The EOSC Matchmaker and EOSC Data Players and (hereinafter referred to as: “the services”) provide seamless access to high-quality interoperable research outputs and services, enabling researchers to collaborate more easily, be more productive and achieve higher levels of excellence.

This privacy notice describes how we, the EGI Foundation (hereinafter referred to as “we” or “the Data Controller”), collect and process data by which project members can be personally identified (“Personal Data”) when the service is used.

EGI Foundation
Science Park 140
1098 XG Amsterdam
Netherlands

EGI Foundation
Data Protection Officer
Science Park 140
1098 XG Amsterdam
Netherlands
E-mail: dpo[AT]egi.eu

The service may process the following personal data:

Identification data:

• Identification numbers (a unique, opaque, persistent and non-reassignable Identifier provided by EGI Check-in service)
• Name
• E-mail address
• Other: affiliation, IP address, tokens/access keys for user VREs.

Behavioural data:

• Usage data
• Other: technical logs with timestamps, conversations and messages (chat history, messages stored as JSONB).

Data allowing conclusions on the personality:

• Other: membership information on group, roles, and communities.

The purpose of the collection, processing and use of the personal data mentioned above is:

• To provide the service functions, i.e. to let users perform searches through chat interface, access datasets and execute analysis tools on the available VREs.
• Identify the users or the administrators accessing the service and track usage of resources for accounting, security management and maintaining service stability and performance.

The legal basis for processing personal data is: compliance with a legal obligation or legitimate interests pursued by the controller or by a third party according to Art. 6 (1) (f) General Data Protection Regulation (GDPR).

Personal data will not be used beyond the original purpose of their acquisition. If forwarding to third parties should be necessary to answer an inquiry or to carry out a service, the consent of the data subject is considered to have been given when using the respective function or service. In particular, the data you provide to us will not be used for marketing.

For the purpose given in this privacy policy, personal data may be passed to the following third parties:

Within the EU / EEA:

• CYFRONET (resource provider, service administrator)
• CESNET (resource provider, service administrator)
• The records of your use and technical log files produced by the Service components may be shared, via secured mechanisms, for security incident response purposes with other authorised participants in the academic and research distributed digital infrastructures authorised by EGI Foundation governance, only for the same purposes and only as far as necessary to provide the incident response capability where doing so is likely to assist in the investigation of suspected misuse of Infrastructure resources.

Any data transfer to a third country outside the EU or the EEA only takes place under the conditions contained in Chapter V of the GDPR and in compliance with the provisions of this privacy policy and any related policies adopted by the EGI Federation.

The records of your use and technical log files produced by the service components will be deleted or anonymised after, at most, 18 months.