Privacy Notice
Visegrad Scholarship at OSA
Data protection information
At the Central European University (address: 1051 Budapest, Nádor u. 9., hereinafter referred to as the University), we place great emphasis on the protection of your personal data and on complying with the provisions of the EU General Data Protection Regulation (GDPR*) and Act CXII of 2011 on the Right to Information Self-Determination and Freedom of Information (Infotv.). This Privacy Notice applies to the use, processing and retention of personal data relating to the Visegrad Scholarship at OSA Scholarship scheme (hereinafter referred to as „Scheme”) organized by KEE – Vera and Donald Blinken Open Society Archive (hereinafter referred to as „Blinken OSA”).
*Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC.
1. Who are we and what do we do?
Blinken OSA – a department of the Central European University – is a repository of Cold War and human rights collections; a research center that seeks solutions to archival, taxonomic, informational and historical problems related to its collections; and also an educational institution that, in addition to university courses, organizes teacher training and student programmes. The Blinken OSA also hosts the Central Gallery, where exhibitions, art performances, installations, film screenings, lectures and seminars are organized. For detailed information please visit our website: www.osaarchivum.org.
2. Contact details of the data controller
Közép-európai Egyetem
1051 Budapest
Nador u. 9.
Phone: + 36 1 3273000
3. Contact details of the Data Protection Officer
The Legal Counsel and Data Protection Officer
Central European University
Quellenstrasse 51 | A-1100 Wien | Austria
Email: privacy@ceu.eduWhat is the purpose of processing personal data?
4. What personal data do we collect?
What is the legal basis for processing personal data?
How long do we process your personal data?
Personal data is collected by the University from the data subject, however, the data subject is not obliged to provide the personal data and there are no adverse legal consequences for the data subject for not providing the personal data.
We process your personal data for the purpose(s) and for the period of time specified below. After the specified period, we will delete your personal data.
| Purpose of processing | Scope of data processed | Legal basis for processing | Retention period | |
| 4.1. | Application, contact with applicants for the Scheme, information on the Scheme, further participation conditions | Name, e-mail address, application letter, affiliation, research project proposal, CV, information of intended stay, proof of English language skills | Processing is necessary for the purposes of the legitimate interests pursued by the controller pursuant to Article 6(1)(f) of the GDPR | Maximum 6 months following the decision on whether the applicant is awarded the scholarship |
| 4.2. | Selection of participants from among the applicants | Name, e-mail address, message, research project proposal, CV | Processing is necessary for the performance of the contract pursuant to Article 6(1)(b) GDPR | Archived indefinitely |
| 4.3. | Contacts with selected fellows of the Scheme | Name, e-mail address | Article 6(1)(b) of the GDPR, processing is necessary to take steps at the request of the data subject prior to the conclusion of the contract | Until the conclusion of granting process |
| 4.4. | Conclusion of granting process with Fellows | Name, mother’s name, place and date of birth, permanent address, telephone number, e-mail address, project title, intended dates of the stay, bank account number, name and address of bank, ABA/BIC routing numbers | Processing is necessary for the performance of the contract pursuant to Article 6(1)(b) GDPR | Archived indefinitely |
| 4.5 | Public announcement of Fellows | Name, title and short description of the research project, affiliation, nationality, dates of stay, image of Fellow, short biography of fellow | Processing is necessary on the basis of the legitimate interest of the controller pursuant to Article 6(1)(f) GDPR | Published indefinitely |
| 4.7 | Final report | Name, content of the final report, | Data processing necessary to comply with a legal obligation pursuant to Article 6 (1) c) GDPR | Published indefinitely |
| 4.8 | Feedback letter | Name, content of the feedback form, e-mail address | Processing is necessary for the performance of the contract pursuant to Article 6(1)(f) GDPR | Archived indefinitely |
| 4.9 | Public announcement of Fellows’ final presentation | Name, affiliation, title and summary of the research project | Processing is necessary for the performance of the contract pursuant to Article 6(1)(f) GDPR | Archived indefinitely |
| 4.10 | Video recording of final presentation | Name, content of the presentation, image and voice of the Participant | Processing pursuant to Article 6(1)(a) GDPR | Archived indefinitely |
5. Who do we share your personal data with?
The data is processed by Blinken OSA within the Central European University. Data of applicants is shared with the International Visegrad Fund.
We use the services of data processors to achieve the data processing purposes set out in point 4 of this notice:
- Office365: based in the USA, but the University’s data is stored in data centers in Amsterdam and Dublin. The software is used by the University for email and document management and storage.
- Amazon Web Services Hosting provider
Data processors process data on the basis of a data processing contract between them and the University.
Data will only be transferred to third parties where required by law or with the explicit consent of the data subject.
The following platforms of Blinken OSA are used to publicize the Scheme (as per the processes above at 4.5 and 4.8):
- Blinken OSA’s Facebook page: https://www.facebook.com/OSAarchivum
- Blinken OSA’’s Instagram: https://www.instagram.com/blinkenosaarchivum/?hl=hu
- Blinken OSA’’s Twitter: https://twitter.com/blinkenosa
Blinken OSA’’s YouTube channel: https://www.instagram.com/blinkenosaarchivum/?hl=hu
6. What are your rights in relation to data processing?
You have the right
- to ask us for access to your personal data,
- object to the processing of your data,
- request rectification of your data,
- request the erasure of your data,
- restrict the use of your personal data,
- request the portability of your data,
- exercise legal remedies.
To exercise any of the above rights, please write to the University Data Protection Officer at privacy@ceu.edu or at 1051 Budapest, Nádor utca 9.
The University will use its best efforts to comply with your request in accordance with the law and will respond in writing no later than 25 days after receipt of your request.
If you wish to request assistance from the competent national authority, you may do so at the following address:
National Authority for Data Protection and Freedom of Information.
Postal address: 1530 Budapest, PO Box 5.
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c
Phone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
E-mail: ugyfelszolgalat@naih.hu
Web: http://naih.hu
In addition to the administrative remedies, you may also have the possibility to take legal action against the controller’s activities. In Hungary, you can choose to bring the action before the courts of the place of residence or domicile of the data subject.
7. Security of your personal data
We are committed to handling your personal information securely and carefully. All data is processed and stored securely and in accordance with applicable data protection laws and our internal privacy policy. We do not sell or transfer your data to other organizations. For more details, please see the Central European University Privacy Policy https://documents.ceu.edu/documents/p-1805.
Last updated: 9 September 2022