EBAS@NILU - In Situ Atmospheric Data

 

EBAS Privacy Policy

Scope

This policy describes how NILU processes your personal data in relation to the General Data Protection Regulation 2018 when reporting observation data to, or accessing data from, the EBAS database and associated services (www.ebas.nilu.no). Learn more about NILU’s general privacy policy here: https://nilu.com/about-nilu/nilus-privacy-policy/ and EBAS’s data policy here: https://ebas.nilu.no/about/.

Who is responsible for my personal data?

NILU is the data controller. That means NILU is the entity that determines the purpose and means of processing personal data. NILU thus decides why the data is collected, how they are used and what happens to the data.

What personal data are collected?

Your IP address is recorded when you are using the EBAS data portal. IP addresses are used to extract metrics of website use, such as which country our users connect from, and how many unique users have downloaded data files. Processing is based on our interest in understanding EBAS data dissemination and use, and in the need to prevent the malicious use of the site (e.g. denial of service attacks).

The personal data also includes the personal information (e.g. Principal investigator (PI)’s name, email/mail address, persistent identifiers (PIDs) and affiliation) in the metadata of the observational data submitted by observational data submitter.

What is the personal data used for?

Personal data will only be used for the purpose it was first collected for. We will not transfer or make available any personal information related to the use of data. To ensure traceable data production and quality assurance, EBAS compiles names, email addresses, and PIDs from data submitters. This information allows us to contact data providers, maintain transparency and quality assurance/quality control throughout the data curation process, ensure provenance and facilitate traceable science and to secure appropriate attribution. Data users will receive personal information about data submitters as part of the metadata when downloading observational data from EBAS. This data includes PI name, email/mail address, PID, and affiliation.

Data security

The EBAS data portal uses SSL encryption. The EBAS data portal servers are only accessible for admins from the NILU’s internal network. The servers are physically located in Norway.

What rights do I have?

Unconditional rights by law

  • Access to the personal data: You have the right to a copy of your personal data, so you can check the data itself.
  • Rectification: You have the right to have incorrect personal data corrected.
  • Complaint: You have the right to lodge a complaint with your national supervisory/data protection authority. In Norway, you can contact the Norwegian Data Protection Authority - Datatilsynet (https://www.datatilsynet.no/en/).
  • Object to processing: You have the right to object to the processing of personal data. The processing stops until we demonstrate compelling legitimate grounds for the processing. A document assessing our legitimate interests and their relationship with you will be provided to you.

Conditional rights

These rights apply if certain conditions are met.

  • Erasure: You might have the right to have your personal data removed from our storage, for example when you withdraw consent for processing. This means that you only will have a right to delete your personal data and not the actual observation data submitted by you. In such cases, the timeseries of the observational data will have missing personal information in the metadata.
  • Restriction of processing: You might have the right to have us restrict the processing of your personal data, for example when we don’t need the data anymore, but you require it for a legal claim.
  • Portability: You have the right to have your data transmitted to another controller without hindrance from NILU when the processing is based on your consent or a contract between you and us.

Exercising your rights

If you have a question regarding our privacy policy, wish to exercise any of your rights, or feel dissatisfaction with our use of your data, please contact NILU by sending an email to ebas@nilu.no. We will perform our duties without undue delay within one month of your request. That period may be extended by two further months where necessary, considering the complexity and number of the requests. For further information about your rights and exercising them, please see here.

Changes to this policy

We will inform you of any material changes to this policy with a notice on our website.

This policy has been last updated in 2024-09-04.

Contact Information

For any questions or concerns related to privacy or data handling in EBAS, please contact NILU at ebas@nilu.no.

Postal address: NILU (company registration number 941 705 561), Postboks 100, 2027 Kjeller, Norway.