Privacy notice

At Közép-európai Egyetem (seat: 1051 Budapest, Nádor u. 9.; hereinafter “CEU” or „University”) we place great emphasis on the protection of your personal information and compliance with the applicable data privacy requirements, including specifically the EU General Data Protection Regulation (GDPR). This Privacy Notice relates to the collection, use, transfer, and retention of personal data related to the Data Stories Research Visualization Exhibition at CEU and the accompanying website datastoriesceu.org.

Who are we and what do we do?

Data Stories is an exhibition of research visualizations on social and scientific topics, done both in academia and the private sector. The sixth edition brings together students, faculty, as well as business representatives to share their work and tools for data analysis and visualization. The project aims to improve collaboration in the academic environment and communication between student talents and future employers. The exhibition generates an open dialogue on substantive social scientific knowledge and technological interests and skills.

2. Contact details of the Data Controller

Közép-európai Egyetem

1051 Budapest
Nádor u. 9.
Phone: + 36 1 3273000

3. Contact details of the Data Protection Officer

Irisz Szel

Data Protection Officer

1051 Budapest
Nádor u. 9.
Telefon: + 36 1 327-3000
E-mail: privacy@ceu.edu

4. What is the purpose of processing your data?

4.1. Communication and identification

The personal data of author(s) identified in the License Agreement (hereinafter the “Author(s)”) and application form will be processed by the Data Controller for the purposes of communication and identification.

4.2. Protection of copyright

The personal data of Author(s) specified in Section 3.1, 3.2 and 3.3 of the Licence Agreement will be processed by the Data Controller for the purposes of protection of copyright.

5. What is our legal basis for processing your data?

5.1. Communication and identification

Data processing is necessary for the performance of the License Agreement or taking steps at the request of the data subject prior to entering into the License Agreement pursuant to Article 6 (1) b) of the GDPR.

5.2. Protection of copyright

The personal data of the Author(s) specified in Section 3.1, 3.2 and 3.3 of the Licence Agreement will be processed by the Data Controller for the purposes of protection of copyright.

6. What kind of personal data do we collect?

  • name
  • e-mail address
  • address
  • mother’s name
  • place and date of birth
  • affiliations of Authors

7. Who receives your information?

Unless we have a legal obligation to do so, we will not disclose your data to individuals, organizations, or other entities outside CEU other than those who are acting as agents and data processors working on our behalf.

For the purposes set out above, we may need to pass your information to our data processors, for the purposes of completing tasks and providing services to you on our behalf. However, with all external entities with whom data is shared, we share only those data needed to perform the specific service and require a data processing agreement to be signed before any data processing —requiring them to keep your information secure and not to use it for their own purposes. We will not sell or rent your information to third parties.

Specific third parties acting as data processors we work with include:

  • Brand Bar Communications Kft.: Located in Budapest, Hungary, to provide web designing, website programming and hosting services Brand Bar processes personal data on behalf of their customers.
  • Microsoft 365: Based in the US, with CEU’s data stored within EU in datacenters located in Amsterdam and Dublin. Software as a service which provides CEU’s email and document management.

8. How long will your information be held?

8.1. Communication and identification

For the purposes of data processing defined in point 4.1, your personal data will be held up to 5 (five) years after the duration of license has passed.

8.2. Protection of copyright

For the purposes of data processing defined in point 4.2, your personal data will be held up to 5 (five) years after the duration of license has passed.

After the end of these specified periods, your personal data will be deleted.

9. What are your rights?

You have a right

  • to access your personal data,
  • to object to the processing of your personal data,
  • to rectify,
  • to erase,
  • to restrict processing your personal data,
  • to request data portability.

If you wish to exercise any of these rights, please email to privacy@ceu.edu or write to us at University Data Protection Officer, Nádor utca 9, 1051 Budapest, Hungary. University will make every effort to fulfill your request to the extent allowed by law and will respond in writing within 25 days of receiving your request.

Should you wish to request help from the relevant national authority, their details are as follows:

National Authority for Data Protection and Freedom of Information (1125 Budapest, Szilágyi Erzsébet fasor 22/c.)

10. Security of your information

We are committed to holding your data securely and treating it with sensitivity. All data are held securely and in accordance with the relevant data privacy laws and our internal policies. We do not sell to or trade your data with any other organizations. For further details please see University’s Data Protection Policy: https://documents.ceu.edu/documents/p-1805.

Last updated on: Budapest, March 26, 2019