Personal data – any information related to a natural person whose identity is or can be identified directly or indirectly by using such data as personal ID number, one or several physical, psychological, economic, cultural or social characteristics of a person.
General Data Protection Regulation (hereinafter – GDPR) – Regulation (EU) 2016/679 of the European Parliament and Council (EU) of 27 April 2016 on the protection of individuals with regards to the processing of personal data and the free movement of such data for the protection of natural persons in the processing of personal data and repealing Directive 95/46/EC.
Data subject – any natural person whose identity is or can be identified and whose personal data are processed by Kaunas University of Technology.
Data processing – any action by automated or non-automated measures using the personal data: collection, recording, accumulation, storage, classification, organisation, merging with other data, creation (including creation based on other data), changing (adaptation, addition or correction), profiling, submission (transfer), publication, use, search, destruction, deletion, etc.
Data controller – a legal entity or natural person who, individually or in cooperation with others, establishes the purposes and measures of data processing.
Data processor – a legal entity or natural person authorised by the data controller to process personal data. While processing data, a data processor receives the instructions from the data controller and does not establish any purposes of the processing.
Joint data controllers – the legal entities or natural persons who jointly process personal data but each of them pursues individual purposes of the processing.
Special category personal data – information on the natural person’s racial or ethnic origin, political, religious, philosophical or other beliefs, membership of trade unions, health, sexual orientation or criminal record.
Consent – specific and unambiguous expression of the properly informed data subject, given freely as a written or oral statement or by unambiguously understood actions expressing his/her consent for the processing of the related personal data.
Direct marketing – the activities of offering to the persons the services of the University and/or ask for their opinion on the provided services by mail, telephone or in another direct method. The personal data processing for the purposes of marketing requires s data subject’s consent.