Updated privacy policy

src/GlobalPollenProject.Web/Docs/10.Privacy.md

@@ -0,0 +1,85 @@
+---
+Title:       Privacy Policy
+ShortTitle:  Privacy
+Author:      Andrew Martin
+Affiliation: University of Oxford
+Date:        24th May, 2018
+Icon:        terms
+Intro:       Our privacy policy
+---
+
+In addition to the contributions you make towards the scientific goals of the Global Pollen Project, we collect additional data about you to support and improve the operation of the project. This Privacy Policy describes what data we collect, how we use it and how we protect it.
+
+We respect the privacy of every individual who contributes digitised data, or provides identifications, to the Global Pollen Project. We operate in accordance with the United Kingdom Data Protection Act 1998 and the Freedom of Information Act 2000.
+
+#### Data we collect
+
+*Identifying information*. If you register with the Global Pollen Project, we ask you to supply your e-mail address to be used as your login name, as well as your full name. Your e-mail address is not visible to other users, but others will see your full name in various contexts. Any identifications you provide are anonymous. Notably, however, your full name is associated with any information that you provide and publish using our digitisation tools. If you do not wish your full name to appear on the Global Pollen Project, do not use our digitisation tools.
+
+*Usage information*. We also monitor how people use our website, and aggregate general statistics about users and traffic patterns as well as data about how users respond to various site features. This includes, among other things, recording: when you log in, the pages that you request, and any identifications that you contribute.
+
+*Information automatically collected when visiting the website*. We may also collect information about your computer, including where available your IP address, operating system and browser type, and information about your visit (such as clickstream to and from our site and pages viewed) for system administration and to report aggregate information to our webmasters. This is statistical data about our users' browsing actions and patterns which does not identify any individual and allows us to ensure that content from our site is presented in the most effective manner for you and for your computer.
+
+#### What we do with the information we gather
+
+Usage information is collected to help us improve our website in particular for the following reasons:
+
+- Internal record keeping.
+
+- We may periodically send email promoting new material or functions available within the Global Pollen Project, or other information relating to our research. Information about these contacts is given below. We will not use your contact information for commercial purposes.
+
+- We may use the information to customise the website.
+
+#### What is shared with third parties
+
+We will never release e-mail addresses to third parties without your express permission. We will also never share data we collect about you unless (a) it cannot be associated with you or your username, and (b) it is necessary to accomplish our research goals. Specifically, we may share your anonymized data with users of the Global Pollen Project, other researchers, or in scholarly work describing our research. For example, we might create aggregate statistics using your identifications with others, or publish your identification in an academic paper.
+
+On identification pages, you can optionally use our discussion forums, provided through a third party service Disqus. We do not hold any data on your usage of the Disqus service.
+
+#### How we use cookies
+
+In some areas of our site, a cookie may be placed on your computer. A cookie is a small file that resides on your computer's hard drive that allows us to improve the quality of your visit to our websites by responding to you as an individual.
+
+We use traffic log cookies to identify which pages are being used and improve our website. We only use this information for statistical analysis purposes, they are not shared with other sites and are not used for advertisements.
+
+You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. However, if you choose to decline cookies then functionality, including your ability to log-in and participate, will be impaired.
+
+Acceptance of cookies is implied if you continue to access our website without adjusting your browser settings.
+
+#### Where we store your data
+
+We use Microsoft Azure so that our web service is performant and has high availability. All data is only stored in UK data centres.
+
+We use SendGrid, a cloud-based service, as our email-sending service. SendGrid is Privacy Shield certified, allowing lawful processing of data from the EU and Switzerland. 
+
+#### Security Measures
+
+Members of the administrative team are made aware of our privacy policy and practices by reviewing this statement upon joining the team. We follow industry best practices to secure user data, and access to the database and logs are limited to members of the administrative team.
+
+#### Removing your data
+
+Due to the way in which we archive data, it is generally not possible to completely remove your personal data from our systems. However, if you have specific concerns, please contact us and we will see what we can do.
+
+#### When we will contact you
+
+If you do not register, we will never contact you. If you do register, we will contact you by e-mail in the following circumstances:
+
+* Occasionally, we will send e-mail messages to you highlighting a particular aspect of our research, announcing new features, explaining changes to the system, or inviting you to special events.
+
+* We may also use your information to contact you for the purpose of research into our site's operation. We may contact you by email. We may ask for additional information at that time. Providing additional information is entirely optional and will in no way affect your service in the site.
+
+* We may contact you with a newsletter about the progress of the project.
+
+You are unlikely to receive more than one message per month.
+
+You can 'opt out' of communications from us in your account settings.
+
+#### Further information and requests
+
+The Data Controller is the Gloabl Pollen Project Research Team. For a copy of the information we hold on you please contact us at the address below:
+
+Andrew Martin
+Department of Zoology
+South Parks Road
+Oxford, OX1 3PS
+United Kingdom

src/GlobalPollenProject.Web/Views/Home/Terms.cshtml

@@ -78,20 +78,3 @@
 <p>(e) We respect and strive to safeguard the privacy of all people. A copy of our internet privacy policy can be found below.
 </p>
 <br />
-<h4>PRIVACY POLICY</h4>
-<p>(a) We want to protect the privacy of all visitors to our website and this privacy policy will help you to understand how we use your personal data. We may change this privacy policy at any time without notice, so please check this policy each time you visit this website.</p>
-<p>(b) Whenever you give us personal data, you are consenting to its collection and use in accordance with this privacy policy, including our use of cookies as explained below.</p>
-<p>(c) When you visit this website or ask for any publication or information from us, you may be asked to provide information about yourself, including your name and contact details. We may also collect personal data from messages you post to this website and from emails and letters that you send to us. We may also collect information about your use of this website. We automatically collect data about visitors to our website by using cookies.</p>
-<p>(d) Cookies: A cookie is a small piece of data or message that is sent from a web server to your browser and stored on the hard drive of your computer. Cookies may make it easier for you to log on to and use this website in future. They allow us to monitor website traffic and to personalise the content of this site for our visitors.</p>
-<p>(e) You can reset your browser to reject cookies and to alert you when a cookie is sent. For information about this look in your browser's "help" facility. If you choose not to accept our cookies, you may not be able to use certain features on this website.</p>
-<p>(f) Personal data: We use personal data to provide visitors with access to relevant parts of our website, to supply information they have requested and to deal with enquiries they have made.</p>
-<p>(g) We may use and analyse the personal data we collect so that we can administer, support, improve and develop our services. In particular, we may use your personal data to contact you for your views on our services and to notify you occasionally about changes or developments to our website or our services. We may contact you by e-mail or by post to market our services.</p>
-<p>(h) You have the right to stop us using your personal data for marketing purposes. You may exercise that right at any time by contacting us at: admin@globalpollenproject.org</p>
-<p>(i) When you give us personal data, those data may be sent electronically to servers anywhere in the world and may be used, stored and processed anywhere in the world, including countries outside the European Economic Area; this is simply a consequence of the way the Internet works. Bear in mind that those countries do not always have strong data protection laws.</p>
-<p>(j) Whenever and wherever we collect, process or use personal data, we take steps to try and ensure that it is kept securely and in accordance with the Data Protection Act 1998 and this policy.</p>
-<p>(k) We may disclose personal data to third parties who process information or provide other services for us. Some of those third parties may be located outside the United Kingdom.</p>
-<p>(l) Except as set out above, or unless we are required or allowed to do so by law, we will not share, sell or disclose any of your personal data without your consent.</p>
-<p>(m) Security: Unfortunately, no data transmission over the internet or any other network is as 100% secure. We take appropriate measures to try to protect your personal data from access by unauthorised people and against unlawful processing, accidental loss, destruction and damage.</p>
-<p>(n) Access and updating: Individuals have certain rights of access to their personal data, including the rights to see the personal data held about them and to ask that necessary changes are made to ensure that those data are accurate and up to date. If you wish to do this, please contact: admin@globalpollenproject.org.</p>
-<p>(p) Third part sites: Any third party website to which you link via this website is not covered by this privacy policy. We are not responsible for the privacy practices of other organisations. Always be aware when you leave this website, read the privacy policy of other websites and be cautious when you give anyone any personal data. By including a link to another website from this website we are NOT recommending or endorsing that website, the organisation that operates it, or its content.
-</p>

src/GlobalPollenProject.Web/Views/Shared/_Layout.cshtml

@@ -76,8 +76,8 @@
                     <h4>Information</h4>
                     <ul>
                         <li><a href="/Guide">About</a></li>
-                        <li><a href="/Api">Public API</a></li>
-                        <li><a href="/Terms">Terms and Licensing</a></li>
+                        <li><a href="/Terms">User Agreement</a></li>
+                        <li><a href="/Guide/Privacy">Privacy Policy</a></li>
                         <li><a href="/Cite">How to Cite</a></li>
                     </ul>
                 </div>