Scope
This policy describes how we, ICOS ERIC, use your personal data when you visit the ICOS ERIC website www.icos-ri.eu or the ICOS Carbon Portal website www.icos-cp.eu.
ICOS Central Facilities and National Networks run and maintain their own websites. Their domain names are usually www.icos-name.country or www.icos-country.eu. This policy doesn’t apply to those websites.
Who is responsible for my data?
ICOS ERIC is the data controller. That means we are responsible for collecting your data and looking after it.
What data is used?
We ask for your email address when logging into the Carbon Portal, when submitting a reference to BibBase, when subscribing to our newsletter, and in the feedback form. These functions can’t be used without providing an email address. Your email address is erased when it no longer serves a purpose, for example after unsubscribing from our newsletter. Processing is based on your consent.
You have the option to fill out contact information and ORCID id for your public Carbon Portal profile. Providing information is fully voluntary. It’s used for contacting you, and to record your ICOS-related publications to the ICOS publication list. It’s also used to update your ORCID profile with your contributed data, and usage and citation statistics of this data. For ORCID’s privacy policy, please see here https://orcid.org/footer/privacy-policy. Year of birth and gender are also voluntary information, only used for statistical purposes. Carbon Portal profile information is stored until you delete your account. Processing is based on your consent.
The ICOS website also offers services requiring registration, such as submitting an abstract or registering to the ICOS Science Conference, or to other ICOS events. To provide these services, for example, to organise the events in question and to communicate with you, we ask your contact information. Your input data will only be used for the purpose of using the service for which you have registered and for communicating about similar events in the future. We may also ask dietary information in order to arrange the catering in an event. Your dietary information will be deleted after the event.
We will process the data provided during registration only based on your consent per EU GDPR regulation, Art. 6 (1)(a) DSGVO. You may revoke your consent at any time with future effect. An informal email making this request is sufficient.
Your IP address is recorded when downloading data from the Carbon Portal. We use IP addresses to record unique downloads over time and country. Processing is based on our legitimate interest in analyzing the spread of ICOS RI data over time.
A cookie is a tiny file that is created on your computer upon visiting a website, which then communicates with websites. We use a cookie containing your Carbon Portal login status and expiry time. Denying this cookie necessarily prevents Carbon Portal login. This cookie expires after approximately a day. Processing is based on your consent.
We use Matomo to monitor and analyze the use of our site. It uses cookies to distinguish you from other site visitors.
Who gets my data?
Personal data will be used for the purpose it was first collected for. We won’t transfer your personal information outside of ICOS Research Infrastructure unless otherwise mentioned. For information about the infrastructure, please see here https://www.icos-ri.eu/icos-research-infrastructure
ICOS Carbon Portal profile data and reference submissions are handled in accordance with scientific customs. This means names, affiliations and email addresses (e.g. of corresponding authors) are used to attribute publications of data, abstracts, articles and reports and the like to the rightful authors and contributors. These data are used as metadata in ICOS databases and possibly transferred to other external databases that ICOS connects to, as FAIR metadata.
We transfer your email address to MailerLite, the service we use to distribute our newsletter.
For MailerLite’s privacy policy, please see here www.mailerlite.com/legal/privacy-policy.
Data security
Our websites and services use SSL encryption. All services run through a reverse proxy, which only allows the programmatic access built into the application programming interface of the services. The servers are only accessible for admins from a select number of machines with fixed IP addresses from Lund University, Sweden. ICOS ERIC runs its own dedicated two servers through Carbon Portal, which are physically located at LUNARC computing center at Lund University. The university doesn’t have access to the servers.
What rights do I have?
Unconditional rights by law
Access to the personal data. You have the right to a copy of your processed data, so you can check the data itself.
Rectification. You have the right to have incorrect data corrected.
Complaint. You have the right to lodge a complaint with your national supervisory authority. In Finland you can contact the Finnish Data Protection Ombudsman: https://tietosuoja.fi/en/contact-information.
Object to processing. Where processing data is based on our legitimate interests, you have the right to object to the processing. The processing stops until we demonstrate compelling legitimate grounds for the processing. A document assessing our legitimate interests and their relationship with you will be provided to you.
Conditional rights
These rights apply if certain conditions are met.
Erasure. You might have the right to have your data removed from our storage, for example when you withdraw consent for processing. If there are grounds for erasure, we will take reasonable steps to have it erased from third party databases as well.
Restriction of processing. You might have the right to have us restrict the processing of your data, for example when we don’t need the data anymore, but you require it for a legal claim.
Portability. You have the right to have your data transmitted to another controller without hindrance from ICOS ERIC when the processing is based on your consent or a contract between you and us.
Exercising your rights
If you have a question regarding our privacy policy, wish to exercise any of your rights, or feel dissatisfaction with our use of your data, please contact ICOS ERIC Data Protection Officer by sending email to dpo@icos-ri.eu. We will perform our duties without undue delay within one month of your request. That period may be extended by two further months where necessary, considering the complexity and number of the requests.
For further information about your rights and exercising them, please see here https://tietosuoja.fi/en/know-your-rights.
Changes to this policy
We will inform you of any material changes to this policy with a notice on our website.
This policy has been last updated in October 26, 2023.