Privacy Notice

Visegrad Scholarship at OSA

Data protection information

At the Central European University (address: 1051 Budapest, Nádor u. 9., hereinafter referred to as the University), we place great emphasis on the protection of your personal data and on complying with the provisions of the EU General Data Protection Regulation (GDPR*) and Act CXII of 2011 on the Right to Information Self-Determination and Freedom of Information (Infotv.). This Privacy Notice applies to the use, processing and retention of personal data relating to the Visegrad Scholarship at OSA Scholarship scheme (hereinafter referred to as „Scheme”) organized by KEE – Vera and Donald Blinken Open Society Archive (hereinafter referred to as „Blinken OSA”).

*Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC.

1. Who are we and what do we do?

Blinken OSA – a department of the Central European University – is a repository of Cold War and human rights collections; a research center that seeks solutions to archival, taxonomic, informational and historical problems related to its collections; and also an educational institution that, in addition to university courses, organizes teacher training and student programmes. The Blinken OSA also hosts the Central Gallery, where exhibitions, art performances, installations, film screenings, lectures and seminars are organized. For detailed information please visit our website:

2. Contact details of the data controller

Közép-európai Egyetem

1051 Budapest

Nador u. 9.

Phone: + 36 1 3273000

3. Contact details of the Data Protection Officer

The Legal Counsel and Data Protection Officer
Central European University 
Quellenstrasse 51 | A-1100 Wien | Austria   
Email: privacy@ceu.eduWhat is the purpose of processing personal data?

4. What personal data do we collect?

What is the legal basis for processing personal data?

How long do we process your personal data?

Personal data is collected by the University from the data subject, however, the data subject is not obliged to provide the personal data and there are no adverse legal consequences for the data subject for not providing the personal data.

We process your personal data for the purpose(s) and for the period of time specified below. After the specified period, we will delete your personal data.

Purpose of processingScope of data processedLegal basis for processingRetention period
4.1.  Application, contact with applicants for the Scheme, information on the Scheme, further participation conditions  Name, e-mail address, application letter, affiliation, research project proposal, CV, information of intended stay, proof of English language skillsProcessing is necessary for the purposes of the legitimate interests pursued by the controller pursuant to Article 6(1)(f) of the GDPR  Maximum 6 months following the decision on whether the applicant is awarded the scholarship
4.2.Selection of participants from among the applicantsName, e-mail address, message, research project proposal, CV Processing is necessary for the performance of the contract pursuant to Article 6(1)(b) GDPR      Archived indefinitely
4.3.  Contacts with selected fellows of the SchemeName, e-mail addressArticle 6(1)(b) of the GDPR, processing is necessary to take steps at the request of the data subject prior to the conclusion of the contractUntil the conclusion of granting process
4.4.  Conclusion of granting process with Fellows  Name, mother’s name, place and date of birth, permanent address, telephone number, e-mail address, project title, intended dates of the stay, bank account number, name and address of bank, ABA/BIC routing numbersProcessing is necessary for the performance of the contract pursuant to Article 6(1)(b) GDPR  Archived indefinitely  
4.5Public announcement of FellowsName, title and short description of the research project, affiliation, nationality, dates of stay, image of Fellow, short biography of fellowProcessing is necessary on the basis of the legitimate interest of the controller pursuant to Article 6(1)(f) GDPR  Published indefinitely
4.7Final reportName, content of the final report,Data processing necessary to comply with a legal obligation pursuant to Article 6 (1) c) GDPRPublished indefinitely
4.8Feedback letterName, content of the feedback form, e-mail addressProcessing is necessary for the performance of the contract pursuant to Article 6(1)(f) GDPR  Archived indefinitely
4.9Public announcement of Fellows’ final presentationName, affiliation, title and summary of the research projectProcessing is necessary for the performance of the contract pursuant to Article 6(1)(f) GDPR  Archived indefinitely
4.10Video recording of final presentationName, content of the presentation, image and voice of the ParticipantProcessing pursuant to Article 6(1)(a) GDPRArchived indefinitely

5. Who do we share your personal data with?

The data is processed by Blinken OSA within the Central European University. Data of applicants is shared with the International Visegrad Fund.

We use the services of data processors to achieve the data processing purposes set out in point 4 of this notice:

  • Office365: based in the USA, but the University’s data is stored in data centers in Amsterdam and Dublin. The software is used by the University for email and document management and storage.
  • Amazon Web Services Hosting provider

Data processors process data on the basis of a data processing contract between them and the University.

Data will only be transferred to third parties where required by law or with the explicit consent of the data subject.

The following platforms of Blinken OSA are used to publicize the Scheme (as per the processes above at 4.5 and 4.8):

  • Blinken OSA’s Facebook page:
  • Blinken OSA’’s Instagram:
  • Blinken OSA’’s Twitter:

Blinken OSA’’s YouTube channel:

6. What are your rights in relation to data processing?

You have the right

  • to ask us for access to your personal data,
  • object to the processing of your data,
  • request rectification of your data,
  • request the erasure of your data,
  • restrict the use of your personal data,
  • request the portability of your data,
  • exercise legal remedies.

To exercise any of the above rights, please write to the University Data Protection Officer at or at 1051 Budapest, Nádor utca 9.

The University will use its best efforts to comply with your request in accordance with the law and will respond in writing no later than 25 days after receipt of your request.

If you wish to request assistance from the competent national authority, you may do so at the following address:

National Authority for Data Protection and Freedom of Information.

Postal address: 1530 Budapest, PO Box 5.

Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c

Phone: +36 (1) 391-1400

Fax: +36 (1) 391-1410



In addition to the administrative remedies, you may also have the possibility to take legal action against the controller’s activities. In Hungary, you can choose to bring the action before the courts of the place of residence or domicile of the data subject.

7. Security of your personal data

We are committed to handling your personal information securely and carefully. All data is processed and stored securely and in accordance with applicable data protection laws and our internal privacy policy. We do not sell or transfer your data to other organizations. For more details, please see the Central European University Privacy Policy

Last updated: 9 September 2022