- Information we collect
- Where we store your information
- Your data protection rights
- Contact details
- How to make a complaint
For the purposes of this policy:
- 'We', 'us' and 'our' refers to PHI-base as an organization;
- 'You' and 'your' refers to the subject of the personal information (in the case that you have provided the personal information, that subject is you).
- 'Our services' refers to the PHI-base website and the PHI-Canto curation application.
When you use PHI-Canto to curate a publication, we collect the following personal information from you:
- your full name,
- your email address, and
- (optionally) your ORCID iD.
You will be asked to enter this information by filling in a form on the PHI-Canto website before starting a curation session.
Once your curation session is submitted to PHI-base, you will be listed as the curator of the publication, meaning your full name will be displayed on the PHI-base website (usually, but not necessarily, on the page corresponding to the publication you curated).
We may use your email address to contact you about your curation session. For example: we may contact you with a reminder about starting or resuming your curation session, or we may ask questions about the data you have entered in a curation session.
We may also contact you by email to ask you to contribute an article to the PHI-base website, or to ask you to help PHI-base by volunteering as a species expert.
When you begin a curation session, PHI-Canto will automatically send you an email containing guidance about the curation process and a link to your curation session.
If you agree to opt-in to the PHI-base mailing list when starting a curation session, we may email you with announcements related to PHI-base, such as new database releases, and upcoming training sessions, conferences, or events.
We need this personal information in order to:
- Provide proper credit to the curator for their contributions, to prevent others from falsely claiming credit for a curation;
- Check who to contact if we need to ask questions about any information entered in a curation session, or who to send a reminder to if a curation session has been idle for too long;
- Indicate to the users of PHI-base that the data is being curated by real people;
- Check if a publication has been curated by one of its named authors, or by someone else.
Once your curation session has been submitted to PHI-base, your full name will be visible on the PHI-base website, so your full name may be shared with anyone who visits the website.
We do not share your email address with other organizations or people outside of PHI-base. We store email addresses only for internal use by PHI-base and PHI-Canto. Your name and email address are not included in the version of the PHI-base database that we allow users to download.
We may include an anonymous categorical identifier about the curator when sharing data from PHI-base with other organizations. This identifier is specifically used to indicate the role the curator has in relation to the publication: for example, if the curator is a publicly listed author of the paper, a third-party curator, or a member of the PHI-base team.
We will store your personal information (full name, email address, and ORCID iD) for as long as you consent to be linked with a publication. Note that you first provide your consent when starting a curation session in PHI-Canto.
If you no longer want to be involved with the curation of a publication, you can contact us to tell us that you no longer consent, and we will stop storing your personal information (see the section on Your data protection rights for more details). If you have already submitted your curation session, the publication you curated will remain on PHI-base, but your name will be replaced with an anonymous identifier, such as 'community curator'.
When you download a copy of the PHI-base database from the PHI-base website, we collect the following personal information from you:
- your name,
- the name and sector of the organization where you work, and
- your organizational email address.
You will be asked to enter this information by filling in a form on the PHI-base website before downloading a copy of the PHI-base database.
We use your personal information to generate an anonymized count of the number of unique users who have downloaded the PHI-base database. We also use your personal information to group this anonymized data by the organization that the users belonged to. This allows us to see, for example, how often PHI-base is being used by research organizations, compared to commercial organizations.
We need your personal information to ensure that we can accurately count unique downloads of the PHI-base database, so we do not classify repeated downloads by the same person as downloads by a new person.
We need to count and categorize the downloads of PHI-base so that we can demonstrate to our funders and other interested groups that PHI-base is useful to the scientific community.
We do not share your personal information with other organizations or people outside of PHI-base. In order to prove that PHI-base is useful to the scientific community, we may be required to share anonymous aggregated data with our funders, such as: the total number of visitors to the PHI-base website, the number of downloads of PHI-base, and the countries that are using PHI-base.
We will store your personal information for a maximum of three years, or until the end of the grant cycle for the PHI-base project (whichever occurs first).
Cookies are small pieces of data that are sent from a website and stored in your web browser. Cookies are used for multiple purposes, such as keeping you logged in to a website, recording which pages you visited, and recording information that you entered into forms.
The cookies used by PHI-Canto and the PHI-base website are described below:
|PHI-Canto__session||Contains an anonymous identifier that is used to keep admin users logged in.|
|JSESSIONID||Contains an anonymous identifier that is used to keep track of the user's session.|
Note that both PHI-base and PHI-Canto use Google Analytics (described below), which also sets cookies. These cookies are described on the Google Analytics website, at Google Analytics Cookie Usage on Websites.
Our usage of Google Analytics follows the Terms of Service for Google Analytics. Google Analytics sends information to Google, and the use of this information is described by Google's Privacy and Terms.
Your personal data is stored in the United Kingdom and the European Union.
- Data collected by PHI-base is stored at Rothamsted Research, UK.
- Data collected by PHI-Canto is stored at data centres owned by Hetzner Online GmbH. At the time of writing, these centres are based in Nuremberg, Germany; Falkenstein, Germany; and Helsinki, Finland.
Every user of PHI-base has the data protection rights described below. If you wish to make a request related to your rights, you can contact us at email@example.com, or by any of the other contact details described below. Once we receive your request, we will respond to you within one month.
You have the right to ask us for a copy of your personal information that we have stored. You also have the right to ask us whether or not your personal information is being used by us, and who your personal information has been shared with.
You have the right to ask us to correct any personal information about you that is not accurate, or outdated. For example, if you change your name, you have the right to ask that we update the copy of your name that we have stored.
You have the right to ask us to erase your personal information if you decide you no longer agree with the reasons we collected your personal information (our reasons are described in this policy).
You have the right to ask us to stop using your personal information if you think that the personal information we have stored is not accurate, or if you think that we are using your personal information unlawfully, or in a way that violates your rights.
You have the right to ask us to send you a machine-readable version of your personal data that we have stored. You also have the right to ask us to transfer your personal data to another organization or person (where possible).
Email address: firstname.lastname@example.org
Web address: www.phi-base.org
If you want to make a complaint about how PHI-base is handling your personal data, you can send a complaint to us at email@example.com.
If you think that PHI-base has not handled your complaint correctly, you can send a complaint to your national data protection authority.
The national data protection authority for the United Kingdom is the Information Commissioner's Office.
For nations in the European Union, the data protection authorities are listed on the European Data Protection Board website.