1. Data controller

The controller responsible for personal data processed in connection with this web application is:

2. Personal data we process

The web application does not provide user accounts, advertising, behavioural profiling or analytics. In particular, Google Analytics is not currently used.

We may nevertheless process limited personal data in the following circumstances:

• Technical request and security data: the hosting service may record an IP address, date and time, requested URL, response status, browser or device information and referring page in server logs.
• Communications: if you contact us by email, we process your email address, name where supplied, message and related correspondence.
• Session access flag: after the correct access code is entered, the application stores a value in browser session storage so that it does not ask again during the same browser session. This value stays in your browser and is not sent to us by the application.
• Study inquiries: if you respond to an inquiry made for the purposes of the study – for example a written request for information addressed to a competent authority or professional body – we process the response and any contact details supplied with it. Responses are anonymised before further research use.

3. Purposes and legal bases

• We process technical request and security data to deliver the application, maintain its security, diagnose faults and prevent abuse. The legal basis is our legitimate interest in operating a reliable and secure service.
• We process correspondence to answer enquiries and manage our relationship with you. The legal basis is our legitimate interest in responding, or taking steps at your request before entering into a contract where applicable.
• We may retain or disclose information where necessary to comply with a legal obligation or establish, exercise or defend legal claims.

The application does not use personal data for automated decision-making or profiling.

4. Artificial intelligence and personal data

Artificial intelligence tools are used in building, operating and maintaining the application and in preparing the research material it presents. This use is designed so that no personal data reaches AI systems:

• Inputs are public material. AI tools work only with publicly available sources – legislation, official journals, competent authorities’ publications, public registers and official statistics – and with the study’s own research files derived from them. They are not given technical request data, correspondence or any other personal data described in section 2.
• Inquiry responses are anonymised first. Where the study collects responses to its inquiries, the outputs are anonymised before any further processing, so no personal data contained in a response is transferred to an AI provider or any other external server.
• No automated decisions about you. AI assists the study team in drafting, structuring and checking research content; it is not used to make decisions about, evaluate or profile any identifiable person.

5. Cookies and similar storage

The application does not currently set analytics or advertising cookies. It uses browser session storage only for the strictly functional access flag described above. The browser normally removes this value when the relevant browsing session ends.

6. Recipients and international transfers

Personal data may be processed by service providers supporting website hosting, security, maintenance and email delivery. They process data only for the relevant service and under applicable data-protection obligations.

If a provider processes personal data outside the European Economic Area, we will use an applicable lawful transfer mechanism and safeguards required by data-protection law.

7. Retention

Technical logs are retained only for as long as reasonably necessary for security, fault diagnosis and abuse prevention, taking account of the hosting configuration and any incident under investigation. Email correspondence is retained for as long as necessary to deal with the enquiry and thereafter only where needed for legal, contractual or record-keeping purposes. The session access flag normally ends with the browser session.

8. Your rights

Subject to the conditions in applicable law, you may request access to and rectification or erasure of your personal data, restriction of processing, data portability, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time without affecting earlier processing.

To exercise a right, contact info@arch-data.eu. We may need enough information to verify your identity and locate the relevant data.

European Commission guidance on data-protection rights provides a general overview.

9. Complaints

You may lodge a complaint with the supervisory authority in the country of your habitual residence, place of work or the alleged infringement. In Slovakia, the supervisory authority is the Office for Personal Data Protection of the Slovak Republic.

10. Security and changes

We use reasonable technical and organisational measures appropriate to the nature of this static application. No internet service can be guaranteed completely secure.

We may update this policy when the application, its hosting or applicable requirements change. The date below identifies the latest version.