Data protection: Privacy notice for EMBL-EBI's public website

Find out what personal data is collected by the specific EMBL-EBI service you are requesting and for what purposes, as well as how your data are processed and kept secure.

Privacy notice for IntAct & Complex Portal Websites

This Privacy notice explains what personal data is collected by the specific EMBL-EBI service you are requesting, for what purposes, how it is processed, and how we keep it secure.

Who controls your personal data and how to contact us?

The EMBL data controller's contact details are:

Rolf Apweiler and Ewan Birney, EMBL-EBI Directors
Email: data-controller@ebi.ac.uk
EMBL-EBI, Wellcome Genome Campus, CB10 1SD Hinxton, Cambridgeshire, UK.

The EMBL Data Protection Officer's contact details are:

EMBL Data Protection Officer
Email: dpo@embl.org
EMBL Heidelberg, Meyerhofstraße 1, 69117 Heidelberg, Germany

Which is the lawful basis for processing your personal data?

We need your consent to process your personal data. If you do not consent to us processing your personal data, we will not be able to provide you access to the service or we will only provide you a subset of functionalities available within the service.

What personal data do we collect? How do we use this personal data?

We collect the following personal data:

IP addresses
Date and time of a visit to the service website
Operating system
Amount of data transmitted
Browser
Email (only when support is requested by the user)
Email address (only when subscriptions to the newsletter is requested by the user)

We will use the personal data:

To provide the user access to the service
To better understand the needs of the users and guide future improvements of the service
To check that the Terms of Use of the service are followed
To conduct and monitor data protection activities
To create anonymous usage statistics
To conduct and monitor security activities

Who will have access to your personal data?

The personal data will be disclosed to:

Will your personal data be transferred to third countries (i.e. countries not part of EU/EAA) and/or international organisations?

Personal data is transferred to the following service provider based in a third country that EMBL-EBI relies on to provide the service:

Google Analytics

There are no personal data transfers to international organisations.

How long do we keep your personal data?

Any personal data directly obtained from you will be retained as long as the service is live, even if you stop using the service. We will keep the personal data for the minimum amount of time possible to ensure legal compliance and to facilitate internal and external audits if they arise.

We will anonymise our web logs by removing the recorded IP address after 30 days.

We will retain relevant security logs for 90 days.

Access to the web and security logs containing personal data are restricted to the relevant EMBL-EBI staff.

Your rights regarding your personal data

You have the right to:

It must be clarified that rights 4 and 5 are only available whenever the processing of your personal data is not necessary to:

Published at: Friday, November 25, 2022 - 17:30