Privacy policy
Name of the Service
Virtual Imaging Platform (VIP).
Description of the Service
VIP provides services for the distributed execution of scientific applications in the field of medical imaging at https://vip.creatis.insa-lyon.fr
Data controller and a contact person
INSA de Lyon, Email : dpo@insa-lyon.fr
Jurisdiction and supervisory authority
France, Commission Nationale de l'Informatique et des Libertes - CNIL.
General Data Protection Regulation (GDPR) provides a framework for the processing of personal data on the territory of the European Union.
Personal data processed and the legal basis
A. Personal data retrieved from EGI Check-in (when logging in with EGI Check-in)
- Name
- Family name
- Email
- Voperson_verified_email
B. Personal data gathered from VIP
- Name
- Family name
- Email
- Institution
- Country
- User activity on VIP (login, executions, files transfers)
Purpose of the processing of personal data
The email is used for sharing information with the users.
Information such as "country" and "institution" can be used for statistics.
Logs (user activity on VIP) can be used for security reasons.
Third parties to whom personal data is disclosed
No personal data is disclosed to third parties.
Statistics (deprived of any personal information) are shared with parterns, stakeholders and the community.
Technical stuff managing the various services used within VIP may have access to some of the pieces of information described in sections A and B.
How to access, rectify and delete the personal data and object to its processing
Contact VIP support team at vip-support@creatis.insa-lyon.fr
Data retention
1. Personal data. Personal data requested upon registration (account creation in VIP) is handled according to RGPD rules and French laws and regulations (https://www.cnil.fr/professionnel).
All personal data is deleted upon user request or if the email address associated with the VIP account is no longer valid (VIP account suppression).
2. Data uploaded by users on the platform. VIP is not intended to be used as a long-term storage platform. Once their project has concluded, VIP users are responsible for the suppression
of the data they may have uploaded on VIP. Data uploaded on VIP may be stored and transferred on machines distributed worldwide without warranty of any kind.
Data Protection Code of Conduct
General Data Protection Regulation (GDPR) provides a framework for the processing of personal data on the territory of the European Union.