PRIVACY STATEMENT
This Privacy Statement (the “Statement”) was issued by the ESET Foundation, registered office Einsteinova 24, 851 01 Bratislava, Slovak Republic, Corporate ID: 42258910 (the “Foundation”, “We” or “Us”).
Personal data processing is an integral part of our activities and the operation of our websites. It is important for Us that personal data is processed in compliance with REGULATION (EU) 2016/679 OF THE
EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons
with regard to the processing of personal data and on the free movement of such data, and repealing
Directive 95/46/EC (the “GDPR”) and in compliance with the Slovak Act No. 18/2018 Coll. on Personal
Data Protection.
Because of this, and to ensure transparent processing of personal data, we have prepared this Privacy
Statement pertaining both to the visitors to our websites and to those who choose to participate in theactivities we organise, such as competitions, awards, and events (the “Data Subject” or “You”).
If You visit our website or choose to register yourself or someone else for the ESET Science Award,
the following will apply to You:a) We may process personal data provided in nomination forms, attached documentation, and otherdata obtained in the course of organising the ESET Science Award, for the purposes of organising
the ESET Science Award, namely to ensure processing and registration of your submission, its evaluation by a panel of judges, the communication of results, and distribution of invitations to, andother aspects of organisation of, the celebratory gala evening. In the case of ESET Science Award
laureates, the above-mentioned personal data is processed to the extent necessary for the purposeof maintaining the list of Alumni Club members maintained by the Foundation. If the nomination
is submitted by a third party, an essential condition of the submission is the nominee’s consent
to the submission and their acknowledgement of this Statement. The nominee’s personal data isnecessary for the performance of the contract with Us and its provision is therefore a contractualcondition. Furthermore, the data may be processed based on our legitimate interest to create an
informal group of former ESET Science Award participants, for their potential involvement in future
ESET Science Awards as nominees or evaluators, or for other cooperation pertaining to the ESETScience Award.
b) Some personal data processed in the organisation of the ESET Science Award, such as names
and surnames of nominees, photographs or audiovisual footage of the nominees and data about
their professional achievements, may be processed for the purposes of commercial and marketing
communication pertaining to promotion of the ESET Science Award. The processing of this datais carried out based on our legitimate interest in promoting the ESET Science Award, and the ESETFoundation and its activities. Our objective is to obtain and process as little personal data as possible.
In relation to the philanthropic and corporate social responsibility activities which are our mainobjective, we are confident that this does not contradict the interests and fundamental rights andfreedoms of the Data Subjects.
c) Equally, it is our legitimate interest to protect our website from spam and misuse, as well as learning
how You use our website, with the objective of improving its features and user-friendliness. With thisin mind, we use as few session cookies and third-party tools providing this functionality as possible(e.g. reCAPTCHA and Google Tag Manager).
d) If You contact us using the contact form, we will collect the personal data required to process
your request.

ESET Foundation, Einsteinova 24, 851 01 Bratislava, Slovakia, info@esetscienceaward.sk, www.esetscienceaward.com

1PRIVACY STATEMENT – ESET SCIENCE AWARD

If You take part in one of the events we organise, the following applies to You:a) During events that we organise, photographs or audiovisual footage can be created for marketing
purposes, based on our legitimate interest in promoting the event and other activitiesof our Foundation.
b) If deemed necessary to ensure the health and safety of the event participants, access to the event
may be subject to presenting a vaccination certificate or a negative COVID-19 test along with yourID, based on our legal obligations arising from the relevant provisions of the Public Health Authorityof the Slovak Republic and other legal regulations. In these circumstances, processing of the test
results will be necessary for reasons of substantial public interest, namely the protection of Your(the Data subject’s) health and the health of the other event participants. In order to be admitted
to the event, a negative test result will need to be shown on Your device and recorded along withYour basic identification data. The Foundation will store this data only for the period of time requiredby law. We will not provide this data to any third parties, except where we are obliged to do so by law
or a bylaw.
In performing our activities we pay attention to the privacy of the personal data of our visitors andapplicants. We do not provide your personal data to any third parties except those specified in thisPrivacy Statement, namely: banks processing the payment of contributions for a successful applicant;the ESET Science Award evaluators; any agency or contractor engaged to assist with the organisationor promotion of our events or activities (to the extent it is necessary); and parties legally authorised
to request personal data.
We strive to process and store your data only for the period necessary to fulfil the purpose for which
it was obtained. Unless stated otherwise, personal data obtained in order to organise the ESET ScienceAward shall be stored for 7 years from the end of the last ESET Science Award in which the nominee
participated, or 7 years from the end of the event in which the Data Subject participated. When it comesto data pertaining to payments, the retention period can be extended by the time required to meet thearchiving obligations imposed by special legislation (e.g. legislation governing accounting obligations
and similar).
In accordance with the GDPR, and within the scope therein specified, You as the Data Subject havethe right to request from the Foundation access to your personal data, the right to rectification
or erasure, limitation of processing, and the right to object to processing, as well as the right to dataportability. You can exercise these rights by filing a request with the Foundation. Every Data Subject
has the right to lodge a complaint with a supervisory authority, namely the Office for Personal Data
Protection of the Slovak Republic.
Should You have any questions or should You wish to exercise your rights as a Data Subject, You canwrite to: ESET Foundation, Einsteinova 24, 851 01 Bratislava, Slovak Republic, or send an e-mail to:nadacia@eset.sk.

2