Establish Privacy Statement for jbrowse2

We are committed to protecting user privacy when they browsing the jbrowse website. A privacy statement should be created and posted on the website.

Consider GDPR compliance
In the User documentation, we should be clear what is tracked and that the privacy statement should be updated to reflect local privacy regulations.

Draft idea:

JBrowse is committed to respecting and protecting your privacy whether you are browsing for information or collaborating with us through electronic channels. This privacy statement informs you about how our organization collects, stores and uses your personal data that you provide when you use our website or contact us. The EU General Data Protection Regulation (GDPR) requires that we are 100% transparent in how we use your data. This statement explains our current practices regarding what information JBrowse may collect, use, and secure your personal information when you visit our websites.

Questions about this policy can be directed via email to our User/HelpDesk.

Who controls your personal data and how to contact us? The JBrowse Data Protection Officer's contact details are: JBrowse Data Protection Officer  Email: help@jbrowse.org  Address: Univeristy of Berkley………

What data do we collect? When you browse or download information from JBrowse websites, our servers automatically collect limited amounts of standard information for traffic monitoring and statistical purposes. The information is analyzed for operational trends, performance, and for ways to improve our sites, and other purposes of day-to-day running of the JBrowse resource and underlying infrastructure. We collect the following standard types of information: (not relevant since we do not use apache logging)

Website
- Internet Protocol (IP) addresses of the computers being used to access our sites
- operating systems and the types and versions of browsers used to access our sites.
- dates and times users access our sites
- amount of data transmitted
- pages visited
- keywords users enter into our search engine
- names and sizes of files requested
Gitter/Help Desk
- Name
- Email address

The data controller will use your personal data for the following purposes:

To provide the user access to the service
To answer questions from users
To better understand the needs of the users and guide future improvements of the service
To create anonymous usage statistics
To conduct and monitor data protection activities
To conduct and monitor security activities

Who will have access to your personal data? Personal data will only be disclosed to authorized staff at the institutions that form the JBrowse Consortium.

Will your personal data be transferred to third countries (i.e. countries not part of EU/EAA) and/or international organisations? There are no personal data transfers to international organisations outside of the JBrowse Consortium. JBrowse uses Google Analytics as a third-party analytics service to collect information about website performance and how users navigate through and use our sites to help us design better interfaces. We do not use Google Analytics to track you individually or collect personal data.

How long do we keep your personal data? Any personal data directly obtained from you will be retained as long as the service is live, even if you stop using the service. We will keep the personal data for the minimum amount of time possible to ensure legal compliance and to facilitate internal and external audits if they arise.

What are the privacy policies for other linked websites? Our website contains links from and to other websites. However, our privacy policy applies to only our website and not other linked websites. So, if you click on a link to other websites, you can read their privacy policy.

What are your rights regarding your personal data? We would like to make sure that you are fully aware of your data protection rights. Every user is entitled to the following rights:

Not be subject to decisions based solely on an automated processing of data (i.e. without human intervention) without you having your views taken into consideration.
Request at reasonable intervals and without excessive delay or expense, information about the personal data processed about you. Under your request we will inform you in writing about, for example, the origin of the personal data or the preservation period.
Request information to understand data processing activities when the results of these activities are applied to you.
Object at any time to the processing of your personal data unless we can demonstrate that we have legitimate reasons to process your personal data.
Request free of charge and without excessive delay rectification or erasure of your personal data if we have not been processing it respecting the data protection policies of the respective controllers.

It must be clarified that rights 4 and 5 are only available whenever the processing of your personal data is not necessary to:

Comply with a legal obligation.
Perform a task carried out in the public interest.
Exercise authority as a data controller.
Archive for purposes in the public interest, or for historical research purposes, or for statistical purposes.
Establish, exercise or defend legal claims.

Will you make changes to our privacy statement? Our organization reviews and updates its privacy policy on a regular basis. We may change our data privacy practices and place any updates on this privacy policy page.

How to contact us? If you have any queries related to our data privacy practices or this privacy policy, feel free to contact us at our user/helpdesk.

GMOD / jbrowse-components

Establish Privacy Statement for jbrowse2 #1166