Privacy Notice

1. Scope of this notice

EvaDesk is a digital platform used to support the organization and delivery of project-proposal evaluation processes. This notice covers personal data processed for platform access, user administration, security, and operation of EvaDesk.

Individual evaluation calls or projects may be subject to additional privacy information provided by the relevant contracting authority or client.

2. Personal data we may process

Depending on your role and use of the platform, EvaDesk may process:

• your name, email address and other contact details;
• Microsoft Entra guest-account and authentication information;
• role, group-membership and access-permission information;
• professional or evaluator-profile information that you provide;
• assignment, workflow and activity information relevant to the evaluation process;
• technical, security and audit information generated when the platform is used.

3. Why we process personal data

Personal data may be processed to:

• create and administer your EvaDesk access;
• authenticate users and apply role-based permissions;
• support evaluator assignment and evaluation workflows;
• maintain platform security, auditability and troubleshooting;
• support contractual, legal and client requirements connected with an evaluation process.

4. Microsoft 365 and service providers

EvaDesk uses Microsoft cloud services, including Microsoft Entra ID, Microsoft 365 and SharePoint Online, for identity, authentication, access control and platform operation.

This public Privacy Notice is hosted using Cloudflare Pages. Cloudflare may process limited technical connection information required to deliver this page.

5. Access to personal data

Access is restricted according to role and business need. Authorized EvaDesk administrators and authorized representatives of the relevant evaluation process may access personal data where required for their responsibilities.

Personal data is not sold for advertising purposes.

6. Retention and security

Personal data is retained only for as long as required for platform access, the relevant evaluation process, applicable contractual obligations, legal requirements, and necessary audit or security purposes.

EvaDesk applies role-based access, authenticated guest access and other technical and organizational controls intended to limit access to authorized users.

7. Your privacy rights

Subject to applicable law and the circumstances of the relevant processing, you may have rights including access, rectification, erasure, restriction, objection and data portability, as well as the right to lodge a complaint with a competent data-protection authority.

8. Cookies and tracking on this page

This Privacy Notice page itself does not use analytics, advertising or marketing cookies and does not include third-party tracking scripts.

When you proceed to Microsoft services or the EvaDesk platform, Microsoft may use cookies or similar technologies that are necessary for authentication, security and service operation.

9. Privacy contact

For privacy questions concerning EvaDesk platform access or administration, contact:

10. Platform operator

EvaDesk is provided and technically operated by Micro Digital d.o.o. as a dedicated digital evaluation service. The allocation of data-protection responsibilities for a specific evaluation engagement may also be governed by the relevant contract, call documentation and client instructions.