Protection of Personal Data of the Slovak Republic (Úrad na ochranu osobných údajov SR).
The data subject shall have the right to object to the processing of his or her personal data in cases where the processing of his or her personal data is based on the legal basis of a legitimate interest of the association or processing in the public interest or where such processing involves profiling. The association shall not further process personal data unless it demonstrates compelling legitimate interests for the processing of personal data which override the rights or interests of the data subject or grounds for exercising a legal claim.