Data protection: Privacy notice for EMBL-EBI's public website

Find out what personal data is collected by the specific EMBL-EBI service you are requesting and for what purposes, as well as how your data are processed and kept secure.

Privacy Notice for ENA presentation

This Privacy Notice explains what personal data is collected by the specific EMBL-EBI service you are requesting, for what purposes, how it is processed, and how we keep it secure.

Note that this service collects personal data directly provided by the user, and also collects personal data from users that is provided by other organisations.

1. Who controls your personal data and how to contact us?

The EMBL data controller's contact details are:

Rolf Apweiler and Ewan Birney, EMBL-EBI Directors

Email: data-controller@ebi.ac.uk

EMBL-EBI, Wellcome Genome Campus, CB10 1SD Hinxton, Cambridgeshire, UK.

The EMBL Data Protection Officer's contact details are:

EMBL Data Protection Officer

Tel: +49 6221 387-0

Email: dpo@embl.org

EMBL Heidelberg, Meyerhofstraße 1, 69117 Heidelberg, Germany

2. Which is the lawful basis for processing your personal data?

Processing your personal data is necessary for our legitimate interest of delivering a service that provides broader societal benefits.

3. What personal data do we collect? How do we use this personal data?

We collect the following personal data:

IP addresses
Date and time of a visit to the service website
Operating system
Amount of data transmitted
Browser
 

We will use personal data to:

Better understand the needs of the users and guide future improvements of the service
Create anonymous usage statistics
To publicly publish information to facilitate scientific research. Only personal data that is part of the public scientific record* and provided by EMBL-EBI teams from their public archives is offered to the public. The personal data gathered directly from users of the service will not be publicly published.
*These personal data are Name, Email address, ORCiD, Organisation, Organisational affiliation, Business address, Funding or grants awarded, title, laboratory name, business telephone number, consortium and date of scientific record creation.

 

4. What personal data is provided by other organisations? How do we use this personal data?

NCBI provides the following personal data:

Name
Email address
Organisation
Organisational affiliation
Business address
Funding or grants awarded
Title
Laboratory name
Date of scientific record creation

And it is used to:

Publicly publish information to facilitate scientific research
Better understand the needs of the users and guide future improvements of the service
Create anonymous usage statistics
 

DDBJ provides the following personal data:

Name
Email address
Organisation
Organisational affiliation
Business address
Funding or grants awarded
Title
Laboratory name
Date of scientific record creation

And it is used to:

Publicly publish information to facilitate scientific research
Better understand the needs of the users and guide future improvements of the service
Create anonymous usage statistics
 

5. Who will have access to the personal data provided by other organisations?

Only part of the personal data will be disclosed to the general public. 

6. Will your personal data be transferred to third countries (i.e. countries not part of EU/EAA) and/or international organisations?

There are no personal data transfers to third countries or to international organisations.

7. How long do we keep your personal data?

Any personal data directly obtained from you and that is part of the personal record will be retained as long as the service is live, even if you stop using the service. We will keep the personal data for the minimum amount of time possible to ensure legal compliance and to facilitate internal and external audits if they arise.

8. Your rights regarding your personal data

You have the right to:

  1. Not be subject to decisions based solely on automated processing of data (i.e. without human intervention) without you having your views taken into consideration.
  2. Request at reasonable intervals and without excessive delay or expense, information about the personal data processed about you. Under your request we will inform you in writing about, for example, the origin of the personal data or the preservation period.
  3. Request information to understand data processing activities when the results of these activities are applied to you.
  4. Object at any time to the processing of your personal data unless we can demonstrate that we have legitimate reasons to process your personal data.
  5. Request free of charge and without excessive delay rectification or erasure of your personal data if we have not been processing it respecting the EMBL Internal Policy for Data Protection.

It must be clarified that rights 4 and 5 are only available whenever the processing of your personal data is not necessary to:

  1. Comply with a legal obligation.
  2. Perform a task carried out in the public interest.
  3. Exercise authority as a data controller.
  4. Archive for purposes in the public interest, or for historical research purposes, or for statistical purposes.
  5. Establish, exercise or defend legal claims.
Published at: Friday, November 25, 2022 - 17:29