Privacy Policy for DSpace Website

Lyrasis (“Company” or “We” or “Us”), as the organizational home for programs (“Organizational Home”) entitled ArchivesSpace, DSpace, Fedora, VIVO, CollectionSpace, and/or any other programs for which Lyrasis Community Supported technologies serves as the Organizational Home (each a “Program” and collectively, “Programs”), respects your privacy and is committed to protecting it through our compliance with this policy.

This policy describes the types of information we may collect from you or that you may provide when you visit this website or any Program website that references this policy (our “Websites”) and our practices for collecting, using, maintaining, protecting, and disclosing that information. This policy also describes your rights and choices regarding your personal data and how to exercise those rights.

This policy applies to information we collect:

•  On our Websites;
• In any forms completed by you on our websites; or
• In email, text, and other electronic messages between you and our Websites.

It does not apply to information collected by:

• us offline or through any other means, including on any other website operated by Company or any third party (unless such website belongs to a Program); or
• any third party, including through any application or content (including advertising) that may link to or be accessible from or on our Websites (unless such third party operates a Program).

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Websites. By accessing or using our Websites, you agree to this policy. This policy may change from time to time. Your continued use of our Websites after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Our Websites are not intended for children under 13 years of age. No one under age 13 may provide any personal data to or on our Websites. We do not knowingly collect personal data from children under 13. If you are under 13, do not use or provide any information on our Websites or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or username you may use. If we learn we have collected or received personal data from a child under 13 without verification of parental consent, we will delete that information.

We collect several types of information from and about users of our Websites, including information:

• by which you may be personally identified, such as name, postal address, e-mail address, telephone number, professional title, or any other identifier by which you may be contacted online or offline; and/or
• about your internet connection, the equipment you use to access our Websites and usage details.

We collect this information:

• directly from you when you provide it to us.
• automatically as you navigate through the site. Information collected automatically may include usage details, IP addresses, and information collected through cookies, web beacons, and other tracking technologies; and/or
• from third parties, for example, our business partners or Program coordinators.

The information we collect on or through our Website may include: 

• Information that you provide by filling in forms on our Website. We may also ask you for information when you report a problem with our Website.
• Records and copies of your correspondence (including email addresses), if you contact us.
• Your responses to surveys that we might ask you to complete for research purposes.‌

As you navigate through and interact with our Websites, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

• Details of your visits to our Websites, including traffic data, location data, logs, and other communication data and the resources that you access and use on our Websites.
• Information about your computer and internet connection, including your IP address, operating system, and browser type.

The information we collect automatically is statistical data and may include or be construed to include personal data. We may maintain it or associate it with personal data we collect in other ways or receive from third parties. It helps us to improve our Websites and to deliver a better and more personalized service, including by enabling us to:

• Estimate our audience size and usage patterns.
• Store information about your preferences, allowing us to customize our Websites according to your individual interests.
• Speed up your searches.
• Recognize you when you return to our Websites.

The technologies we use for this automatic data collection may include:

• Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Websites.
• Flash Cookies. Certain features of our Websites may use local stored objects (or Flash cookies) to collect and store information about your preferences and navigation to, from, and on our Websites. Flash cookies are not managed by the same browser settings as are used for browser cookies.
• Web Beacons. Pages of our Websites and our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).‌

We use information that we collect about you or that you provide to us, including any personal data:

• To present our Websites and its contents to you.
• To provide you with information, products, or services that you request from us.
• To fulfill any other purpose for which you provide it.
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
• To notify you about changes to our Websites or any products or services we offer or provide though it.
• To notify you about updates to the software and membership model of certain Programs.
• In any other way we may describe when you provide the information.
• For any other purpose with your consent.

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction. We may disclose personal data that we collect or you provide as described in this privacy policy:

• To contractors, service providers, and other third parties we use to support our business and who are bound by contractual obligations to keep personal data confidential and use it only for the purposes for which we disclose it to them.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Company’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by Company about our Websites’ users is among the assets transferred.
• To fulfill the purpose for which you provide it.
• For any other purpose disclosed by us when you provide the information with your consent.

We may also disclose your personal data:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce or apply our Terms of Use and other agreements, including for billing and collection purposes.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers, or others.

• Access, Correction and Portability. You may reasonably access the personal data relating to you. You also have the right to request to correct incomplete, inaccurate or outdated personal data. To the extent required by applicable law, you may request the transmission of the personal data you have provided to Us to you or another company.
• Objection. You may object to any uses or disclosures of your personal data that are not (i) required by law, (ii) necessary for the fulfillment of a contractual obligation or (iii) required to meet a legitimate need of Company. If you do object, We will work with you to find a reasonable accommodation.
• Deletion. You may also request the deletion of your personal data, as permitted under applicable law. This may apply, for instance, where this information is outdated or the processing is no longer necessary or is unlawful; where you withdraw your consent to our processing based on such consent; or where we determine we should accommodate an objection you have raised to our processing. However, sometimes We may need to retain your personal data. For example, this may occur in situations in which we need to comply with our legal obligations, for the establishment, exercise, or defense of legal claims, or in some cases, to fulfill the purposes for which your information was gathered.
• Restriction of Processing. You may request that We restrict processing of your personal data while we are processing your request or complaint pertaining to (i) the accuracy of your personal data, (ii) the lawfulness of the processing of your personal data, or (iii) our legitimate interests in processing this information. You may also request that we restrict processing of your personal data if you wish to use the personal data for litigation purposes.
• Withdraw your Consent. You may withdraw any consent you previously gave us regarding the processing of your personal data at any time. Such withdrawal will not affect the lawfulness of the processing before your consent was withdrawn.

You may exercise these rights free of charge unless the request is unfounded or excessive, for instance because it is repetitive. In some situations, we may refuse to act or may impose limitations on your rights, as permitted by applicable law. Before We are able to provide you with any information or correct any inaccuracies, We may ask you to verify your identity and/or provide other details to help us respond to your request. We reserve the right not to respond to requests generated through third-party applications or automated processes without direct validation of the requests by data subjects using the resources provided by Company for the exercise of these rights as described in this policy.

To exercise your rights, please contact us using the information provided below. In all cases, you have a right to file a complaint with a data protection authority in the country of your habitual residence, your place of work or where you consider that your privacy rights have been infringed.

It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users’ personal information, we will notify you by email to the primary email address specified in your account or through a notice on the Website home page. The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Website and this privacy policy to check for any changes.

We take care to guard the security of your personal data. We apply appropriate physical, technical and organizational measures that are reasonably designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access, and against all other unlawful forms of processing. We maintain a comprehensive information security program that is proportionate to the risks associated with the processing. We use enhanced security measures when processing any sensitive information, such as by employing encryption technology when collecting or transferring credit card information.

We keep your personal data for as long as necessary to fulfill the purposes outlined in this policy, to adhere to our business guidelines, and for any period as legally required or permitted by applicable law.

If you have questions or complaints in relation with this policy, or to exercise your privacy rights described above, please contact us via email at:  lyrasisprivacy@lyrasis.org .