Privacy Policy

Your privacy is of critical importance to us, so at DataCite we have a few fundamental principles related to privacy.

We don’t ask for personal information unless we truly need it.

We don’t share personal information with anyone except to comply with the law, develop our products, or protect our rights.

We don’t store personal information on our servers unless required for on-going business operations.

If you find content on the DataCite’s website, support site, or blog, that you believe violates our Privacy Policy, please contact us immediately at support@datacite.org.

1. DataCite – Website, Support Site, Blog, and Services

DataCite operates a website at https://datacite.org/, a support site at https://support.datacite.org/ , blog at https://datacite.org/blog/, Fabrica, a DOI service at https://doi.datacite.org/ and a Help Desk at support@datacite.org. It is DataCite’s policy to respect your privacy regarding any information we may collect while operating these sites and services. If you have questions about deleting or correcting any personal data you find on our please contact our support team.

Controller in the meaning of Art. 4 No. 7 EU General Data Protection Regulation (GDPR) is: DataCite e. V. German National Library of Science and Technology Welfengarten 1B, 30167 Hannover, Germany info@datacite.org

2. Site Visitors

Just by merely using this website for information purposes, DataCite, like most site operators, collects personal data of the sort that web browsers and servers typically make available, such as the IP address, the browser type, language preference, referring site, and the date and time of each visitor request. DataCite’s purpose in collecting these information is to better understand how DataCite’s visitors use its sites.

Legal basis for the processing of these data is Art. 6 No. 1 lit. f GDPR.

DataCite will not attribute these data to specific persons, and these data will not be combined with other data sources. After use for the above purposes, the data are erased by DataCite after seven days.

3. General Treatment of Personally-Identifying Information

Certain visitors to DataCite’s sites can choose to interact with DataCite in ways that require DataCite to gather personal data. The amount and type of information that DataCite gathers depends on the nature of the interaction.

For example, we ask visitors who send a message to our Help Desk, requesting assistance, to provide an email address. Those who engage in transactions with DataCite – by becoming a member and using our DOI services, for example – are asked to provide additional information, including as necessary the personal and financial information required to process those transactions. In each case, DataCite collects such information only insofar as is necessary or appropriate to fulfill the purpose of the visitor’s interaction with DataCite. DataCite does not disclose personal data other than as described in the Protection of Information section below. Visitors can always refuse to supply personal data, with the caveat that it may prevent them from engaging in certain activities.

For more information, please read the following sections on data processing, in which further details are provided.

4 Cookies

4.1 General Information

When you use our website, cookies are also stored on your computer. Cookies are small text data files which are stored on your hard drive and attributed to the browser you are using and with which the place which sets the cookie (in this case, us) receives certain information. Cookies cannot execute any programs or transfer viruses to your computer. They serve the purpose of making the internet offering in general more user-friendly and effective.

We use so-called technically necessary cookies on our website. Technically necessary cookies are cookies that are necessary for our website to function correctly. They help to make our website usable by enabling basic functions such as page navigation and access to secure areas of the website.

You can also prevent the storage of cookies with a corresponding setting in your browser software. If you prevent the storage of cookies, we wish to point out that you may not be able to fully use this website.

If you agree, technically not necessary cookies will be used in context with the use of Google Analytics. You will find more detailed information on this in section 5.

4.2 Detailed information on the cookies used on this website

Name	Function	Expiry
Consent Cookie	Technically Necessary	365 days
Authentication Cookie	Technically Necessary	30 days
Google Analytics	Statistics	1 year

4.3 Legal basis

The legal basis for the use of technically necessary cookies is Art. 6 No. 1 lit. f GDPR.

If you have given your consent to the use of technically not necessary cookies, the legal basis for the use of these cookies is Art. 6 No. 1 lit. a GDPR. The consent can be revoked at any time with effect for the future.

5. Google Analytics

If you have given your consent, DataCite uses Google Analytics to analyze and optimize the use of the website. We use the obtained statistics to improve our offering and design it so that it is more interesting for you as the user.

Google Analytics employs so-called “cookies“, text files that are stored on your computer in order to facilitate an analysis of your use of the site. The information about your use of this website produced by the cookie is normally transmitted to and stored on a server of Google in the USA. Recipient of the collected data is Google. In the case of activation of IP anonymization on this website, however, your IP address is first abbreviated within the Member States of the European Union or in other member countries to the Convention on the European Economic Area. The full IP address is only transmitted to and stored on a server of Google in the USA in exceptional situations. At the instruction of the Operator of this website, Google will use this information to analyze your use of the website and compile reports about website activity.

The legal basis for the use of Google Analytics is Art. 6 No. 1 lit. a GDPR

You can revoke your consent at any time with effect for the future by preventing the storage of cookies with a corresponding setting in your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent the collection of the data produced by the cookie that relates to your use of the website (incl. your IP address) with regard to Google as well as the processing of these data by Google by downloading and installing a browser-Add-on available. . Alternatively to the browser add-on, especially for browsers on mobile devices, you can prevent the collection of your data by clicking on the following link: Opt-Out Cookie. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again. To prevent Google Analytics from collecting data across multiple devices, you must opt out on all devices.

We use Google Analytics with the expanded “_anonymizeIp()”. This results in IP addresses being further processed in abbreviated form so that a connection to an individual can accordingly be precluded.

In exceptional situations in which personal data are transmitted to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Information on the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, telefax: +353 (1) 436 1001. Terms and Conditions for Use: https://policies.google.com/terms?hl=en, overview of data privacy: https://policies.google.com/?hl=en&gl=de, as well as the data privacy statement: https://policies.google.com/privacy?hl=en&gl=de.

6. DataCite Members, Consortium Organizations & Repositories

If you become a member of DataCite or Consortium Organization, we ask for contact information (name and email and billing address) to fulfill our business obligations — contacts include service, technical, voting, and billing contacts. The service contact receives general information about service status and new services. The technical contact is notified of service changes and infrastructure outages. The voting contact receives information pertaining to DataCite’s governance duties; board elections, statute changes, and budget approval. The billing contact receives annual invoices for membership and DOI service fees. We log membership contact and billing information to our Customer Relationship Management (CRM) system, Salesforce. Salesforce fully complies with current privacy regulations.

Legal basis for processing personal data as a result of membership and the use of the DataCite´s DOI services is either Art. 6 No. 1 lit. b GDPR and Art. 6 No. 1 lit. f GDPR, as these are required for the fulfillment of the contract/membership with DataCite as well as for the use of the offered services. Furthermore, DataCite has a legitimate interest in the fulfillment of its duties towards its members. For the storage of invoice data also Art. 6 No. 1 lit. c GDPR applies as legal basis.

Depending on the type of DataCite services used, your organization contact may receive, notifications about training sessions, webinars, product testing, or news that will impact the use of DataCite services. Individuals may remove themselves from mailings by following the unsubscribe link provided in every DataCite email.

The legal basis for the processing of these data in order to contact a member or an organization is Art. 6 No. 1 lit. a GDPR.

7. Fabrica

Fabrica is DataCite’s service used by DataCite members to create and assign DOIs and associated metadata. The service relies on cookies for use. Fabrica is not a public-facing service and those using Fabrica must have an account. Fabrica also collects information about users of the service, including names and emails. This information is used to administer the service.

The legal basis for the processing of these data is Art. 6 No. 1 lit. b, f GDPR.

8. Support Site

DataCite maintains a support site to help the DataCite community understand and use our services, https://support.datacite.org/. All of DataCite’s support content is on the readme.io platform. readme.io fully complies with current privacy regulations.

9. DataCite’s Metadata and Identifiers

As part of our services of registering DOIs, we also collect associated metadata. All of DataCite’s metadata and identifiers registered with DataCite are made available for reuse without restriction through our public APIs and search interfaces. We are open and transparent about the use of our identifiers and metadata.

DataCite also collects personal data like Internet Protocol (IP) addresses for logged-in users. DataCite only discloses logged-in user and commenter IP addresses under the same circumstances that it uses and discloses personal data as described in the Protection of Information section below.

If you are a consumer of our metadata and identifiers and identify yourself in API queries using your account credentials, we will not store or use your email for any other purpose than technical troubleshooting and only if absolutely necessary. You may choose not to use your account credentials for API queries of public content, which won’t identify you at all. More information can be found in our REST API documentation. The legal basis for the processing of these data is Art. 6 No. 1 lit. b, f GDPR.

10. Using DataCite’s Help Desk

If you send a message to our Help Desk a “ticket” along with your email will be logged in our ticketing system, Frontapp. DataCite will only use contact information to resolve questions and any details provided during a support conversation are kept private. Frontapp fully complies with current privacy regulations.

11. Email Communications

DataCite uses email to communicate with DataCite members and users of our services. Email is either personal interaction or via mailing lists, using Campaign Monitor. Campaign Monitor fully complies with current privacy regulations. DataCite sends – on the legal basis of Art. 6 No. 1 lit. f) GDPR – occasional service updates that we believe will be useful to individuals that subscribe to our mailing lists.

Legal basis for processing personal data to send you our newsletter is Art. 6 No. 1 lit. a GPDR. Once you enter your contact information to Fabrica, DataCite will add your email to an appropriate mailing list for additional information. Individuals may remove themselves from mailings by following the unsubscribe link provided in every DataCite email sent via the mailing list. We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law.

12. Aggregated Statistics

DataCite may, with the visitors´ prior consent, collect statistics about the behavior of visitors to its website. For instance, DataCite may monitor the most popular pages, support articles, and blog posts on the sites. DataCite may display this information publicly or provide it to others. However, DataCite does not disclose personal data other than described in the Protection of Information section below.

Legal basis for processing personal data for statistical purposes is Art. 6 No. 1 lit. a GPDR.

13. Protection of Information

DataCite discloses personal data only to those of its employees, contractors, and affiliated organizations

1. that need to know that information in order to process it on DataCite’s behalf or to provide services available at DataCite’s websites, and
2. have agreed to comply with current privacy regulations

DataCite will not rent or sell personal data to anyone. Other than to its employees, contractors, and affiliated organizations, as described above, DataCite discloses personal data only in response to a court order or other governmental request, or when DataCite believes in good faith that disclosure is reasonably necessary to protect the property or rights of DataCite, third parties or the public at large.

DataCite takes all measures reasonably necessary to protect against the unauthorized access, use, alteration or destruction of personal data.

14. Your Rights

• According to the GDPR, you are entitled to the following rights against DataCite as a data subject: Right of access by the data subject (Art. 15 GDPR) In principle, you have the right to receive information on the points mentioned in Art. 15 GDPR. You also have the right to request a copy of your personal data in accordance with Art. 15 No. 3 GDPR.
• Right to rectification (Art. 16 and 17 GDPR) You have the right to have incorrect personal data corrected. In addition, you have the right to demand that your personal data is deleted if further processing is no longer necessary, if processing is unlawful or if you have withdrawn your consent.
• Each DataCite web page that is designed for the entry of personal data contains instructions explaining how you can update the personal data you provide or cancel any subscriptions you have with DataCite. You may send an e-mail to the Webmaster of the website through which you entered your personal data.
• Right to restriction of processing (Art. 18 GDPR) If the conditions in Art. 18 GDPR are met, you have the right to have the processing of your personal data restricted, i.e. to prevent further processing for the time being.
• Right to data portability (Art. 20 GDPR) Within the limits of Art. 20 GDPR, you have the right to receive your personal data in a machine-readable format in order to forward it or have it forwarded to another controller.
• Right to object (Art. 21 GDPR) If the processing of your personal data is based on Art. 6 No. 1 lit. e or f GDPR, you have the right to object to the processing if the further requirements of Art. 21 GDPR are met. You can require this by sending us an email at: info@datacite.org
• The exercise of these rights is in general free of charge.
• In addition, you are entitled to lodge a complaint regarding the handling of your personal data with a supervisory authority.

15. Privacy Policy Changes

The DataCite Privacy Policy goes into effect as of October 20, 2020. Although most changes are likely to be minor, DataCite may change its Privacy Policy from time to time, and at DataCite’s sole discretion. DataCite encourages visitors to frequently check this page for any changes to its Privacy Policy. Your continued use of this site after any change in this Privacy Policy will constitute your acceptance of such change.