Informations

Personal data

Document updated on May 29th, 2024

Lire la version française
Das Dokument auf Deutsch lesen

 

OpenEdition is a digital publishing platform for scientific communication in the humanities and social sciences. It was created by the OpenEdition Center unit constituted by the French National Centre for Scientific Research (the "CNRS"), the Aix-Marseille University ("AMU"), Avignon University and the School of Advanced Studies in the Social Sciences (together referred to as the "OpenEdition Center") with the aim of promoting the development of scientific communication and digital publishing in the humanities and social sciences as well as all related disciplines.

OpenEdition's tasks revolve around the development of open access digital publishing and research & development on issues related to the platforms it implements (OpenEdition Journals, OpenEdition Books, Calenda, Hypothèses): digital publishing, digital humanities, digital economy, standardization, interoperability, understanding of practices, etc.

In this context, OpenEdition is required to process personal information about users. The purpose of this page is to inform you of the characteristics of the processing of your personal data, as well as your rights in this regard as a user of the OpenEdition Center website and platforms ("the Platforms").

The Director of the OpenEdition Center unit, located at the Technopôle de Château Gombert, 22 rue John Maynard Keynes in Marseille, is the controller of the processing carried out for provision of the Platform content (the "Data Controller").

In her capacity as data controller, she processes data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter the "GDPR") and Law No 78-17 of 6 January 1978 on data protection (hereinafter the "French Data Protection Act").

The CNRS data protection officer can be contacted for any questions at: CNRS – SPD, 2 rue Jean Zay, 54500 Vandoeuvre-lès-Nancy, or by email: dpd.demandes@cnrs.fr.

 

1. The purposes of processing

The personal data of Users is collected for the following purposes:

1.1. Technical management of the site

Technical management of the site: connection data are collected for technical management, site security, attendance statistics.

1.2. Hosting comments on the Hypotheses platform: comments on Hypotheses

When you write a comment on a Hypotheses blog, your surname, first name and IP address are recorded on the platform to allow identification of the author of the comment.

In addition, your IP address is used by the Akismet service for detecting spam in comments. Akismet is an external service whose privacy policy can be found here: https://automattic.com/privacy-notice/.

1.3. "Suggest purchase" feature on OpenEdition Books

The "suggest purchase to your library" feature uses your surname, first name and email address. These data are used when validating the form for sending the message. They are not kept on our servers.

1.4. Newsletters and mailing lists

Personal data are collected and processed for the management of newsletters and mailing lists. Your email, and in some cases your surname, first name and home institution are recorded when you register. They are kept as long as one of your subscriptions to a list is effective. If you unsubscribe from all lists, your data will be deleted within 30 days.

1.5. Cookies

Lastly, when visiting an OpenEdition website, information may be stored in cookies registered in the User's browser. See the dedicated section: https://www.openedition.org/37235.

2. Legal basis for processing

Data processing is based on the legitimate interest of the data controller who offers secure access to the content of the platform and ensures the management of newsletters.

Data processing in connection with the security of the site is based on the legal obligation of OpenEdition Center in particular for the removal of illegal content (Law No.2004-575 of 21 June 2004 on trust in the digital economy), and for the search for traces in the event of computer incidents.

3. Recipients of personal data

The recipients of the data are, according to their needs:

  • The OpenEdition Center teams, those in charge of information system security and the general management of the bodies comprising OpenEdition Center, in particular to organise their defence in the event of a dispute, an inspection or proceedings initiated by a supervisory authority.
  • People with an administrator account on a research log on which you have left a comment, the supervisory authorities.

Personal data such as connection logs may be reused for scientific research purposes in accordance with the regulations on the protection of personal data, unless individuals lodge an objection with the data controller.

4. Security and confidentiality of data

The Data Controller undertakes to take all necessary measures to preserve the security and confidentiality of the data and in particular, prevent unauthorised third parties from accessing it, whether it is altered, disclosed or destroyed.

The information system security policy applied is based on the ISSP of the CNRS (resulting from the State ISSP).

5. Data retention periods

The retention period for user data shall depend on the purpose for which they were collected.

For the technical management of the site, data are retained for a maximum of three years.

For the hosting of comments on the Hypotheses Platform, the retention period is based on the lifespan of the Blog.

6. Rights of Users

In accordance with the regulations on the protection of personal data in force, Users have, at any time, a right of access, modification, rectification or deletion of the personal data concerning them. They may also object to the processing of personal data concerning them or request the limitation of processing. In addition, they have the right to request to receive their personal data in a structured and standardised format. They can decide to organise the fate of their data after their death by appointing a person to carry out their directives.

Users of the sites and Platforms are informed that the exercise of their right of objection may result in the inaccessibility of their user account or its deletion, their personal data being essential to the management of their user account by the Data Controller. Such exercise may also have an impact on the provision of the services offered by the Platform.

The User is informed that they may exercise the rights listed above with the Data Controller at the address: privacy [at] openedition.org.

They can also contact the CNRS data protection officer using the following contact details:

  • Postal address: CNRS SPD ‐ 2 rue Jean Zay – 54 500 – Vandoeuvre lès Nancy.
  • Email address: dpd.demandes[at]cnrs.fr.

Users are also informed of their right to lodge a complaint with a supervisory authority, and in particular in France, with the CNIL.