UIST Repository Privacy Notice
The University's published UIST Privacy Policy is the institutional reference for this notice. Its text describes the main university website. This supplementary notice addresses the Digital Repository at repository.uist.edu.mk.
Data controller
The data controller is the University of Information Science and Technology St Paul the Apostle, Partizanska bb, 6000 Ohrid, North Macedonia. These controller details are taken from the University's published Privacy Policy. Current university contact details are listed on the repository Contact page.
Repository information
Public records identify creators and their research and may be indexed by search engines and metadata harvesters. Accounts and deposit correspondence support submission management; service logs support security and fault investigation. Account details and complaints are handled by authorised UIST personnel and are not part of the public catalogue. Depositors must identify personal or confidential information before publication. CC0 metadata reuse does not override privacy rights.
UIST limits personal information to what is needed for the relevant purpose and retains it in accordance with applicable duties and its repository operating arrangements. The main website policy's statements about data collection and one-day log deletion should not be read as descriptions of repository accounts or repository log retention.
Correction takedown and review
Send privacy, copyright or removal requests to the university contact listed on the Contact page, identifying the record URL, affected material, reason and a contact for reply. UIST may temporarily restrict access while it assesses a credible concern. The repository administrator implements authorised technical changes and refers legal and privacy decisions to UIST. Outcomes may include correction, restored access, continued restriction or withdrawal, with a non-sensitive status notice where lawful.
An affected person may request review through the same university contact. UIST arranges review by someone other than the original decision-maker where practicable. This internal procedure does not limit applicable data protection rights or external remedies.
