Ensembl Privacy Notice
This privacy statement is a plain English description of how Ensembl collects and processes your personal data. Individual privacy statements are available for each individual service Ensembl provides. For more information on these please see the end of this statement. If this statement and the individual statements disagree, the individual statements take precedence.
What Information Does Ensembl Collect?
We collect information related to our legitimate interests in providing services to you, to help improve our resources and for the purposes of day to day running of the Ensembl resources and underlying infrastructure. Information collected may remain stored beyond the life of the service. We retain personal information for as short a time as possible but may retain this to comply with internal and external audits.
Information from website browsers and clients
When browsing our websites we collect information about your IP address, date/time of visit, page visited, browser type, data transferred and success of the request. For most websites this collection and processing is done by EMBL-EBI. See later in this document for a list of exceptions to our processing of browser and client data.
In addition we use IP addresses on our REST APIs to implement rate limiting. This is to ensure service stability. This collection is non-optional and a requirement of using the services. Your IP is removed from our rate limiting storage layer once every two hours.
Why do we collect this?
We collect this information to better understand how our website visitors use Ensembl, to create summary reports, to monitor, protect the security and stability of our website resources.
Information from accounts
When you create an account you must provide a name and an email address. On sign-up you should agree to this privacy statement, specifically http://www.ebi.ac.uk/data-protection/privacy-notice/ensembl-website-accounts for ensembl.org and http://www.ebi.ac.uk/data-protection/privacy-notice/ensembl-mirrors-accounts for our AWS mirrors. During account creation you can provide your organisation, country and sign-up to our mailing lists. These are all are optional fields. Accounts are not necessary to use Ensembl. You may delete your account at any time by emailing firstname.lastname@example.org.
Why do we collect this?
We need your personal information to create an account and to provide additional services.
We use your personal information to identify you when logging into our systems.
Why do we collect this?
We need to be able to communicate back to you, to deliver a range of services, which is not possible to do so without your email address.
Ensembl maintains two public mailing lists, email@example.com and firstname.lastname@example.org, and a set of private mailing lists maintained by mailchimp. You are free to subscribe and unsubscribe from these communication channels. Our public mailing list settings can be managed at http://lists.ensembl.org/mailman/listinfo, You can subscribe to our Mailchimp targeted communications at https://ensembl.us17.list-manage.com/subscribe?u=e08f33c50eeea4a07027e8ba6&id=f989c8c865 and unsubscribe from them at https://ensembl.us17.list-manage.com/unsubscribe?u=e08f33c50eeea4a07027e8ba6&id=f989c8c865.
Why do we collect this?
We want to keep you informed about our services and offer you support. This is not possible to do so without your email address.
Basis for Collection
We collect and process data on a legitimate basis i.e. we do so to provide the Ensembl service and associated services. When consent is required we process your data on a consent basis i.e. during account creation.
How we share the information we collect
Ensembl does not sell, rent or trade personal data. We do not disclose personal information to others including third party services. We do collect non-identifiable aggregated data from our services for grant, service and institutional purposes.
Our Use of Third Party Services
Ensembl uses third parties in a number of circumstances to:
- Host a subset of our websites
- To provide communication preferences
- To provide additional user analytics
When Ensembl uses these third party services, we do not transfer or link your account or personal information held on Ensembl to these resources. When a third party resource requests and processes your personal data they do so on their own authority and in accordance to their privacy statement.
We use GitHub and Prime Hosting to host a subset of our websites. Please see later in this statement for more information.
We use Mailchimp to provide communication preferences i.e. what kind of email do you want to receive from Ensembl.
We use Google Analytics for user analytics. Please see later in this statement for more information.
Why we use Third Party Services
Third party services can offer levels of service or key features that are not possible with internally developed solutions and are used as required.
Cookies and Tracking
Ensembl uses Google Analytics as a third party tracking service, but we don’t use it to track you individually or collect personal data. Instead it collects information about website performance and how users navigate through and use our sites helping us design better interfaces.
Google Analytics gathers certain simple, non-personally identifying information over time, such as your anonymised IP address, browser type, internet service provider, referring and exit pages, time stamp and similar information. We do not link this information to any of your personal data.
Google provides further information about its own privacy practices and offers a browser add-on to opt out of Google Analytics tracking.
Your rights regarding personal data
You have the right to:
Not be subject to decisions based solely on an automated processing of data (i.e. without human intervention) without you having your views taken into consideration.
Request at reasonable intervals and without excessive delay or expense, information about the personal data processed about you. Under your request we will inform you in writing about, for example, the origin of the personal data or the preservation period.
Request information to understand data processing activities when the results of these activities are applied to you.
Object at any time to the processing of your personal data unless we can demonstrate that we have legitimate reasons to process your personal data.
Request free of charge and without excessive delay rectification or erasure of your personal data if we have not been processing it respecting the EMBL Internal Policy for Data Protection.
It must be clarified that rights 4 and 5 are only available whenever the processing of your personal data is not necessary to:
Comply with a legal obligation.
Perform a task carried out in the public interest.
Exercise authority as a data controller.
Archive for purposes in the public interest, or for historical research purposes, or for statistical purposes.
Establish, exercise or defend legal claims.
Should you have any concerns about the way Ensembl handles your personal data you can write to the EMBL Data Protection Officer at email@example.com.
Exceptions to this Privacy Statement
Websites where anonymous browsing details are collected by a third party
Collected by Google Analytics (https://support.google.com/analytics/answer/6004245?hl=en)
Collected by GitHub (https://help.github.com/articles/github-privacy-statement/)
Collected by United Hosting
Changes to this Privacy Statement
Changes to this privacy statement will occur infrequently but when they do we will contact you on your account email address. For users who do not log into our resources to access them you should refer to this page periodically to ensure you are aware of the latest changes to them.
Service Specific Privacy Statements
Please refer to the following links for service specific privacy information.
- Ensembl.org including www, plants, metazoa, fungi, bacteria, protists, FTP, REST, MySQL, blog
- Ensembl blog
- Ensembl Archives Release 87 and older
- Ensembl Genomes Apollo
- Mailing Lists
- Targeted Emails
- 1000 Genomes Browsers