The below information is effective starting January 27, 2022.
| Name of the service | Life Science Login (LS Login) |
| Description of the Service | Life Science Login carries out the authentication of users and manages and delivers their access rights and other relevant personal data to the services relying on it. |
| Data controller | Masaryk University General Information on MU Processing and Protection of Personal Data: https://www.muni.cz/en/about-us/official-notice-board/personal-data-protection |
| Data controller’s data protection officer | poverenec@muni.cz |
| Jurisdiction and supervisory authority | CZ Czech Republic, office for personal data protection |
| Personal data processed | LS Login gathers contact and identifying information, such as: name; email address; membership in the groups you are affiliated to; permissions and other information that defines your authorisation to access services; external identifiers from the login service you use, provided by your identity providers (e.g. unique identifier, affiliation). List of your personal data processed can be found on your profile page. If you are not registered with a LS Login yet, you will get the information during the registration process. |
| Purpose of the processing of personal data | LS Login processes your personal data to identify and authenticate you as a user of the services, and to manage your access rights and other personal data for the services. Processing of this kind of personal data is necessary for the performance of the contract between you and the LS Login. Your personal data is sent to a relying service based on your consent. The log files produced by the LS Login components will be used only for administrative, operational, accounting, monitoring and security purposes. Personal data of this kind are processed based on legitimate interest of the LS Login provider. |
| Third parties to whom personal data is disclosed | LS Login will release your personal data to the services you are using through the LS Login authentication. LS AAI may transfer your personal data to service providers based in the countries outside the EU and EEA following your explicit consent. LS Login service may use third party services (personal data processors) for the LS Login service operation. Current list of the processors is: GEANT EGI.eu The logged information may be disclosed to other authorised participants via secured mechanisms, only for the same purposes and only as far as necessary to provide the services, usually done as a part of security and operational incident handling. |
| How to access, rectify and delete the personal data and object to its processing | Go to your profile page or contact the Data Protection Officer above. To rectify the data released by your home organisation, contact your home organisation’s IT helpdesk. |
| Data retention | Your personal data is deleted on request or if you have not logged in to LS Login service for 120 months. The operational logs and related information is kept independently in order to guarantee the security of the infrastructure and its optimisation |
| Data Protection Code of Conduct | NA |