figshare is operated by figshare LLP, with registered address at 4 Crinan Street, London, United Kingdom, N1 9XW (“Digital Science”, “we” or “us”). We respect your concerns about privacy and value our relationship with you. This Notice explains what personal data we collect, how we may use and manage it and the rights you may have in relation to such personal data. When we refer to “personal data” in this Notice, we mean information relating to an identified or identifiable individual that we collect and use in connection with figshare; not aggregate or other anonymised data, or information we process on behalf of our customers.
Click on one of the links below to jump to the listed section:
How do we collect and use personal data?
We collect personal data in the following ways:
- information you provide to us directly online. For example, when you register to use figshare, complete one of our web forms, subscribe to updates or make a support request, we collect the personal data you provide, like your name, Orcid id, email address and other basic contact details / professional information. We will use this information to enable you to access and use figshare or fulfil the request you’ve made. You may also provide (or configure your account, including by syncing with third party apps, so figshare retrieves) additional information about you to access and use particular features within figshare, such as to populate a public profile page or make content you’ve submitted public. More occasional examples could include where you respond to a survey or enter into a competition.
- information you provide to us in person. For example, when you visit one of our exhibition booths or attend a figshare fest or another of our events, you may provide us with your contact details. We will use this information to answer your enquiries or provide other information requested by you.
- information we collect from our other interactions / business dealings. For example, if you attend a webinar, contact us via social media or otherwise interact with our business, including as a representative of a current / prospective customer, supplier or partner, we may track and make a record of those interactions, which may contain personal data. If you visit one of our offices, this may be captured on CCTV and used for security reasons; photographs / videos may be taken at our events and used for promotional purposes, details of which will be available on request at the relevant site.
- Information we collect from third parties or publicly available sources. If you are a figshare user, we may collect personal data about you from research-related data sources, such as Orcid. We may also collect information you post online (e.g. social media) about us, our products/services and/or our industry, for market research and product improvement purposes.
In all the above cases, where we have a relationship with you, we may also use the personal data we collect to manage and keep a record of that relationship and other business administration purposes you’d reasonably expect and, subject always to your preferences, to provide information we think may be of interest to you.
In many of the above cases, we may also use the information collected to create aggregate or other non-personal data to enable us to benchmark and improve figshare and for other analytical / research purposes.
Unless we specifically request it, you should not provide us with any sensitive personal information. If you provide personal data to us about someone else (such as one of your colleagues), please ensure that you have their permission to do so and that they’re aware of the contents of this Notice.
The legal basis for Digital Science's use of your personal data
In order to comply with European data privacy laws, we are required to set out the legal bases for our use of your personal data, which are as follows:
- where you have given us your explicit consent, which you can withdraw at any time. For example, we rely on your consent to fulfil specific requests you’ve made, such as to receive our blog emails, or provide information you’ve opted-in to receive;
- where the processing is necessary for the performance of our contract with you, or to enter into such a contract. For example, if you register to use figshare, we will need to use your details to set-up and administer your account;
- where the processing is necessary to comply with our legal obligations; or
- the processing is in our legitimate interests, provided these are not overridden by your individual rights. For example, we rely on our legitimate interests:
- to retain personal data that’s associated with content you or a co-author has made public, so that personal information, associated with that content can be preserved.
- to contact you when you’ve not previously given us your consent to do so, such as to tell you about things that we think might be of interest to you, or to ask for your feedback or opinion on us or our products/services.
- to collect publicly available information, such as posts on social media, for market research and product improvement purposes.
- to use CCTV on our premises for security reasons.
- to create aggregated or other non-personal data from your personal data.
Security and storage
We take appropriate technical and organisational security measures to protect personal data from accidental or unlawful destruction, accidental loss and unauthorised access, destruction, misuse, modification or disclosure including generally accepted standards designed to protect personal data provided to us, both during transmission and once it is received.
We only keep your personal data for as long as it is necessary for the purposes for which it was collected, after which it will be destroyed, erased or anonymised.
If you are a figshare user and have made content public, we will retain a record of your association with that content potentially indefinitely.
Parts of our operations, and much of the figshare infrastructure, is based in the United States (“USA”). This means that in order to run our business and operate figshare, personal data may be transferred to the USA, as well as to other locations where our affiliates and service providers are based. Whenever we make such transfers, we will ensure an appropriate level of protection is afforded to your personal data, which in the case of personal data originating from the UK or the European Economic Area (EEA) shall involve implementing at least one of the following safeguards:
- making sure the destination country has been deemed to provide an adequate level of protection for personal data;
- by using model form contracts that have been officially declared to afford your personal data an appropriate protection;
- relying on an alternative recognised compliance standard for the lawful transfer of personal data.
Please email us at email@example.com if you would like more information about these safeguards.
Depending on your preferences, we may contact you about things we think might be of interest to you. Some of these messages may be tailored to you, based on your interests (e.g. previous browsing activity), public profile and posts (e.g. on social media), use of our products/services, public research history and other information we may hold.
Various data privacy laws give rights to individuals in respect of personal data that organisations hold about them. For example, under European data privacy laws, you may be entitled:
- to request a copy of the personal data that we hold about you;
- to object to the processing of your personal data; or
- to request that your personal data is rectified or deleted, or its processing limited.
To make any requests regarding your personal data, please email us at firstname.lastname@example.org. We will comply with any such requests as required in accordance with applicable law. Please be aware, however, that there are typically a number of limitations to these rights, and there may be circumstances where we’re not able to comply with your request.
Additional information for certain jurisdictions
For additional information relevant to certain jurisdictions about the personal data we collect, how we may use and manage it and the rights you may have in relation to such personal data, please visit this page.
Third party sites
If any part of figshare is made available on or through third party websites or other resources, includes links to such resources, or other resources contain links to any part of figshare, this is done for convenience only. We recommend that you check the privacy and security policies of such resources as they are not subject to this Notice.
If you would like any further information, or have any questions or concerns, regarding your personal data, as a first step, please email us at email@example.com or write to us at:
- If you’re based in Europe: 4 Crinan Street, London N1 9XW, UK
- If you’re based outside of Europe: 625 Massachusetts Ave, Cambridge, MA 02139, USA
You have the right to make a complaint at any time to your local supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns in the first instance.
EU-US Data Privacy Framework Notice
Digital Science's US affiliate, Digital Science & Research Solutions Inc. ("Digital Science US"), participates in the EU-US Data Privacy Framework and the UK Extension to the EU-US Data Privacy Framework. This Notice applies to personal data transferred to Digital Science US, in the United States, from the European Economic Area and the United Kingdom, where transferred in reliance on the EU-US Data Privacy Framework and the UK Extension to the EU-US Data Privacy Framework (which is referred to in this Notice as EU Personal Data).
To the extent there is any conflict between the EU-U.S. Data Privacy Framework Principles (“DPF Principles”) and this Notice, the DPF Principles will prevail in respect of EU Personal Data.
- Commitment to the EU-US Data Privacy Framework Principles
Digital Science US participates in the EU-US Data Privacy Framework and the UK Extension to the EU-US Data Privacy Framework and has certified to the U.S. Department of Commerce its compliance with the DPF Principles regarding the processing of EU Personal Data. Digital Science US is responsible for the processing of EU Personal Data, and remains liable for its onward transfer to third parties acting as agents on our behalf, in accordance with the DPF Principles.
For purposes of enforcing compliance with the EU-US Data Privacy Framework and the UK Extension to the EU-US Data Privacy Framework, Digital Science US is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.
To learn more about the EU-US Data Privacy Framework and the UK Extension to the EU-US Data Privacy Framework, and to view Digital Science US’s certification, please visit https://www.dataprivacyframework.gov/.
- Disclosure for national security or law enforcement
Digital Science US may be required to share your personal data with public authorities and law enforcement agencies in response to lawful requests, including requests to meet national security and law enforcement requirements.
- Resolution of EU-US Data Privacy Framework queries and complaint mechanism
If you have an EU-U.S. Data Privacy Framework and the UK Extension to the EU-US Data Privacy Framework-related (or general privacy-related) query or complaint, we encourage you to contact us (see contact details above) as a first step. Any unresolved complaints may be referred to our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request. You may also contact your local supervisory authority within the European Economic Area or the United Kingdom.Under certain conditions, more fully described in Annex I of the DPF Principles, you may invoke binding arbitration by delivering notice to us and following the procedures and subject to conditions set out in Annex I of the DPF Principles.
Changes to this Notice
We reserve the right to modify or replace this Notice at any time by posting the revised Notice on our website. You are responsible for reviewing any such change each time you access any part of figshare.
Last updated: 25 August 2023