The e-INFRA CZ infrastructure (hereinafter referred to as "e-INFRA CZ") is a unique e-infrastructure for research, development and innovation in the Czech Republic, consisting of:
- CESNET e-infrastructure, operated by CESNET, an association of legal entities, ID No.: 63839172;
- CERIT Scientific Cloud, operated by Masaryk University, ID No.: 00216224
- IT4Innovations national supercomputing centre, operated by VSB – Technical University of Ostrava, ID No.: 61989100.
(the operators of the individual parts of e-INFRA CZ hereinafter collectively referred to as "Operators" or individually as "Operator").
The operation of e-INFRA CZ includes activities that involve the processing of personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter referred to as the "Regulation"), and cooperation between the Operators requires access to each other's personal data of e-INFRA CZ users (hereinafter referred to as the "Data Subject") and further processing of such personal data together. Therefore, in relation to the personal data processed in this way, the Operators are so-called joint controllers of personal data within the meaning of Article 26 of the Regulation, as they jointly determine the purposes and means of processing in relation to such personal data, as set out below.
The processing of personal data is carried out in accordance with the Regulation and Act No. 110/2019 Coll., on personal data processing, as amended. Furthermore, the processing of personal data in e-INFRA CZ is carried out in accordance with the Agreement between the joint controllers of personal data concluded between the Operators and in accordance with the principles set out below.
Operators' contact information
CESNET, an association of legal entities
address: Zikova 1903/4, 160 00 Prague 6
www.cesnet.cz
Contact for exercising the rights of data subjects: oou-zadost[at]cesnet.cz
Data Protection Officer: MT Legal s.r.o., law office, responsible person: JUDr. Petr Novotný, LL.M., e-mail: novotny[at]mt-legal.com
Information on the processing of personal data can be found here.
Masaryk University
address: Žerotínovo náměstí 617/9, 602 00 Brno
www.muni.cz
Data Protection Officer: Mgr. Iva Zlatušková, poverenec[at]muni.cz
Information on the processing of personal data can be found here.
VSB – Technical University of Ostrava,
address: 17. listopadu 2172/15, 708 00 Ostrava
www.vsb.cz
Data Protection Officer: Mgr. Kamila Formanová, e-mail: poverenec[at]vsb.cz
Information on the processing of personal data can be found here.
Scope, purpose, legal title and duration of the processing of personal data
The operators of e-INFRA CZ jointly process personal data of users in order to ensure uniform access of users to e-INFRA CZ services, namely:
- identification and contact details (name, academic titles, e-mail address, telephone number),
- information on affiliation to the home organisation,
- internal identifiers,
- other identities registered with the Operators,
- information about user rights.
These personal data are processed on the basis of the legitimate interest of the Operators to identify users in order to control access to e-INFRA CZ services, but also to identify breaches, misuse, detection of security incidents or illegal activities, i.e. to protect the computer systems of the Operators, information and users. The aforementioned personal data are processed together to the extent necessary for the entire duration of the user account.
Each of the Operators then processes the personal data of e-INFRA CZ users as a separate controller for its own purposes. Details of this processing can be found on the websites of the Operators (see above).
For the purposes of joint user care and user support, the Operators also jointly process other information about e-INFRA CZ users. This is information that the Operators hold about the data subject and that is necessary to provide user support in a particular case. This personal data is then processed on the basis of the data subject's request for user support. The records related to the provision of user support are kept for the duration of the user account.
In order to ensure communication with data subjects from the public, the Operators jointly process the identification and contact data of persons who have contacted the Operator. This personal data is then stored on the basis of the legitimate interest of the Operators to have evidence of the communication and thus contribute to the improvement of e-INFRA CZ services for a period of five years.
Rights of the data subjects
- Every data subject has the right to information about the processing of personal data. This information is contained in this document. Further information will be provided to the data subject by the Operators.
- Each data subject has the right to contact the Data Controllers to confirm whether and to what extent their data is being processed. The Operators do not carry out automated decisions based on profiling.
- Any personal data that the Operators are no longer entitled to process are automatically deleted (e.g. after withdrawal of consent, expiry of the archiving period, after the execution of a contract, etc.). Should this not be the case, the data subject has the right to contact the Provider to request the erasure of the data. This right does not apply to data that are processed in accordance with legislative requirements (e.g. data that the Operators are legally obliged to keep for a certain period of time, data necessary to defend the legitimate interests of the Operators, etc.).
- In the event that it is not possible to comply with the data subject's request for deletion of the data, the data subject has the right to have the processing of his/her personal data limited to the most necessary data only.
- The data subject has the right to object to the processing of his or her personal data for the performance of a task carried out in the public interest or for the purposes of the legitimate interests of the Operators or a third party.
- The data subject may exercise their rights with any of the Operators (see contacts above). The data subject also has the right to lodge a complaint or complaint to the supervisory authority: Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7.
- Data obtained by the Operators on the basis of consent or a concluded contract and processed automatically by the Operators shall be provided by the Operators upon request of the data subject in a structured, commonly used and machine-readable format.
- The data subject shall have the right to access his or her personal data and to be informed, in particular, of the scope, purpose and duration of the processing of his or her personal data, including information on the source from which the data were obtained. The data controllers are obliged to provide the data subject with a copy of his or her personal data which they process jointly.
Principles of joint processing of personal data in e-INFRA CZ
Processing is always carried out only to the extent determined by the specific purpose of the processing. When processing personal data, the principles of minimisation of processing are observed by the Operators and the principles of equality and transparency are applied in relation to users (data subjects).
The protection of personal data is given great attention by the Operators. At the core of the security measures are advanced technical means and highly qualified and ethical staff. Personal data is not passed on to other entities, except in those cases where the Operators have the consent or are required (or authorised) to do so by law, the performance of a contract or their legitimate interest. The Operators have strict rules in place to determine which employees have access to personal data, what personal data they can process and how they can process it.