Data collected automatically : Server logs
What & how?
Our server logs automatically the IP address of every request sent to our server.
- a request is sent every time your browser downloads something new from our server, whether it’s the webpage, its stylesheets, images, fonts, etc
- your IP address is the public address, on the internet, of the modem through which you get online. With many Internet Service Providers, this address changes regularly.
This data is used in order to debug technical issues, and to mitigate abuse.
Where & who?
This data is securely stored on our servers, for not longer than 30 days.
It is only accessible to iMAL employees involved with the administration of the website, and to the following external parties:
- our hosting service provider
- our website developers
Data collected automatically : Analytics
What & how?
This site uses Matomo to analyse traffic. Matomo is open source and self-hosted, which means that unlike Google Analytics, no tracking data is sent to a third party. In addition, we have set up the version of Matomo installed on our server to be privacy friendly:
- Tracking cookies are disabled
- IP addresses are anonymised; we are only keeping half of the full IP address to try differentiating visitors, but without identifying them
What Matomo still tracks:
- Visitors numbers & page views
- Where our visits come from (direct, search engines, social networks)
- The hardware (desktop, phone, model, resolution) and software (OS, browser) used to visit our website
If you wish to opt-out from that tracking, you can do it below:
We use visit statistics to improve our communication, and for reporting to our subsiding authorities.
Where & who?
This data is securely stored on our servers.
It is only accessible to iMAL employees involved with website administration & communication.
The data you provide us
What & how?
We collect and process personal data you provide us when you:
- register to our newsletter
- subscribe to an event (workshop, symposium, …) or to our FabLab
This data is used to
- e-mail you with updates about our activities
- process and manage your registration
Where & who?
- When you subscribe to our newsletter, your e-mail address is automatically transferred to the mailing service of our hosting service provider. It is only accessible to iMAL employees managing our mailing list (communication & IT).
- When you register through one of our registration form, the information you provide is stored securely in our website database. It is only accessible to iMAL employees involved with the operation of the website. A copy of this information may be sent in the form of an e-mail notification to iMAL employees managing subscriptions. iMAL uses a third party service for its imal.org e-mails.
- If it is stated specifically on the registration form, some of the informations you provide may be transferred to the third party involved directly in the event your registered to. For example, participants profiles can be sent to the workshop leader in order to better adapt the workshop content to its audience.
The info you provide us will never sold or traded. It’s never shared with other parties for purposes unrelated to what they have been collected for (such as advertising).
Anonymised statistics (for example attendance or diversity of the audience) can be derived from the information you provide us. These can be shared, for reporting purposes, with our subsidising authorities.
More details concerning the collection or processing of personal data may be requested at any time. Please see the contact information at the beginning of this document.
What are your data protection rights?
iMAL would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
- The right to access – You have the right to request for copies of your personal data.
- The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request to complete the information you believe is incomplete.
- The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
- The right to restrict, or object to processing – You have the right to object to processing of your personal data, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, contact us. Please see the contact information at the beginning of this document.
Privacy policies of other websites
If you read something that rubs you the wrong way, or if you think of something that should be added, please get in touch at email@example.com
We won’t amend this document for any specific users or use case, but if your proposed changes apply to all of our users, we'll be happy to update it for everyone. Scroll to the bottom to see the history so far.
Making a Complaint
We take any complaints we receive about this very seriously. We encourage people to bring it to our attention at firstname.lastname@example.org if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.
If you want to make a complaint about the way we have processed your personal information, contact your national Data Protection Authority : https://edpb.europa.eu/about-edpb/board/members_en
- 6 November 2019: document created
This document is partly inspired by https://gdpr.eu/privacy-notice and https://matrix.org/legal/matrix-org-shop-privacy-notice