DISQOVER solution security (1)

DISQOVER

Privacy Policy

This privacy policy aims to inform you about how ONTOFORCE collects and processes personal data via its knowledge discovery platform “DISQOVER”.

This privacy policy aims to inform you about how Ontoforce collects and processes personal data via its knowledge discovery platform (“DISQOVER”), this is the online application, developed and maintained by Ontoforce, which aims at offering you a tool to insights on science research data via an intuitive user interface, implementing innovative data integration and interactive search, and through which you can access related content (the “Platform”). 

You are typically a client of Ontoforce and/or Platform-user. 

Ontoforce respects your privacy and is committed to protecting your personal data in accordance with the applicable Belgian and European data protection legislation (including the General Data Protection Regulation (“GDPR”)). 

Please read this privacy policy carefully. It describes not only your rights, but also the way in which you can exercise them. By using or accessing our Platform, disclosing your personal data, or accepting this privacy policy, you acknowledge the manner in which Ontoforce collects and processes your personal data as described in this privacy policy.

“Ontoforce” refers to Ontoforce NV, having its registered office at Moutstraat 108-110, 9000 Gent, Belgium and with company number 0836.138.020. 

This privacy policy describes our data processing activities as data controller or data processor (as applicable). Under the GDPR, data controllers are the main decision-makers: they exercise overall control over the purposes and means of the processing of personal data. Data processors act on behalf of, and only on the lawful instructions of, the relevant data controller.

Ontoforce has appointed a data protection officer, whom you can contact for questions about this privacy policy, your privacy and the processing of your personal data. 

E-mail: DPO@ontoforce.com

Ontoforce processes different types of personal data; this depends on the functionalities you use on our Platform and on the personal data you share with us.

If Ontoforce processes your personal data, it may process the data listed below:

 

Identification and contact details

Data that allows us to identify and contact you, such as: 

 

name and first name;
email address;
company name;
job title;

 

Login details 

Data that allows you to login to your account and use the Platform, such as:

 

user name (you are free to use your given name (first name, middle name and/or last name) or a part thereof, or a pseudonym or nickname of your choice);
email address;
password.


Account details

Data that allows you to personalize your Platform account and the information made available to you via our Platform: 

 

any other information uploaded to complete your account.

 

Technical information 
Data required to use Platform, for the proper functioning of our Platform and for analytical purposes:

 

technical information about your computer, mobile and other devices used to visit our Platform (such as, your IP- address, unique device identifiers, user-ID, operating system, browser type);
information regarding your usage of Platform (such as, history, logs, date, time, location, frequency, duration of the pages you have viewed, consent preferences);
information regarding consent(s) given by you (such as, the date and time of your consent, the user agent, IP-address, unique device identifiers or user-ID).


We use cookies and similar technologies to collect this technical information. For more information, we refer to our cookie policy.

General

Ontoforce processes personal data for the purposes specified in this section 4 (if and to the extent applicable to your situation). This list may evolve and will be updated as necessary.

For certain processing purposes, Ontoforce requires your consent. The consent you give is always free and you have the right to withdraw it at any time. You can withdraw your consent by sending an email to: DPO@ontoforce.com. Your withdrawal of consent does not affect the processing of personal data prior to such withdrawal or our processing activities which are based on any other legal basis.

 

Purpose    
To respond to your requests.

Type of personal data    
Identification and contact details;
Technical information.

Legal basis     
Performance of a contract. 

Retention term    
As long as necessary to contact you as part of the performance of the contract (including as long as necessary to answer to your request or to manage any appointments).

For more details about the retention period, you can always send an email to: DPO@ontoforce.com. 

Purpose
To create a (personal) user account;
To allow you to have access (through your account) to the Platform;
To comply with our obligations in respect to the Platform towards our clients and to enable such clients (and their appointed end users (i.e. you)) to access and use the Platform.


Type of personal data
Identification and contact details;
Login details.

We might use cookies and similar technologies to remember your login details to facilitate your next login. For more information, we refer to our cookie policy.


Legal basis
Performance of a contract.

 

Retention term    
As long as necessary for the performance of the agreement concluded between you or the organization pursuant to which you have access to the Platform (e.g. your employer, principal, etc.) and Ontoforce; 

Your identification and contact details will in any event be deleted no later than [15 days] after termination of said agreement.

For more details about the retention period, you can always send an email to: DPO@ontoforce.com. 

For information on the retention period of personal data processed through cookies, we refer to our cookie policy.

Purpose

To use our Platform; 
To ensure the proper functioning of our Platform; 
To allow us to recognize the end-user that is using our Platform; 
To remember your preferences (such as consent preferences) so that we can automatically read and respect your preferences on all subsequent and future end-user sessions;
 To allow us to keep evidence of particular consents you have provided to us;
 To comply with our obligations in respect to the Platform towards our customers and to enable such customers (and their appointed end users (i.e. you)) to access and use the Platform (if applicable).

 

Type of personal data

Technical information (your technical information may be linked to your user account).

We use cookies and similar technologies to collect this technical information. For more information, we refer to our cookie policy.

 

Legal basis

Performance of a contract;

Legitimate interest.

 

Retention term

The retention period varies from as long as the duration of a session/Platform visit, to as long as necessary for Ontoforce's legitimate interest or the performance of the agreement concluded between you or the organization pursuant to which you have access to the Platform (e.g. your employer, principal, etc.) (as applicable). 
Technical information will in any event be deleted or pseudonymized [15 days] after the collection of the data. 

For more details about the retention period, you can always send an email to: DPO@ontoforce.com. 

For information on the retention period of personal data processed through cookies, we refer to our cookie policy

Purpose

To further supplement your personal account on our Platform;
To personalize the content provided to you on our Platform (i.e. preferences, the confidential character of certain aspects on information stored on your account);
To enhance your user experience on our Platform.

 

Type of personal data 

Account details

 

Legal basis 

Consent

This information is provided voluntarily to supplement an account and you may withdraw your consent to the processing of your account details, at any time, by sending an email to DPO@ontoforce.com.

 

Retention term

Account details will be deleted from Ontoforce’s databases, upon active deletion of this personal data by you in your account on our Platform, and will in any case be deleted no later than 15 days after termination of the agreement concluded between you or the organization pursuant to which you have access to the Platform (e.g. your employer, principal, etc.) and Ontoforce;

Account details will, in any event, be deleted as soon as you withdraw your consent. 

For more details about the retention period, you can always send an email to: DPO@ontoforce.com.

Purpose
To improve our Platform;
To tailor our Platform to your use; 
To monitor effectiveness and accessibility of our Platform; 
For other technical, statistical and diagnostical purposes. 

Personal data collected from you for these purposes will only be used by us (to the greatest reasonable extent possible) in an aggregated and de-identified format.


Type of personal data    
Technical information.

We use cookies and similar technologies to collect this technical information. For more information, we refer to our cookie policy.


Legal basis
Consent. 


Retention term
The retention period varies from as long as the duration of a session/Platform visit, to as long as your consent is not withdrawn (as applicable). 
Technical information, will in any event be deleted or pseudonymized (i) upon your withdrawal of consent; and (ii) 15 days after the collection of the data. 

For more details about the retention period, you can always send an email to: DPO@ontoforce.com.

For information on the retention period of personal data processed through cookies, we refer to our cookie policy.

Purpose
To manage our client relations;
To execute our business administration;
To manage potential complaints about our products and/or services.


Type of personal data    
Identification and contact details;
Payment details;
Any additional information you share with us in relation to any complaint.


Legal basis
Legitimate interest.


Retention term
Up to ten (10) years after the expiry or termination of our client relationship; or 
As long as necessary for Ontoforce’s legitimate interest(s).

For more details about the retention period, you can always send an email to: DPO@ontoforce.com.

Purpose
To comply with our legal obligations;
To cooperate with any ongoing judicial investigation, court order or lawsuit;
To protect our and/or the rights of third parties; 
To respond to requests from data subjects.


Type of personal data
Identification and contact details;
Payment details;
Any accompanying message and/or information you share with us related to a data subject request and/or judicial investigation or lawsuit;
Other types of personal data, depending on the legal obligation concerned.


Legal basis
Legal obligation.


Retention term
Up to ten (10) years after the expiry or termination of our client relationship; or 
As long as required by law.

For more details about the retention period, you can always send an email to: DPO@ontoforce.com.

If you disclose any personal data of third parties to us, you guarantee that you have informed those third parties and you have received all necessary consents to communicate the third parties’ personal data to Ontoforce.

Our Platform uses cookies and similar technologies. For more information, we refer to our cookie policy. 

Ontoforce may share your personal data, as required for the purposes set forth in section 4, with: 

third party service providers (such as IT service providers, security providers, payment procurement providers, or hosting providers);

professional advisers (such as lawyers or auditors); and

third parties to whom we intend or choose to sell, transfer or merge (parts of) our shares, business or assets.

Upon request, Ontoforce shall, as soon as possible after the request, inform you of the third parties with whom your personal data have been shared by providing you a more detailed list.

In addition, we may disclose your personal data if this is required by law, or if we determine in good faith that such disclosure is required in order to comply with any pending judicial inquiry, judicial order or litigation and/or to safeguard our rights. 

Processors and sub-processors of Ontoforce always act under the responsibility of Ontoforce. If Ontoforce engages processors or sub-processors, this will always be done in accordance with a data processing agreement that meets the requirements of the GDPR. We require all our processors or sub-processors to take appropriate technical and organizational (including security) measures to protect your personal data in line with our policies. We do not allow our processors or sub-processors to use your personal data for their own purposes. In the event we disclose your personal data as described above, we will implement appropriate safeguards to ensure the integrity and confidentiality of your personal data.

Your personal data will only be viewed and made available to processors, sub-processors, employees and other third parties on a “need-to-know” basis, limited to the extent necessary to perform their services. 

Ontoforce might transfer your personal data to third countries located outside the European Economic Area ("EEA"), i.e. for data subjects located outside the EEA and visiting our Platform from outside the EEA, and to its affiliates. It is also possible that Ontoforce -through its (sub-)processors transfers your personal data to countries outside the EEA. 

In any event, Ontoforce will only transfer your personal data outside the EEA in accordance with the applicable data protection legislation and subject to appropriate safeguards.

Please contact us if you want further information on the specific mechanism(s) used by us when transferring personal data out of the EEA. 

Ontoforce is committed to trying to make sure that your personal data is secure and makes all reasonable and appropriate efforts to protect the confidentiality of your personal data. We have implemented appropriate technical and organizational measures, safeguards and assurances to process your personal data in accordance with the GDPR, in particular to protect your personal data against loss, misuse, or unauthorized alteration or destruction. 

Ontoforce maintains a team of technicians, automated systems, and advanced technologies, following the industry best practices and makes all necessary efforts to protect the confidentiality of your personal data. 

Please contact us if you would like more information on the specific measures taken.

Despite the above measures taken by us, you should be aware that there are always risks associated with sending personal data over the internet. The security and protection of your personal data can never be fully guaranteed, nor can we guarantee that unauthorized third parties will never be able to defeat those measures or use your personal data for improper purposes.

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes determined in section 4 of this privacy policy, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you or the organization you work for. Afterwards it is still possible that they can be found in our back-ups or archives, but they will no longer be actively processed in a file.

The applicable retention periods are set out in the table above under section 4.

If and in as far as provided for in the applicable data protection legislation, you have the right:
-    to receive confirmation as to whether we process your personal data and, where this is the case, to access such personal data,
-    to have any inaccurate or incomplete personal data corrected without undue delay,
-    to have your personal data deleted by us under certain circumstances, namely when one of the following applies:
o    if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
o    if you withdraw your consent on which the processing is based, and where there is no other legal ground for the processing; 
o    if you object to the processing in case the processing is for direct marketing purposes;
o    if the personal data have been unlawfully processed; or
o    if the personal data have to be erased for compliance with a legal obligation in EU or national law;
-    to obtain your personal data and to transfer them to another controller or processor,
-    to obtain a limitation of the processing of your personal data, to the extent possible and subject to the applicable data protection legislation, at any time, when one of the following applies:
o    if you contest the accuracy of the personal data, for a period enabling Ontoforce to verify the accuracy of the personal data;
o    if the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead; or
o    if Ontoforce no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims;
-    to receive your personal data in a structured, common and machine-readable format, 
-    to prevent the processing of your personal data and the use of your personal data for direct marketing purposes; and 
-    where the processing of your personal data is based on points (e) and (f) of article 6(1) of the GPDPR, to object to the processing of personal data.

You can exercise these rights by sending an e-mail to: DPO@ontoforce.com. 

In the event you request a copy of your personal data being processed by Ontoforce, your data will be delivered as soon as reasonably possible. Ontoforce may either (i) charge a reasonable fee, taking into account the administrative costs of providing such a copy, or (ii) refuse to act on such a request, when the request for a copy is manifestly unfounded or excessive. Ontoforce will inform you of the applicable fee before charging it.

Ontoforce reserves the right to request a copy of the front side of your identity card if Ontoforce is unable to identify you or if Ontoforce has reason to doubt your identity. You may, however, blackline any information which is not necessary for identification or verification purposes.

If and to the extent provided for in the applicable data protection legislation, you have the right to file a complaint with the competent supervisory authority should the processing of your personal data violate the applicable regulations. In Belgium the competent authority is the Data Protection Authority (“Gegevensbeschermingsautoriteit”):

www.gegevensbeschermingsautoriteit.be 
Drukpersstraat 35, 1000 Brussels, Belgium
+32 (0)2 274 48 00
contact@apd-gba.be. 

We would, however, appreciate the chance to deal with your concerns before you approach the authority, so please contact us in first instance. 

Our Platform may contain links to third party websites and/or applications. Ontoforce is not responsible for the content of these websites and applications and is not responsible for the privacy standards and practices of such third parties. We recommend you to read the relevant privacy policies of these third parties and their websites before you accept their cookies and visit their website to ensure yourself that your personal data is sufficiently protected. Nonetheless, we seek to protect the integrity of our Website and Platform and welcome any feedback about these websites and/or applications.


You acknowledge that we may disclose your personal data if this is required by law, or if Ontoforce determines in good faith that such disclosure is required in order:
a)    to comply with any pending judicial inquiry, judicial order or litigation pertaining to the Platform;
b)    to respond to claims against Ontoforce regarding personal data that violate any rights of third parties;
c)    to safeguard the rights, property and safety of Ontoforce, its employees, users, and the general public.

If Ontoforce has legitimately transmitted your personal data to a third party (not being its (sub-)processor), Ontoforce shall not be liable for any unlawful processing or unlawful use by that third party.

Under no circumstances does Ontoforce accept responsibility for any direct or indirect damages resulting from faulty or unlawful use of the personal data by a third party (not being its (sub-)processor).

Additionally, Ontoforce is not liable if third parties unlawfully process or use your personal data and Ontoforce has implemented appropriate technical and organizational measures to prevent such unlawful processing or use.

Ontoforce is in any case only liable for the damage caused by the processing of personal data if it did not comply with its specific obligations under the GDPR. Ontoforce shall in no event be liable for any special, incidental, indirect or consequential losses or damages.

The foregoing exclusions and limitations shall only apply to the maximum extent permitted by applicable law.

Ontoforce may amend this privacy policy at all times. Any changes we may make to our privacy policy will be indicated on the Platform and when proportionate and in line with the significance of the changes, may be notified to you by e-mail or advised to you on your next Platform-visit. The date of the most recent version is shown in the top right-hand corner of the privacy policy. Please review Ontoforce’s privacy policy periodically to stay informed of changes that may affect you.

Amended versions of this privacy policy take effect ten (10) days after their publication on the Platform and/or other form of announcement and, if necessary, will always be submitted for approval, unless such modifications are necessary to comply with a legal requirement. In the latter case, such changes will take effect immediately.

This privacy policy shall be governed, interpreted, and implemented in accordance with Belgian laws.

The Ghent courts (department Ghent) are exclusively competent to decide on any dispute that may arise from the interpretation or implementation of this privacy policy, without prejudice to the consumer’s right to present a dispute before a competent court on the basis of a mandatory statutory provision.