Last updated: December 15, 2022.
- This is a free service we provide in order to advance biomedical research.
- The data made available through the Site is not personally identifiable.
- We use the privacy-friendly Plausible service to collect basic analytics about our Site traffic (e.g. the number of visitors and page views) so we know how it’s being used. This helps us improve the Site as well as get a sense of its impact.
Data Controllers and Contracting Parties
Data We Collect
Cellxgene is a tool that enables fast visualizations of curated single-cell transcriptomics datasets. It takes data submitted by researchers (gene expression matrices that indicate counts of how often genes are expressed in certain cell types and metadata detailing how those matrices were generated) and helps you visualize it for faster analysis, exploration, and – hopefully – insight.
This data is not personally identifiable.
Data You Provide To Us.We collect certain information from you which may include identifiers, professional or employment-related information, and information from survey responses when you provide it to us directly. Specifically, this includes data you submit for display in CELLxGENE (ex: single-cell .h5ad matrix files), data you provide us as part of a submission or registering for an account (ex: name and email address), as well as if you contact us for support or with information about a dataset via email. This information is necessary in order to create your account and provide you with access to the services we offer on the Site. We also collect data you include in any survey responses or feedback sessions if you decide to participate.
Data From Your Browser or Device.Whenever you use any online service, certain internet or other electronic network activity information gets created and logged automatically; the same is true when you access or use the Site. Here’s what we collect:
Log.When you access or use the Site (whether on your computer or on a mobile device), we gather certain information automatically and store it in log files. This information includes IP addresses, the Internet Site Provider, referring pages, date/time stamps, clickstream data, and duration of time spent on the Site. We collect this data pursuant to our legitimate interests in understanding how Visitors use our Site, improving our Site, and securing our Site.
Device.In addition to log data, we collect information about the device you’re using to access the Site; this includes the type of device, browser type, and operating system that helps us understand when something goes wrong. We collect this data pursuant to our legitimate interests in improving our Site.
Cookies and Other Similar Technologies.For certain users that need to log into CELLxGENE Discover to publish data, we use essential cookies (small text files sent by your computer each time you access the Site that are unique to your account or your browser) to enable that use. For web analytics, we do not use Google Analytics. Instead, we use the privacy-friendly Plausible as our website analytic tool. Learn more about Plausible’s data and privacy practices here.
Other Sources.We may display publicly available information about you when you mention us on social media networks, such as Twitter. This is reflected in the “CELL X GENE IN THE NEWS” section on the Site.
Sensitive Personal Information.We do not collect sensitive personal information about you, and thus we do not use or disclose your sensitive personal information.
How We Use Your Data
CZIF does not sell your personal information nor do we share your personal data for behavioral advertising purposes. We do use your data for the following business purposes:
Site.We use the information we collect to provide, maintain, secure, and improve the Site, including understanding the content that Visitors find valuable.
Communications.We may also use your information to respond to an email from you, send a survey, and to engage with you about a dataset you wish to share. Survey responses and feedback sessions help us understand and improve the Site.
Aggregate Insights.We use the privacy-friendly Plausible service to produce and share aggregated insights that do not identify you. For example we may receive from Plausible statistics about the location of our Visitors, and how many Visitors engage with the Site on a monthly basis. These aggregated insights are not personally identifiable.
Other Sources.We use information from Other Sources to understand what you find valuable, what we can improve, and what impact our Site is having on the science community.
Retention and Deletion
We retain your personal data as long as we believe we need it for the purposes we have collected it or to meet legal obligations, resolve disputes, maintain security, prevent fraud and abuse, or enforce our agreements with you. This includes data you provided to us and data generated or inferred from your use of the Site.
How We Disclose Information
Except in the instances listed below, we will not disclose your personal information to others unless you consent to it, nor will we ever sell your personal information to advertisers or other third parties. However, we disclose your information in the following ways:
Legal and Safety Reasons.We may disclose information if we believe in good faith that it’s necessary (a) in connection with any legal investigation; (b) to comply with relevant laws or to respond to subpoenas or warrants served on us; (c) to protect or defend our rights or property; and/or (d) to investigate or assist in preventing any violation of the law.
Choices and Rights
Rights.You have the following rights with respect to the personal data we have about you:
Delete data.You can ask us to erase or delete all or some of your personal data subject to our legal obligations and lawful exceptions.
Change or correct personal data.You can also ask us to change, update, or fix inaccurate data in certain cases, subject to our legal obligations and lawful exceptions.
Object to, limit, or restrict use of personal data.You can ask us to stop using all or some of your personal data (e.g., if we have no legal right to keep using it) or to limit our use of it (e.g., if your personal data is inaccurate or unlawfully held).
Right to access and/or take your personal data.You can ask us for a copy of your personal data in machine-readable form.
Right to notice.You have a right to receive notice of our personal information collection, use, retention, and disclosure practices at or before collection of personal information.
The right not to be discriminated against.CZIF will not discriminate against you in any manner for exercising any of the above rights with respect to your personal data.
If you would like to exercise your right to any of the above, email us at firstname.lastname@example.org. In the email, please provide us with your name, the country (and state if within the United States) in which you live, which of the above rights you would like to exercise, and sufficient information that allows us to reasonably verify that you are the person about whom we collected personal information. If you would like an authorized agent to make a request for you, have that agent email email@example.com with the above information along with additional information sufficient for us to verify that the authorized agent is acting on your behalf. Please also let us know if you have questions or concerns related to exercising any rights you have under applicable law to control your personal data.
If you would like to appeal a CZI decision with respect to a request to exercise any of these rights, please email us at firstname.lastname@example.org and explain the basis for your appeal.
If you wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority.
Security of personal data is important to us. We implement security safeguards designed to protect your personal data, including reasonable administrative, technical, and physical safeguards to protect that personal data from unauthorized access, use, alteration and destruction. Despite these efforts, we cannot guarantee that your data may not be accessed, disclosed, altered, or destroyed by a breach of any of our physical, technical, or administrative safeguards. Please notify us immediately at email@example.com if you become aware of any security issues relating to the Site.
CZIF is based in the United States; when you engage with the Site, you are sending personal data into the United States which may have different data protection rules than those of your country. We process data both inside and outside of the United States.
Our Legal Bases
We will collect, use and disclose your personal data only where we have a legal right to do so. This section explains our legal bases for processing personal data, including under GDPR.
Consent.We rely on consent to engage in certain data collection activities, like data you choose to submit to us for display on CELLxGENE Discover.
Legitimate Interests.We rely on legitimate interests to process the device and log data we collect when you use the Site. We process this data based on our legitimate interest in understanding how the Site is being used so we can improve it and have a sense of its impact, and your legitimate interest in accessing the Site.
Contract.We rely on contract where processing is necessary for the performance of a contract with you (e.g., to make the data you submitted to us publicly available via CELLxGENE Discover).
Where we rely on consent, you have the right to revoke your consent and where we rely on legitimate interests, you have the right to object by emailing us at firstname.lastname@example.org. If you have any questions about the lawful bases on which we collect and use your personal data, please contact us at GDPR-REP@chanzuckerberg.com.
Additional Information For California Residents
The California Consumer Privacy Act (“CCPA”) requires certain businesses to give California residents a number of rights regarding their personal information. We are offering these rights to you, including the right to have your personal information deleted (subject to certain exceptions), the right to change or correct your personal information, the right to limit the use or disclosure of your sensitive personal information (if applicable), the right to access your personal information, the right to opt-out of the “selling” or “sharing” of personal information (if applicable), and the right not to be discriminated against for exercising these rights.
These rights, and how to exercise them, are described in more detail in the Section titled “Choices and Rights” of this Policy Policy. In addition to these rights, we give you a right to request the following information about your personal information that we have collected in the past 12 months:
The Right to Know.This right allows you to request the following information about the personal information that we’ve collected about you in the past 12 months:
Information about Data Collection
- The categories of personal information that have been collected about you.
- The categories of sources from which we have collected personal information.
- The business purpose for which we have collected personal information.
Information about Data Disclosure
- The categories of personal information, if any, that have been sold, shared, or disclosed for a business purpose to third parties.
- The categories of third parties to whom personal information was sold, shared, or disclosed for a business purpose.
- Identification of the specific business purpose for disclosing the consumer’s personal information.
Information about Data Collection
Information we collect.We have collected the following categories of personal information from consumers within the past 12 months: (1) identifiers; (2) professional or employment-related information; (3) internet or other electronic network activity; (4) geolocation data; and (5) information provided through survey responses or feedback sessions. We have not sold this information nor have we shared this information for behavioral advertising purposes.
Sources of information.We obtain these categories of personal information from the sources described in the Section titled “Data We Collect.”
Purposes of collection.We collect personal information for one or more of the following business purposes as described in the Section titled “How We Use Your Data” above.
Information about Data Disclosure
Information we disclose.We have disclosed the following categories of personal information within the past 12 months: (1) identifiers; (2) professional or employment-related information; (3) internet or other electronic network activity; (4) geolocation data; and (5) information provided through survey responses or feedback sessions. We have not sold this information nor have we shared this information for behavioral advertising purposes.
Purposes of disclosure.We disclose the personal information we collect about you for one or more of the following business purposes described in the Section titled “How We Use Your Data” above.
Sensitive data.We do not collect sensitive personal information, and thus we do not disclose or use your sensitive information.
Additional Information for Residents of Virginia, Colorado, Connecticut, and Utah
Virginia, Colorado, Connecticut, and Utah also have adopted privacy laws that give consumers certain rights, including the right to confirm whether controllers are processing the consumer’s personal data, the right to access that data, the right to obtain a copy of that data, the right to correct inaccuracies in that data, and the right to delete that data. As discussed above in the Section titled “Choices and Rights,” we provide these rights to all consumers, regardless of where they reside.
Additionally, these four states have adopted rights to opt-out of: (1) targeted advertising; (2) the sale of personal data; and (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. We do not sell your data, use it for targeted advertising or to profile you in furtherance of decisions that produce legal or similarly significant effects.
Other Important Information
Children.We do not have actual knowledge that we have sold or shared the personal information of users under 16 years of age.
European GDPR Representative:
Bird & Bird GDPR Representative Services SRL
Avenue Louise 235
EUrepresentative.ChanZuckerberg@twobirds.comUK Data Protection Representative:
Bird & Bird GDPR Representative Services UK
12 New Fetter Lane
London EC4A 1JP