Privacy Notice for EMBL-EBI collaborators mailing list
This Privacy Notice explains what personal data is collected by the specific EMBL-EBI service you are requesting, for what purposes, how it is processed, and how we keep it secure.
1. Who controls your personal data and how to contact us?
The data controller’s contact details are the following and should be used only for data protection queries:
Rolf Apweiler and Ewan Birney, EMBL-EBI Directors
Email: data-controller@ebi.ac.uk
EMBL-EBI, Wellcome Genome Campus, CB10 1SD Hinxton, Cambridgeshire, UK.
The EMBL Data Protection Officer's contact details are:
EMBL Data Protection Officer
Tel: +49 6221 387-0
Email: dpo@embl.org
EMBL Heidelberg, Meyerhofstraße 1, 69117 Heidelberg, Germany
2. What is our lawful basis for processing your personal data?
We need your consent to process your personal data. If you do not consent to us processing your personal data, we will not be able to provide you access to the service or we will only provide you a subset of functionalities available within the service.
3. How will your personal data be used?
We will use the personal data to contact external collaborators and inform them about major changes in the services provided by EMBL-EBI.
4. Who will have access to your personal data?
Only authorised EMBL-EBI personnel involved in the mailing list management will have access to your personal data.
5. Will your personal data be transferred to third countries (i.e. countries not part of EU/EAA) and/or international organisations?
There are no personal data transfers to third countries or another international organisations.
6. How long do we keep your personal data?
You will be subscribed to the mailing list as long as your EMBL-EBI collaborator account is active. When your collaborator account is deactivated we will unsubscribe you from the mailing list. The personal data you provided to create your EMBL-EBI collaborator account wil be retained for archiving purposes.
7. Your rights regarding your personal data
You have the right to:
- Not be subject to decisions based solely on an automated processing of data (i.e. without human intervention) without you having your views taken into consideration.
- Request at reasonable intervals and without excessive delay or expense, information about the personal data processed about you. Under your request we will inform you in writing about, for example, the origin of the personal data or the preservation period.
- Request information to understand data processing activities when the results of these activities are applied to you.
- Object at any time to the processing of your personal data unless we can demonstrate that we have legitimate reasons to process your personal data.
- Request free of charge and without excessive delay rectification or erasure of your personal data if we have not been processing it respecting the EMBL Internal Policy for Data Protection.
It must be clarified that rights 4 and 5 are only available whenever the processing of your personal data is not necessary to:
- Comply with a legal obligation.
- Perform a task carried out in the public interest.
- Exercise authority as a data controller.
- Archive for purposes in the public interest, or for historical research purposes, or for statistical purposes.
- Establish, exercise or defend legal claims.