OpenAIRE services collect personal information about the users and content providers. The collected information includes, but not exclusively, names, organizations, country of origins or residence, telephone, contact information like email, social site contacts and website. Log information, including information provided by Users or Services via the applications/APIs running on the Site shall be processed for administrative, operational, accounting, monitoring and security purposes only and according to the GDPR. OpenAIRE undertakes to process personal data according to the principles of GDPR (article 5 of the GDPR) and ensure that users and content providers may exercise their rights.
According to the Ethical Report produced by the OpenAIRE Ethics advisor Gloria Origgi, OpenAIRE shall:
- Guarantee the protection of privacy for all the stakeholders (researchers, participants to experiments, general audience) in compliance with the GDPR guidelines: “Whereas they must, whatever the nationality or residence of natural persons, respect their fundamental rights and freedoms, notably the right to privacy, and contribute to economic and social progress, trade expansion and the well-being of individuals” (PRIVACY/CONFIDENTIALITY)
- Protect the rights of data providers by complying with the evolution of data copyright regulations in Europe. (DATA GOVERNANCE)
As highlighted in the Ethic Report, as a research organization, OpenAIRE may avoid many restrictions on processing data. According to article 89 of the GDPR: “Where personal data are processed for scientific or historical research purposes or statistical purposes, Union or Member State law may provide for derogations”. However, the following elements of GDPR impact on OpenAIRE policies and must be addressed by the OpenAIRE infrastructure: right to be forgotten (opt-out options) and anonymity provisions.
For the use of the OpenAIRE Usage Statistics Service, repository managers must install a plugin that intercepts usage data (e.g. download, view). The plugin features embedded anonymization according to the GDPR.
At any time, the user can decide to unregister his/her data. All user’s requests are immediately accepted and operated by the OpenAIRE Infrastructure. The option to delete the account is clearly visible in the OpenAIRE portal in the login form and, after login, in the “Contact Info” page of the User.
Zenodo-specific policies are published at http://about.zenodo.org/policies/ .
Infrastructure Acceptable Use Policy
By registering in the OpenAIRE Infrastructure any User shall be deemed to accept these conditions of use:
- The User shall not use the OpenAIRE Infrastructure for any unlawful purpose and not (attempt to) breach or circumvent any administrative or security controls.
- The User shall respect intellectual property and conﬁdentiality agreements.
- The User shall protect its access credentials (e.g. private keys or passwords).
- The User shall immediately report any known or suspected security breach or misuse of the OpenAIRE Infrastructure or access credentials to the incident reporting locations speciﬁed by the OpenAIRE Infrastructure.
- Use of the OpenAIRE Infrastructure is at User's risk. There is no guarantee that the OpenAIRE Infrastructure will be available at any time or that it will suit any purpose.
- Logged information is used for administrative, operational, accounting, monitoring and security purposes only.
- Resource Providers are entitled to regulate, suspend or terminate the User access, within their domain of authority, and the User shall immediately comply with their instructions.
- The User is liable for the consequences of violating any of these conditions of use.
- GDPR’s opt out for OpenAIRE users: At any time, the User can decide to unregister his/her data. All user’s requests are accepted and operated by OpenAIRE Infrastructure within one business day.
- The ownership of any intellectual property rights is not in any way transferred to the OpenAIRE Infrastructure. In short, what belongs to a User remains exclusively of that User.
- The User remains responsible for any misuse of the data by other Infrastructure Users.
- The OpenAIRE Infrastructure can reproduce, modify, and generate derivative works from the content it stores
- The OpenAIRE Infrastructure will not otherwise move or distribute user's data for any purpose, except when required to do so by law.
- The OpenAIRE Infrastructure is not responsible for the data uploaded and hosted by the infrastructure.
- The OpenAIRE Infrastructure will not be responsible for any issue regulating intellectual property rights infringement or illegal use of User's data.
- The OpenAIRE Infrastructure will make reasonable efforts to ensure that data are persisted. In the event of hardware or software failures caused by failures to a hard drive or power supply, the OpenAIRE Infrastructure will make reasonable attempts to restore the user's data. No guarantee whatsoever is provided on the success of any User's data recovery.
Acceptable Use Policy
By accessing OpenAIRE services deployed into the OpenAIRE Infrastructure any User shall be deemed to accept these conditions of use:
- Any authorized User can use content in any circumstance and for all usage, reproduce the data, modify the data, and make derivative data based upon the original data, communicate to the public, including the right to reproduce or display the data or copies thereof to the public and perform publicly, as the case maybe, the data.
- Any authorized User cannot in any circumstance and for any usage redistribute the data or copies thereof, lend and rent the data or copies thereof, sub-license rights in the data or copies thereof, unless otherwise authorized by the OpenAIRE infrastructure.
- Metadata license is CC-BY: the metadata records returned by the services can be freely re-used by commercial and non-commercial partners under CC-BY license, hence as long as OpenAIRE is acknowledged as content provider.
- If the OpenAIRE Infrastructure reasonably believes any of the User Content violates the law, infringes or misappropriates the rights of any third party, the User of the Prohibited Content will be notiﬁed and requested that such content be removed from the OpenAIRE Services or access to it be disabled. If a User does not remove or disable access to the Prohibited Content within 2 business days of our notice, the OpenAIRE Infrastructure may remove or disable access to the Prohibited Content or suspend its access to the OpenAIRE Services.
- Users will reasonably cooperate with OpenAIRE Infrastructure to identify the source of any problem with the OpenAIRE Services that may be attributable to Users Content or any end user materials that the User control.
The OpenAIRE APIs provide access to a graph of interlinked metadata records and to a corpus of article PDFs. While metadata records are accessible as CC-BY, access to PDFs may only take place on request and is subject to restrictions based on the content providers.
If Users create technology that works with OpenAIRE API Services, they must comply with the current technical documentation applicable to the used OpenAIRE Services available at http://develop.openaire.eu.
Any authorized User shall be deemed to the specific rate limits of the used service as specified below. Rate limits might be changed by the OpenAIRE IPB at any time. Changes will be published in the documentation page of the relative services.
GENERIC API RATE LIMITS
For updates, please check http://develop.openaire.eu
- no more than 30 concurrent connections from single IP to any APIs
- no more than 67 concurrent requests in total
HTTP API RATE LIMITS
For updates, please check http://develop.openaire.eu/api.html
- no more than 37 concurrent requests in total (max 30 per single IP);-
no more than 15 requests/second (in total, not per IP). If this limit is reached, requests will be delayed.
REST APIs: ScholeXplorer's REST APIs are free-to-use (no sign-up needed) by any third-party service. Note that the service limits each query to around 10,000 paged results (pages are by default of length 100 and can be navigated via resumption token). For unlimited access to the APIs please contact the service administrators.
Metadata license is CC-BY: Scholix metadata records returned by the service can be freely re-used by commercial and non-commercial partners under CC-BY license, hence as long as OpenAIRE ScholeXplorer is acknowledged as content provider.
Users of Zenodo shall be deemed to accept the conditions available on the Zenodo website at http://about.zenodo.org/terms/:
The Zenodo service (“Zenodo”) is offered by CERN as part of its mission to make available the results of its work.
Use of Zenodo, both the uploading and downloading of data, denotes agreement with the following terms:
- Zenodo is a research data repository for the preservation and making available of research, educational and informational content. Access to Zenodo’s content is open to all, for non-military purposes only.
- Content may be uploaded free of charge by those without ready access to an organized data centre.
- The uploader shall ensure that their content is suitable for open dissemination, and that it complies with these terms and applicable laws, including, but not limited to, privacy, data protection and intellectual property rights.
- All content is provided “as-is”. Users of content (“Users”) shall respect applicable license conditions. Download and use of content from Zenodo does not transfer any intellectual property rights in the content to the User.
- Users are exclusively responsible for their use of content, and shall hold CERN free and harmless in connection with their download and/or use.
- Unless specified otherwise, Zenodo metadata may be freely reused under the CC0 waiver. Bulk downloading of email addresses taken from Zenodo is not allowed.
For more, please read D9.2 - Infrastructure Policies