The head of the Scientific Computing Laboratory, Center for the Study of Complex Systems of the Institute of Physics Belgrade is assigned as a Data Controller, i.e., a person that determines the purposes and means by which personal data are processed in terms of The Law on Personal Data Protection.
The PARADOX operational team is a Data Processor, i.e., they process personal data on behalf of the Data Controller.
We collect personal data information manually and automatically.
Manually we receive and store the information you knowingly provide to us. For example, through the registration process and account settings, we collect personal information such as your name, affiliation, e-mail address, and phone number.
Whenever you interact with the PARADOX cluster, we also automatically receive and record information on our server log files, which may include network addresses you use to connect to the system, device identification, the type of client and/or device you’re using to access our system, the time and date you accessed the cluster, and the time spent logged into the service.
We may store details of any aspects of the cluster use, including, for example, the amount of processor time and storage space used by user accounts. This may include some personally identifiable data, such as the network addresses or type of device you use to connect to the system.
We will use this information to help us manage and administer the cluster, to review, analyze and improve its performance, security, its patterns of use, and to plan for future upgrades.
All PARADOX cluster equipment is hosted on a single site at the Institute of Physics Belgrade, and personal information is stored and processed only on this equipment. Also, we have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we collect and process.
We aim to protect your account’s privacy and other personal information we hold in our records, however, we cannot guarantee complete security. Unauthorized entry or use, hardware or software failure, and other factors may compromise user information security at any time.
Collected personal information will be available to the PARADOX operational team only. Resource usage information might be shared with third parties and reported in publicly available documents.
After the end of your use of the PARADOX cluster, we have no need to process your personal information, and it will be deleted, or, if this is not possible (for example, because your personal information has been stored in backup archives), we will securely store your personal information and isolate it from any further processing until deletion is possible. However, data that could be used to identify you directly will not be retained for longer than five years.
As a person whose data we hold, in general, your rights are outlined by Europe’s General Data Protection Regulation (GDPR) whether you are resident of European Economic Area (EEA) or not, and in certain circumstances includes:
Right of access
You have the right to submit a request to the PARADOX operational team to obtain information on whether we are processing your data. In the case that your data is processed, you may request at any time a copy of the personal data we hold about you.
Right to correction
All data that we process is reviewed and verified as accurate, whenever possible, and updated regularly. If you believe that the data is incorrect or has changed, you have the right to request that we correct those data.
Right to be forgotten or right to erasure
You have the right to request from the PARADOX operational team to delete your data unless there is a legal obligation to keep that data or there is a legal basis for refusing a request for deletion of data.
Right to restriction of processing
You have the right to obtain from the controller restriction of processing where one of the GDPR Article 18 (https://gdpr-info.eu/art-18-gdpr/) conditions is met.
Right to data portability
You have the right to request the transfer of data to another operator if the processing is based on your consent or by automated means. We make sure that all personal information is readily available and is in a structured, commonly used, and machine-readable format.
Right to object
You have the right to object to the way we handle your data if the processing of the data is based on the Scientific Computing Laboratory’s legitimate interest, or in carrying out a task in the public interest/for an official authority. Besides, you may object to the processing of your data for direct marketing purposes, which includes profiling to the extent that it is related to such direct marketing, as well as scientific/historical research and statistics.
Right to withdraw the consent
If the data processing is based on your consent, you may withdraw the consent at any time.
Please note that we will ask you to verify your identity through several forms before responding to such requests. Requests will be addressed as soon as possible.
We regularly revise and update personal data processing information following changes in internal operational procedures or based on obligations arising from relevant regulations. Therefore, we reserve the right to modify and update the present policy whenever deemed necessary, whereas any changes shall become effective after publication on the https://www.scl.rs/PARADOX_User_Guide/policies/privacy-policy.html.