PRIVACY POLICY

(applies to Web resources of the National Research Foundation of Ukraine)

 

1. General provisions

The Privacy Policy of the National Research Foundation of Ukraine (hereinafter – NRFU) was developed in accordance with the Law of Ukraine ‘On Personal Data Protection’.

The Privacy Policy of the NRFU defines the procedure for processing and protecting received personal data and measures to ensure security of personal data of users of the NRFU Web resources in order to protect the fundamental rights and freedoms of a person and a citizen, in particular the right to non-interference in personal life in connection with processing of personal data.

 

2. Terms and definitions

The Privacy Policy is the rules governing processing and protection of personal data that may be requested/received when using the Web resources of the National Research Foundation of Ukraine (hereinafter referred to as the Web resources of the National Research Foundation of Ukraine).

Web resources of the NRFU – official website of the NRFU, automated system ‘NRFU Call for Project’.

Personal data – any information or set of information about a natural person who is identified or can be specifically identified.

Site – a set of Web pages placed on the Internet united by a single theme, design, and a single domain address space.

The subject of personal data – a natural person whose personal data are processed, in particular benefactors, project PIs, project implementors, members of the Call Commission, and experts (hereinafter – the user).

The administrator of the NRFU Web resources – an employee of the NRFU whose functional duties include processing and protection of personal data of users of the NRFU Web resources.

Processing of personal data – any action or set of actions, such as collection, registration, accumulation, storage, adaptation, change, renewal, use and dissemination (sharing, realization, transfer), depersonalization, destruction of personal data, including using information (automated) systems.

Other terms are used in the meaning given in the Law of Ukraine ‘On Personal Data Protection’.

The NRFU is respectful to the confidential information of without exception all persons who use the NRFU Web resources, in connection with this, strives to protect confidentiality of personal data, thereby creating and ensuring the most comfortable conditions for using the NRFU Web resources.

By leaving personal data when using the NRFU Web resources and marking the fact of familiarization with this Privacy Policy, the user voluntarily gives consent to processing of his/her personal data to provide role access, prepare statistical, administrative, and other information on the organization and holding of calls for project, providing grant support of projects, implementation of the NRFU fundraising campaign, etc., and agrees that his/her personal data may be processed by persons providing technical support for the NRFU Web resources and/or services for improving the NRFU Web resources.

 

3. Collection and use of personal data

Collection of personal data is carried out exclusively by the conscious and voluntary decision of the user as a subject of personal data to use the functionality of the NRFU Web resources and in accordance with the purpose of personal data processing formulated in this Policy.

The NRFU collects only the information that is necessary to process the request and to be able to contact the user or fulfill contractual obligations.

The scale, type of collection, and use of the user’s personal data vary depending on the role in which he/she plans to use the functionality of the NRFU Web resources.

Depending on the form of interaction chosen by the user, by registering on the NRFU Web resources and filling in personal account data, the user provides registration information:

for participants of the fundraising campaign – full name and e-mail;

for experts and members of the Call Commission – full name, phone number, and e-mail; information related to professional activity: affiliation, position, position category, specialty, qualification, research degree, academic title, etc.;

for grantees – for collective and institutional grants – EDRPOU code of the legal entity or registration number of the taxpayer’s registration card of the natural person-entrepreneur, location address, website, form of activity, and additional contact data; for individual grants – full name, phone, e-mail, affiliation, etc.

 

4. Purpose of processing personal data

Processing of personal data is carried out for the purpose of:

provision of role access, in particular:

registration of users of the NRFU Web resources ;

organization of electronic interaction of subjects of Web resources of the NRFU through personal accounts;

generalization and systematization of registers and structured data, in particular:

formation of a list of projects for implementation of research and developments at the request of the central state authorities of Ukraine;

forming a database of experts (reviewers);

monitoring, summarization, and analysis of statistical data generated by subjects of the NRFU Web resources as a result of their use.

Personal data are stored for a period no longer than is necessary in accordance with the purpose of their collection, processing, and use or until the user stops using the NRFU Web resources by deleting his/her account.

 

5. Access to personal data

A limited amount of personal data (name, phone, e-mail, affiliation, position, etc.), which allows determining the degree of legality of an application for receiving grant support becomes available to members of the Call Commission and experts registered in the automated system ‘The NRFU Call for Project’.

Personal data of the personal account of benefactors (participants of the NRFU fundraising campaign) become available only to the administrators of the NRFU Web resources in order to establish cooperation.

Personal data of members of the Call Commission and experts are available only to the administrators of the NRFU Web resources.

In all other cases, full access to the personal data of registered subjects of the NRFU Web resources is granted to the administrators of the NRFU Web resources.

 

6. Transfer of personal data to third parties

Administrators of NRFU Web resources do not transfer or disclose personal data received from registered subjects to third parties.

Disclosure of personal data is possible in cases defined by the current legislation of Ukraine, and personal data may also be available to persons who provide technical support and/or services related to the improvement of NRFU Web resources under the terms of the contract and on condition of non-disclosure of personal data.

Dissemination of personal data without the consent of the subject of personal data or a person authorized by him is allowed in cases specified by law, and only (if necessary) in the interests of national security, economic well-being, human rights, and for conducting the All-Ukrainian population census.

Web resources of NRFU may contain hyperlinks to third-party sites and other resources on the Internet of third parties. Third-party resources may be governed by their terms of use and privacy. Third-party resources and their content are not checked for compliance with requirements (authenticity, completeness, legality, etc.). The NRFU is not responsible for any information and materials posted on third-party resources.

 

7. Protection of personal data

Administrators of NRFU Web resources take the necessary procedural and technical measures to protect the user’s personal data from their loss and unauthorized access to them.

 

8. Changes to the Privacy Policy

Administrators of the NRFU Web resources may change this Privacy Policy so that it accurately reflects the methods of processing and protecting personal data.

Accordingly, the user should review this Privacy Policy periodically. When administrators of the NRFU Web resources change this Privacy Policy, they will update the “latest modification” date at the top of this Privacy Policy. Changes to this Privacy Policy are effective when posted.

 

9. User rights

Registering on the NRFU Web resources, the user has the right to:

to know about the sources of collection and the place of storage of his/her personal data, the purpose of their processing, the location of the owner or manager of personal data, or to give an appropriate mandate to obtain this information to authorized persons, except for cases established by law;

to receive information about the conditions of providing access to personal data, in particular, information about third parties to whom his personal data is transferred;

to access his/her personal data;

to receive no later than within thirty calendar days from the date of receipt of the request (except for the cases provided for by the Law of Ukraine “On Personal Data Protection “) an answer on whether his/her personal data are being processed, as well as to receive the content of such personal data;

to submit a reasoned demand to the owner of personal data with an objection to processing of his/her personal data;

to submit a reasoned demand for change or destruction of his/her personal data by the owner and administrator of personal data, if these data are processed illegally or are unreliable;

to have his/her personal data protected from illegal processing and accidental loss, destruction, or damage due to intentional concealment, failure to provide, or untimely provision of them, as well as to be protected against being provided with information that is unreliable or disgraces honor, dignity, and business reputation of a natural person;

to file complaints about the processing of his/her personal data to the Human Rights Commissioner of the Verkhovna Rada of Ukraine or to court;

to apply legal remedies in case of violation of the legislation on protection of personal data;

to enter a reservation regarding limitation of the right to process his/her personal data when giving consent;

to withdraw consent to processing of his/her personal data;

to know the mechanism of automatic processing of personal data;

to be protect against an automated decision that has legal consequences for the user.

 

10. Location of personal data

The owner and administrator of personal data is the NRFU.

Personal data of users are stored in automated systems and on electronic media of the NRFU at the address: 01001, Kyiv, Borysa Hrynchenka Str., 1.