Many portions of the Website, including information you voluntarily provide, will be public-facing for the open sharing of innovative developments, ideas, and information that makes our collaborative community so great. While we are committed to open sharing, we strive to respect the privacy of individual community members and will minimize the information we collect and share. If you do not want to share your information, including personally identifiable information, with other community members and the public, please be thoughtful as to how you interact with the Website and what information you provide through the the Website (for example, through creating a public profile, contributions to collections, uploads, and forks).
Of course, the short version doesn't tell you everything, so please read on for more details!
If you're just browsing the website, we collect the same basic information that most websites collect. We use common internet technologies, such as cookies and web server logs. This is stuff we collect from everybody, whether they have an account or not.
The information we collect about all visitors to our website includes the visitor's browser type, language preference, referring site, additional websites requested, and the date and time of each visitor request. We also collect potentially personally-identifying information like Internet Protocol (IP) addresses.
We collect this information to monitor and protect the security of the website.
If you use the CERN single-sign on, you create a user account and profile on our site. We require some basic information at the time of account creation. We receive the information in from the single-sign on interaction in an automatied way. We store the your CERN user principle name, your home institute, the CERN person ID, your email address and your given and last names.
"User Personal Information" is any information about one of our users which could, alone or together with other information, personally identify him or her. Information such as a username and password, an email address, a real name, and a photograph are examples of "User Personal Information."
User Personal Information does not include aggregated, non-personally identifying information. We may use aggregated, non-personally identifying information to operate, improve, and optimize our website and service.
Performance of a contract. The use of your information may be necessary to perform the contract that you have with us. For example, if you use the Website to contribute to a collection, create a profile, post and comment through the Website, or request information through the Website, we will use your information to carry out our obligation to complete and administer that request.
Legitimate interests. We use your information for our legitimate interests, such as to provide you with the best content through the Website and communications with users and the public, to improve our products and services, and for administrative, security, fraud prevention and legal purposes.
We do not intentionally collect sensitive personal information, such as social security numbers, genetic data, health information, or religious information. Although the Website does not request or intentionally collect any sensitive personal information, we realize that you might store this kind of information in your account, such as in a collection. If you store any sensitive personal information on our servers, you are consenting to our storage of that information on our servers, which are in the EU.
We do not intentionally collect information that is stored in your collections or other free-form content inputs. Information in your collections belongs to you, and you are responsible for it, as well as for making sure that your content complies with our Terms of Service. We do not access private collections unless required to for security or maintenance, or for support reasons, with the consent of the collections owner.
If your collections is public, anyone (including us) may view its contents. If you have included private or sensitive information in your public collection, such as email addresses, that information may be indexed by search engines or used by third parties. In addition, we do not generally search for content in your collections.
If you're a child under the age of 16, you may not have an account on the Website. The Website does not knowingly collect information from or direct any of our content specifically to children under 16. If we learn or have reason to suspect that you are a user who is under the age of 16, we will, unfortunately, have to close the child's account. Please see our Terms of Service for information about account termination.
We only disclose potentially personally-identifying and personally-identifying information to those of our employees, contractors, and affiliated organizations that (i) need to know that information in order to process it on our behalf or to provide services available on the Website, and (ii) that have agreed not to disclose it to others.
We will not rent or sell potentially personally-identifying and personally-identifying information to anyone. Other than to our employees, contractors, and affiliated organizations, as described above, we disclose potentially personally-identifying and personally-identifying information only when required to do so by law, or when we believe in good faith that disclosure is reasonably necessary to protect the property or rights of us, third parties, or the public at large.
We take measures reasonably necessary to protect against the unauthorized access, use, alteration, or destruction of potentially personally-identifying and personally-identifying information.
Much of the Website is public-facing. If your content is public-facing, third parties may access and use it in compliance with our Terms of Service. We do not sell that content; it is yours. However, we do allow third parties, such as research organizations or archives, to compile public-facing information.
Your Personal Information, associated with your content, may be gathered by third parties in these compilations of data. If you do not want your Personal Information to appear in third parties' compilations of data, please do not make your Personal Information publicly available and be sure to configure your profile address to be private.
If you are a registered user of the Website and have supplied your email address, we may occasionally send you an email to tell you about security, system information, new features, solicit your feedback, or just keep you up to date with what's going on at the Website. We will send emails to you about activities on the Website, such as collections, comments if you have subscribed to receive such notifications. There's a link located at the bottom of each of the notification emails we send you so you can stop receiving such emails at any time.
We take all measures reasonably necessary to protect User Personal Information from unauthorized access, alteration, or destruction; maintain data accuracy; and help ensure the appropriate use of User Personal Information. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it.
No method of transmission, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security.
If you are located in the European Union, you are entitled to the following rights with regard to your personal information and data:
Additional rights that may apply to you in certain instances:
If you already have an account on the Website, you may access, update, alter, or delete your basic user profile information by logging into your account and updating profile settings.
We will retain your information for as long as your account is active or as needed to perform our contractual obligations, provide you services through the Website, to comply with legal obligations, resolve disputes, preserve legal rights, or enforce our agreements.
We may retain certain User Personal Information indefinitely unless you delete it or request its deletion. For example, we don’t automatically delete inactive user accounts, so unless you choose to delete your account, we will retain your account information indefinitely.
Please note that due to the open source nature of our products, services, and community, we may retain limited personally-identifiable information indefinitely. For example, if you provide your information in connection with a comment, we may display that information even if you have deleted your account as we do not automatically delete community posts. Also, as described in our Terms of Service, if you contribute to collections on the Website and provide your personal information in connection with that contribution, that information (including your name) will be embedded and publicly displayed with your contribution and we will not be able to delete or erase it because doing so would break the collection.
If you have questions or concerns about the way we are handling your information or would like to exercise your privacy rights, please email us at firstname.lastname@example.org or write a letter to
We will respond within 30 days of receiving your message at the latest but please note for promptest response, we recommend emailing us.
This privacy statement is based on the privacy statement of GitLab.com which is published under a creative commons license (CC BY-SA 4.0) and on the privacy statement of GitHub.com which is published under a creative commons license (CC0). As a result, this privacy statement is released under the creative commons Attribution-ShareAlike 4.0 International license. Your use of this information does not create an attorney-client relationship between you and us. We are not a law firm. These policies and procedures may not suit your organization's needs. Please consult a lawyer if you want to adopt these policies for your own uses.