Data Protection Code of Conduct - Arkivum

Arkivum Data Protection Code of Conduct

 

Name of the service Arkivum Service
Description of the service Arkivum Service for long-term data archiving, digital preservation and online access to digital content.
Data controller and a contact person Chris Sigley, email: Hello@Arkivum.com.
Arkivum Ltd., 450 Brook Drive, Reading, RG2 6UU.
Jurisdiction England and Wales
Personal data processed A. The following data is requested from your Home Organisation:

  • your friendly user identifier in your Home Organisation (eduPersonPrincipalName attribute)
  • your persistent, non-reassigned, opaque identifier in your Home Organisation (eduPersonTargetedID attribute)
  • your email address (mail attribute)
  • your surname (sn attribute)
  • your first name (givenName attribute)
  • your full name (displayName attribute)
  • any Arkivum-specific entitlements (access rights) with a “https://arkivum.com/” prefix (eduPersonEntitlement attribute)

B. The following data is gathered from yourself:

  • details of your various interactions with the Arkivum UI and REST APIs whilst authenticated, as exposed to Administrators via the Audit Trail report (event type, file and entity identifiers, action and timestamp)
Purpose of the processing of personal data
  • enforcing access control policies and workflows
  • sending email notifications
  • service improvement and capacity planning
  • investigating technical problems
  • detecting misuse
Third parties to whom personal data is disclosed Personal data is not disclosed to third parties.
How to access, rectify and delete the personal data Contact the contact person above. To rectify the data released by your Home Organisation, contact your Home Organisation’s IT helpdesk.
Data retention As long as there is no lawful reason for retaining personal data it will be deleted on request of the user or if the user hasn’t used the service for two years.
Data Protection Code of Conduct Your personal data will be protected according to the Code of Conduct for Service Providers, a common standard for the research and higher education sector to protect your privacy.