When you create an account that gives you access to CISM resources or events, you are asked to provide some personal information. At CISM, we value privacy and only collect the data we need in order to fulfil our service and help our users. This document explains how this data, and data that is linked to it, is stored on the CISM infrastructure and processed by the CISM team, in compliance with our obligations under the the General Data Protection Regulation 2016/679.
The CISM is the supercomputing center of the Université catholique de Louvain. We operate compute clusters, interactive compute machines, and a storage infrastructure. More information can be found on our website at www.cism.ucl.ac.be.
The data we collect comes from two main sources:
- the form that you fill in order to create or renew the account, and
- the logs of the services you use on our infrastructure, such as SSH and Slurm.
We also collect data from quality surveys, but that data is not linked to your account.
Data collection serves three main purposes:
- the legitimate interest of reporting usage of the infrastructure to the funding authorities ;
- the legal obligation of protecting the infrastructure from malicious usage ;
- the performance of our contract assisting you in using the infrastructure or attending the events, notably through generic announcements (mailing lists) or individual contact whenever needed.
We treat your personal data diligently by keeping your personal data up to date; by storing and destroying it securely; by not collecting or retaining personal data not serving the above-stated purposes; by protecting personal data from loss, unauthorised access and public disclosure outside the scope of the CISM. The personal data is kept for as long as you are actively or passively using the CISM services ; for example for as long as you have files uploaded or generated by you stored on our systems.
We share your data only with third parties when that is necessary for you to access additional resource managed by said third party (e.g. Tier-1 clusters, CÉCI clusters, etc), or attend events organised by a third party (e.g. CÉCI user days). That always happens only upon explicit action on your part to request access to that additional resource.
You can request a copy of your personal data which the CISM holds about you, and request a correction of any piece of data that would be wrong or obsolete, by sending an email to firstname.lastname@example.org.
Feel free to contact us at email@example.com should you need additional information.