Network Entity Reputation Database - Privacy policy
Privacy policy for personal data retrieved via eduGAIN:
- Name of the service
- NERD
- Description of the service
- Network Entity Reputation Database
- Data controller and a contact person
- CESNET, contact via bartos@cesnet.cz
- Jurisdiction
- CZ Czech Republic
- Personal data processed
- Following data is retrieved from your Home Organisation:
- Unique user identifiaction (eduPersonPrincipalName attribute) [Mandatory]
- Full name (cn or displayName attribute) [Optional]
- Email address (mail attribute) [Optional]
User ID is used throughout the system to identify the user.
Name and email address are needed only to review a request for a new account and are not stored in the system.
- Purpose of the processing of personal data
-
The IP and referrer addresses of all web page visitors are stored in the web server log files for statistical purposes and for accountability (e.g. in case of misuse of the system).
For authenticated users, NERD receives the personal data mentioned above from your Home Organization.
This personal data is used to identify users, to control access to individual data elements and potentially to limit number of database queries per user.
- Third parties to whom personal data is disclosed
- No personal data will be released to any third partiy. Aggregated and anonymized data may be published.
- How to access, rectify and delete the personal data
- Contact the contact person mentioned above.
- Data retention
- User account and associated personal data is deleted on request of the user or if the user hasn't used the service for five years.
- Data Protection Code of Conduct
- Personal data will be protected according to the Code of Conduct for Service Providers, a common standard for the research and higher education sector to protect the user's privacy.