Terms and Conditions of Data Protection of Archimedes Foundation
Personal data are any data that allow a person to be identified. Processing of personal data denotes any action pertaining to the personal data. Below you will find information about the principles of personal data processing at the Archimedes Foundation.
The person responsible for processing the personal data is the Archimedes Foundation. You can contact our data protection specialist by sending an e-mail to firstname.lastname@example.org.
Archimedes applies reasonable organisational and technical solutions to protect the collected personal data from the illegal use thereof.
1. Why do we process personal data?
We will process your personal data for the implementation of educational, scientific and youth policy measures, for the intermediation of structural support, for the assessment of documents evidencing the education acquired in foreign countries and in the course of activities in support of the operation of Archimedes (e.g. accounting, personnel management, the conduct of procurement procedure, etc.).
We may use your personal data for other purposes pursuant to the present terms and conditions if the right or obligation to use your personal data arises from a legal act.
We collect and use your personal data first and foremost for the correct processing of the correspondence related to you, the applications submitted by you and the contracts entered into with you (including the carrying out of procedures preceding the entering into a contract) and to fulfil the contractual obligations related to you and the obligations arising from legal acts related to all of the above.
We may use your personal data based on the direct consent given by you in order to send you newsletters, offers, invitations, feedback surveys and other promotional announcements.
If we process your personal data based on your consent you will be entitled to withdraw your consent any time. If we receive a respective request, we will immediately cancel the respective procedures, unless we have other legal grounds for the processing of data.
2. Which personal data does Archimedes process?
The nature of your personal data collected by Archimedes depends on the specific service provided. For example, for the provision of our services we collect data evidencing your identity, your contact information and data evidencing your education. In the collection of personal data we always proceed from the principle of minimality or we collect only the data that is necessary for the provision of specific services.
Archimedes Foundation is entitled to record and publish photo and video material of you (when carrying out its information events, recognition events, training courses and seminars) arising from its obligations in the articles of association. In such cases you have been notified early and clearly of the possible photographing and/or filming and you will have a chance to request not to be photographed or filmed. You will also be entitled to request such personal data not to be published in the public channels of Archimedes.
Sometimes we need to collect delicate personal data for the provision of our services (e.g. health data). For the processing of your delicate data we ask for your explicit consent or process such personal data to fulfil our obligations arising from legal acts (e.g. the issue of a scholarship for a student with a disability, issues related to occupational health).
3. Who do we forward your personal data to?
Access to your data is permitted for the members of the management and supervisory bodies of the foundation and the employees of the foundation who carry out the activities related to you. Based on their employment contract all employees of the foundation are obligated to keep your data confidential.
Access to your personal data may be granted to the institutions of the Republic of Estonia and the European Union and the employees and authorised persons thereof in the course of the performance of their work duties. Access may also be granted based on the establishment of the respective work procedure to the providers of support services for Archimedes (providers of IT services), credit institutions and other persons to whom it is necessary to forward data for the purposes specified in the present terms and conditions or to whom we are obligated to forward data pursuant to legal acts.
We do not disclose your data to the persons not specified in the present terms and conditions without your consent or request, except if we are entitled to or obligated to do so pursuant to valid legal acts.
Our cooperation partners may also be located outside the European Union or the European Economic Area (in third countries). We will forward your personal data to third countries only for the purpose and to the extent determined by legal acts, based on your consent or in case of legitimate interest, following all legal acts that govern data protection.
4. Deadlines for the Retention of Personal Data
We will store personal data for the period of time necessary for the achievement of the objectives of processing or until the storage deadlines stipulated in legal acts. The deadlines for the storage of personal data have been confirmed in the classification scheme of information assets of Archimedes Foundation.
5. Terms and Conditions of Data Protection of the Web Pages of Archimedes
6. Your Rights as a Data Subject
You have the right to request personal data collected about you and request the correction of incorrect personal data. If we do not have legal grounds for processing your personal data, you are entitled to request the use or the deletion thereof. You are also entitled to request the transfer of personal data. For this you need to submit the relevant application that you have signed by hand or digitally.
The application is satisfied or it is given a justified refusal as soon as possible, but not later than within 1 (one) month. If there is a need to specify the request or if the processing of personal data is time-consuming, Archimedes may extend the deadline for accepting the request, informing the applicant thereof.
You have the right to turn to the Data Protection Inspectorate or the court if you find that we have violated your rights when your personal data is processed.