Privacy Policy
ROHub Privacy Policy
ROHub respects and is committed to protect the privacy of its users. At the same time, we want to ensure that you get content, and resources that you can trust and that matter most to you.
Scope
This privacy policy applies to all personal data processed by employees, as well as partners building added value services for ROHub that use or process its content to deliver new information and knowledge.
Information on the processing of your personal data
We hereby inform you that we process your personal data.
Details on this can be found below.
I. Personal data controller
We, the Institute of Bioorganic Chemistry of the Polish Academy of Sciences, with headquarters in Poznań, ul. Z.Noskowskiego 12/14, 61-704 Poznań, phone (+48) 61 852 85 03, are the Administrator of your personal data.
II. Data Protection Officer
We have appointed a Data Protection Officer, whom you can contact regarding the protection of your personal data and the exercise of your rights by e-mail: dpo@ibch.poznan.pl; phone: (+48) 61 858 20 44; or in writing to the address of our registered office, indicated in point on 'Contact' tab.
III. Purposes and principles of processing
ROHub uses your personal information for the following purposes:
- in order to freely and fully browse our website based on your consent (the basis of Article 6 (1) (a) of the GDPR)
- in order to enable you to set up and use an account based on your consent (the basis of Article 6 (1) (a) of the GDPR).
- for the purposes of solving problems related to information security, website management, locating system problems, based on the legitimate interest of the Administrator (the basis of Article 6 (1) (f) of the GDPR).
to determine and inform about the authenticity of resources
keeping track of the user actions and stages of the research object. For this feature, we collect the agent (usually user) responsible of a particular change in a research object (e.g., addition, removal, modification), along with the date of this change. This information enables users to collaborate seamlessly and transparently in a research object, and to identify who was responsible for which part of the work. We also keep track of the changes in the research object evolution, including when snapshots, archives or forks were created and by whom. This allow us to provide users with a visualization of the research object lifecycle, allowing them to better understand the different stages or milestones achieved during its lifetime, what is our legitimate interest (the basis of Article 6 (1) (f) of the GDPR).
to inform about the activities and evolution of research objects
keeping track of their provenance. One of the most important features of repositories is to inform the authenticity of the resources stored to its users. The provenance of an artifact in terms of its origins and ownerships, such as who created the resource and when, is crucial to determine this authenticity, what is our legitimate interest (the basis of Article 6 (1) (f) of the GDPR).
to determine and inform about the authenticity of resources
keeping track of their provenance. One of the most important features of repositories is to inform the authenticity of the resources stored to its users. The provenance of an artifact in terms of its origins and ownerships, such as who created the resource and when, is crucial to determine this authenticity, what is our legitimate interest (the basis of Article 6 (1) (f) of the GDPR).
to feature research objects based on their social impact.
The social impact of a research object is measured based on the ratings provided by users, the number of times and by whom it was marked as favorite, and (later on) also taking into account the comments users made about it. Thus, for each user we collect his ratings, as well as his favorites research objects and comments provided. Based on the information collected we are able to highlight research objects with higher social impact, e.g., in searches or in main page, but also to provide users with quick access to his favorites and high-ranked research objects, e.g., from his user profile, what is our legitimate interest (the basis of Article 6 (1) (f) of the GDPR).
to recommend research objects based on social information
inferred from their collaborations and the domains of interest for their research, but also based on his preferences (favorites/rankings). For making such inferences, we need to collect information about contributors in a research objects, his activity in the research object, as well as his domains of interest (e.g., asking that explicitly or retrieving this information from the domain of his research objects) , what is our legitimate interest (the basis of Article 6 (1) (f) of the GDPR).
to build user rankings and statistics, and profile the users’ interests
based on their preferences and research areas. Based on the ratings given to the users’ research objects, and how much his work is liked by others (marking his research objects as favorites), in addition to the quality of his research objects, we can build a ranking of the most popular and best performing users. This will enable users to build their own reputation and find other well performing users. We will also be able to derive user statistics (e.g., how active he is) and profile the users’ interest (e.g., domain of his research objects, and of those he liked). This will allow us to target better later the recommendations, what is our legitimate interest (the basis of Article 6 (1) (f) of the GDPR).
- in order to possibly establish, investigate or defend against claims, which is our legitimate interest (based on Article 6 (1) (f) of the GDPR).
IV. The categories of your data that we process
We will process the following categories of your data:
- Your first name and last name
- Your email address(es)
- Your unique user identifier
- Your actions on ROHub
- Your research objects ratings and your favorites research objects
- Your access tokens used for authentication purposes when using ROHub API
- Other information you upload or provide to us, including but not limited to:
- title
- affiliation
- self-description
- areas of interest
- personal picture
- physical address
- phone number
- social media handles
- personal tokens in external systems that you want ROHub to use on your behalf (e.g., to deposit or publish your research objects, or to store the resources aggregated in your research objects)
V. Data recipients
As a global public website, ROHub can be access by users from many different countries, who may visualize and inspect your public information.
ROHub, in connection with the implementation of individual services, may disclose your personal data to external entities, such as public authorities or third parties (who make a relevant request based on a valid legal basis).
Additionally, ROHub traffic is monitored via Google Analytics which collects information about user’s behavior and statistics but without personal data.
VI. Data transfer to third countries or international organizations
In the case of services provided by Google Analytics, it is possible to transfer data outside the EEA (European Economic Area), i.e. to countries to which the provisions of the GDPR do not apply. In this case, however, the transfer of data takes place on the basis of an agreement that takes into account the EU requirements for the transfer of personal data outside the EEA (the so-called standard contractual clauses, adopted by the European Commission) or under the mechanism of the so-called Privacy Shield, the participants of which ensure an appropriate level of security for the processing of personal data in accordance with an appropriate decision of the European Commission.
VII. Data storage period
The period of storage of personal data by ROHub depends on the legal basis underlying the processing. As a rule, we will process your personal data:
- until we terminate the provision of a given service, in particular until the account is deleted,
- until you object to their processing for this purpose, you will withdraw your consent, if consent was the only basis for data processing
- until the legitimate interest of the administrator ceases (e.g. the limitation period for claims),
- for direct marketing of our products and services, until you object to their processing for this purpose, you will withdraw your consent if we processed them on the basis of the so-called marketing consent, or we will determine that they have become obsolete.
If there is no reason for data processing, the data will be anonymised or deleted.
VIII. Your rights:
In order to exercise your rights, send a request to the Data Administrator or the Data Protection Officer - contact details are indicated in point I and II.
You are entitled to:
- the right to access and receive your data,
- the right to rectify (correct) your data,
- the right to delete data.
If, in your opinion, there are no grounds for us to process your data, you can request that we delete it.
- restriction of data processing.
You can request that we limit the processing of your personal data only to their storage or performance of activities agreed with you, if in your opinion we have incorrect data about you or we process it unreasonably; or you do not want us to remove them because you need them to establish, assert or defend claims; or for the duration of your objection to data processing.
- the right to object to data processing:
"Marketing" objection. You have an objection to the processing of your data for the purpose of direct marketing. If you exercise this right - we will stop processing data for this purpose.
Objection due to special situation You also have the right to object to the processing of your data on the basis of a legitimate interest for purposes other than direct marketing, and when the processing is necessary for us to perform a task carried out in the public interest or to exercise public authority entrusted to us. You should then indicate to us your special situation, which in your opinion justifies the cessation of the processing covered by the objection. We will cease to process your data for these purposes, unless we prove that the basis of our processing of your data override your rights or that your data is necessary for us to establish, assert or defend claims.
- the right to data portability:
You have the right to receive from us, in a structured, commonly used, machine-readable format, e.g. the "csv" format, your personal data that you provided to us based on your consent. You can commission us to send this data directly to another entity.
- the right to lodge a complaint with the supervisory authority.
If you believe that we are processing your data unlawfully, you can lodge a complaint with the President of the Office for Personal Data Protection or another competent supervisory authority.
- the right to withdraw consent to the processing of personal data.
You have the right to withdraw your consent to the processing of personal data at any time, which we process based on your consent. Withdrawal of consent will not affect the lawfulness of the processing which was carried out on the basis of your consent before its withdrawal.
Remember that before exercising your rights, we will have to make sure that you are you, i.e. identify you properly.
IX. Information on voluntary data submission
Providing your data is voluntary. If you do not provide data, we will not create a user account for you and we can refuse you access to our system and our services
Technical and regulatory information
Logging practices
IEEE automatically records the Internet Protocol (IP) addresses of visitors. The IP address is a unique number assigned to every computer on the internet. Generally, an IP address changes each time you connect to the internet (it is a "dynamic" address). Note, however, that if you have a broadband connection, depending on your individual circumstance, the IP address that we collect may contain information that could be deemed identifiable. This is because, with some broadband connections, your IP address doesn't change (it is "static") and could be associated with your personal computer.
External links behavior
ROHub can provide links pointing to other sites created and maintained by other public- and/or private-sector organizations. These links may be external resources aggregated by the research object, or added-value applications connected in some way to ROHub. When you transfer to an outside website, you are leaving the ROHub domain, and our information management policies no longer apply.
Cookies
Cookies are electronic placeholders that are placed on your device by websites to track your individual movements on that website over time. ROHub uses both session-based cookies (which last only for the duration of the user's session) and persistent cookies (which remain on your device and provides information about the session you are in and waits for the next time you use that site again).
These cookies provide useful information to ROHub, enabling us to recognize repeat users, and facilitate the user's access to our website.
