Human Cell Atlas

Privacy Notice for Human Cell Atlas Register of Interest

This Privacy Notice explains what personal data is collected on registration for the specific service you are requesting, for what purposes, how it is processed, and how we keep it secure.

Note that this service collects personal data directly provided by the user, and also collects personal data from users that is provided by other organisations.

1. Who controls your personal data and how to contact us?

The Broad Institute and the Wellcome Sanger Institute are joint data controllers of your personal data on behalf of the Human Cell Atlas Project, an unincorporated research project without separate legal personality.

For the Broad Institute as data controller, contact details are:

The Office of the Chief Compliance Officer
Broad Institute
privacy@broadinstitute.org
Broad Institute, 415 Main Street, Cambridge, MA 02142, United States

For the Wellcome Sanger Institute as data controller, contact details are:

Head of Legal
gdpr@sanger.ac.uk
Wellcome Sanger Institute, Wellcome Genome Campus, Hinxton, Cambridgeshire, CB10 1SA, United Kingdom

2. Which is the lawful basis for processing personal data?

Your personal data is being processed on the basis that there is a legitimate interest to do so for the purpose of the Human Cell Atlas Project. You are providing the data for the purpose of registering with the project and, without the data, we will not be able to provide you access to the service or we will only be able to provide a subset of functionalities available within the service.

3. What personal data is collected from users of the service? How do we use this personal data?

We collect the following personal data from users of the service:

  • Name
  • Email address
  • Title
  • Country
  • Organisation
  • Organisational affiliation
  • Date and time of a visit to the service website

The data controllers will use your personal data for the following purposes:

  • To publicly publish information to facilitate scientific research
  • To characterize, connect and communicate with the community of HCA researchers, including to connect HCA researchers with interested third parties, to facilitate scientific research
  • To better understand the needs of the users and guide future improvements of the service

4. Who will have access to your personal data?

The personal data will be disclosed to:

  • Authorised staff in the data controller’s institutions acting on behalf of the Human Cell Atlas Project.
  • Authorised staff of Solve360, a CRM vendor working to maintain this website on behalf of the HCA Consortium
  • Certain limited information, including name, email and affiliation, may be disclosed openly on the web or to interested third parties (including partners, funders and technology vendors) for purposes of facilitating scientific research

5. Will your personal data be transferred to third countries (i.e. countries not part of EU/EEA) and/or international organisations?

Personal data is transferred to the following organisation based in third countries and that provide the service on behalf of the Human Cell Atlas Project:

Broad Institute
Broad Institute, 415 Main Street, Cambridge, MA 02142, United States

Wellcome Sanger Institute
Wellcome Genome Campus, Hinxton, Cambridgeshire, CB10 1SA, United Kingdom

6. How long do we keep your personal data?

Any personal data not directly obtained from you will be retained even after the service is no longer running.

7. The joint Data Controllers provide these rights regarding your personal data

You have the right to:

  1. Not be subject to decisions based solely on an automated processing of data (i.e. without human intervention) without you having your views taken into consideration.
  2. Request at reasonable intervals and without excessive delay or expense, information about the personal data processed about you. Under your request we will inform you in writing about, for example, the origin of the personal data or the preservation period.
  3. Request information to understand data processing activities when the results of these activities are applied to you.
  4. Object at any time to the processing of your personal data unless we can demonstrate that we have legitimate reasons to process your personal data.
  5. Request free of charge and without excessive delay rectification or erasure of your personal data if we have not been processing it respecting the data protection policies of the respective controllers.

Please note that rights 4 and 5 are only available whenever the processing of your personal data is not necessary to:

  • Comply with a legal obligation.
  • Perform a task carried out in the public interest.
  • Exercise authority as a data controller.
  • Archive for purposes in the public interest, or for historical research purposes, or for statistical purposes.
  • Establish, exercise or defend legal claims.