GDPR privacy notice
Information under the EU General Data Protection Regulation (Regulation (EU) 2016/679).
Controller
Open Multi Lab (company name and address to be added).
Personal data we process
Full name, email address, institution, field of work, account data and usage logs.
Purposes and legal bases
- Reviewing membership applications and managing accounts: performance of a contract (Art. 6(1)(b) GDPR)
- Providing the service and keeping it secure: legitimate interest (Art. 6(1)(f) GDPR)
- Responding to contact requests: legitimate interest (Art. 6(1)(f) GDPR)
- Meeting legal obligations: legal obligation (Art. 6(1)(c) GDPR)
Recipients and international transfers
Data may be shared with infrastructure providers needed to deliver the service and, where required by law, with competent authorities. Where data is transferred outside the European Economic Area, appropriate safeguards such as the European Commission's Standard Contractual Clauses (Art. 46 GDPR) are used.
Retention
Data is kept only as long as needed for the purposes above or as required by law, and then deleted.
Your rights
You have the right to access, rectify and erase your data, to restrict or object to processing, and to data portability (Art. 15–21 GDPR). Where processing is based on consent, you may withdraw it at any time. You also have the right to lodge a complaint with a data protection supervisory authority.