Privacy policy
Draft pending review by Ibercivis's data-protection contact. Fields in [[brackets]] must be completed.
Data controller
Fundación Ibercivis — [[registered address]], [[tax ID / CIF]]. Contact: [[contact email]]. Data protection contact / DPO: [[DPO email]].
What we process and why
- Public gallery (data.ibercivis.es): no account and no cookies. The web server keeps standard access logs (including IP address) to operate and secure the service — legal basis: legitimate interest.
- Work environment (JupyterHub): to sign in we use GitHub OAuth. We receive your GitHub username and the email associated with your account, to create and identify your workspace — legal basis: performance of the service you request. We also keep session cookies (strictly necessary) and server logs.
- Files you create in your workspace are stored on the server so you find them on your next visit.
Retention
Access logs: [[retention period]]. Accounts and workspaces: kept while the account is active; inactive accounts and their data may be removed after [[retention period]].
Who has access
Data is hosted on Ibercivis-operated infrastructure. Authentication relies on GitHub (see GitHub's own privacy statement). We do not sell data or use it for advertising.
Your rights
You may request access, rectification, erasure, restriction, portability and objection regarding your personal data by writing to [[contact email]]. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).