Last updated: Oct 19, 2021.
Summary of key changes in this Oct 19, 2021 update:
We no longer use Google Analytics for web analytics. Instead, we have transitioned to use the privacy-friendly Plausible service to collect basic analytics about our Site traffic to understand how it’s used. As a result, we collect less personal data about you.
- This is a free service we provide in order to advance biomedical research.
- The data made available through the Site is not personally identifiable.
- We use the privacy-friendly Plausible service to collect basic analytics about our Site traffic (e.g. the number of visitors and page views) so we know how it’s being used. This helps us improve the Site as well as get a sense of its impact.
Data Controllers and Contracting Parties
Data We Collect
Cellxgene is a tool that enables fast visualizations of curated single-cell transcriptomics datasets. It takes data submitted by researchers (gene expression matrices that indicate counts of how often genes are expressed in certain cell types and metadata detailing how those matrices were generated) and helps you visualize it for faster analysis, exploration, and – hopefully – insight.
This data is not personally identifiable.
Log.When you access or use the Site (whether on your computer or on a mobile device), we gather certain information automatically and store it in log files. This information includes IP addresses, the Internet Site Provider, referring pages, date/time stamps, clickstream data, and duration of time spent on the Site. We collect this data pursuant to our legitimate interests in understanding how Visitors use our Site and improving our Site.
Device.In addition to log data, we collect information about the device you’re using to access the Site; this includes the type of device, browser type, and operating system that helps us understand when something goes wrong. We collect this data pursuant to our legitimate interests in improving our Site.
Cookies and Other Similar Technologies.For certain users that need to log into the cellxgene portal to publish data, we use essential cookies (small text files sent by your computer each time you access the Site that are unique to your account or your browser) to enable that use. For web analytics, we do not use Google Analytics. Instead, we use the privacy-friendly Plausible as our website analytic tool. Learn more about Plausible’s data and privacy practices here.
Data You Provide To Us.We collect certain information from you when you provide it to us directly. Specifically, this includes data you submit for display in cellxgene (ex: single-cell .h5ad matrix files), data you provide you us as part of submission or registering for an account (ex: name and email address), as well as if you contact us for support or with information about a dataset via email. This information is necessary in order to create your account and provide you with access to the services we offer on the Site.
Data From Your Browser or Device.Whenever you use any online service, certain information gets created and logged automatically; the same is true when you access or use the Site. Here’s what we collect:
How We Use Your Data
CZI does not sell, rent, or lease your personal data to others. We use your data for the following business purposes only:
Site.We use the information we collect to provide the Site, and maintain and improve the Site, including understanding the content that Visitors find valuable.
Communications.We may also use your information to respond to an email from you, and to engage with you about a dataset you wish to share.
Aggregate Insights.We use the privacy-friendly Plausible service to produce and share aggregated insights that do not identify you. For example we may receive from Plausible statistics about the location of our Visitors, and how many Visitors engage with the Site on a monthly basis. These aggregated insights are not personally identifiable.
How We Share Information
Except in the instances listed below, we will not disclose your personal information to others unless you consent to it, nor will we ever sell your personal information to advertisers or other third parties. However, we share your information in the following ways:
Legal and Safety Reasons.We may disclose information if we believe in good faith that it’s necessary (a) in connection with any legal investigation; (b) to comply with relevant laws or to respond to subpoenas or warrants served on us; (c) to protect or defend our rights or property; and/or (d) to investigate or assist in preventing any violation of the law.
Choices and Rights
Rights.You have the following rights with respect to the personal data we have about you:
Delete data.You can ask us to erase or delete all or some of your personal data.
Change or correct personal data.You can also ask us to change, update or fix your data in certain cases, particularly if it’s inaccurate.
Object to, limit, or restrict use of personal data.You can ask us to stop using all or some of your personal data (e.g., if we have no legal right to keep using it) or to limit our use of it (e.g., if your personal data is inaccurate or unlawfully held).
Right to access and/or take your personal data.You can ask us for a copy of your personal data in machine-readable form.
The right not to be discriminated against.CZIF will not discriminate against you in any manner for exercising any of the above rights with respect to your personal data.
- Contact us at email@example.com if you have questions or would like to exercise any rights you have under applicable law to control your personal data. If you wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority.
Retention and Deletion.
We retain your personal data as needed to provide the Site. This includes data you provided to us and data generated or inferred from your use of the Site.
CZIF is based in the United States; when you engage with the Site, you are sending personal data into the United States which may have different data protection rules than those of your country. We process data both inside and outside of the United States.
Our Legal Bases.
We will collect, use and share your personal data only where we have a legal right to do so. This section explains our legal bases for processing personal data, including under GDPR.
Consent.We rely on consent to engage in certain data collection activities, like data you choose to submit to us for display on cellxgene.
Legitimate Interests.We rely on legitimate interests to process the device and log data we collect when you use the Site. We process this data based on our legitimate interest in understanding how the Site is being used so we can improve it and have a sense of its impact, and your legitimate interest in accessing the Site.
Contract.We rely on contract where processing is necessary for the performance of a contract with you (e.g. to make the data you submitted to us publicly available via cellxgene).
Where we rely on consent, you have the right to revoke your consent and where we rely on legitimate interests, you have the right to object by emailing us at firstname.lastname@example.org. If you have any questions about the lawful bases on which we collect and use your personal data, please contact our Data Protection Officer via email at GDPR-REP@chanzuckerberg.com.
Other Important Information
Security.Security of personal data is important to us. We implement security safeguards designed to protect your personal data, including reasonable administrative, technical and physical safeguards to protect that personal data from unauthorized access, use, alteration and destruction. Despite these efforts, we cannot guarantee that your data may not be accessed, disclosed, altered, or destroyed by a breach of any of our physical, technical, or administrative safeguards. Please notify us immediately at email@example.com if you become aware of any security issues relating to the Site.
Children.The Site is not designed or intended for children under 16. If we become aware that we have the information of such children collected through the Site, we will promptly delete it.
European GDPR Representative:
Bird & Bird GDPR Representative Services SRL
Avenue Louise 235
EUrepresentative.ChanZuckerberg@twobirds.comUK Data Protection Representative:
Bird & Bird GDPR Representative Services UK
12 New Fetter Lane
London EC4A 1JP