Privacy Policy

Last updated on 2024-01-07

What personal data do we process?

Here is an inventory of the personal data processed by the EVLambda website.

Your username:

• provided by you when you create an account
• required
• cannot be changed (under normal circumstances)
• visible to anyone
• used to identify you on the EVLambda website

Your password:

• provided by you when you create an account
• required
• can be changed at any time
• visible to no one
• used to authenticate you on the EVLambda website

Your email address:

• provided by you when you create an account
• required
• can be changed at any time
• visible only to you and to the administrator
• used to implement various workflows (account creation, account deletion, password reset, …)
• used by the administrator to contact you
• used by the discussion forum to send you various notifications and digests if you so choose (off by default)

A log of various events related to your account:

• collected automatically
• visible only to you and to the administrator
• used to implement various workflows (deletion of abandoned accounts, …)
• used to detect, investigate, mitigate, or stop attacks against the server
• used to detect, investigate, mitigate, or stop violations of the terms of service
• used for documentation purposes

The messages you send to the administrator by email or via a contact form:

• provided by you
• visible only to the administrator

Your discussion forum avatar:

• provided to you when you create an account
• required
• can be changed at any time
• visible to anyone

Your discussion forum profile:

• provided by you
• optional
• can be changed at any time
• visible to anyone

The messages you post in the discussion forum:

• provided by you
• visible to anyone

The private messages you send to other users in the discussion forum:

• provided by you
• visible only to you, to the recipient(s), and to the administrator

A log of your activity in the discussion forum:

• collected automatically by the discussion forum
• in part visible to anyone: time spent reading posts, …
• in part visible only to you and to the administrator: IP addresses, …
• used to compute trust levels, badges, new topics, unread topics, …
• used to detect, investigate, mitigate, or stop attacks against the server
• used to detect, investigate, mitigate, or stop violations of the terms of service

Your IP address, the date and time of your visit, the page you are visiting, the page you are coming from, and information about your browser and operating system:

• collected automatically when you visit the EVLambda website
• visible only to the administrator
• stored in logs automatically deleted after two weeks unless there is a good reason to keep them longer
• used to debug and optimize the server
• used to detect, investigate, mitigate, or stop attacks against the server
• used to detect, investigate, mitigate, or stop violations of the terms of service
• used to create anonymized logs from which statistics about the EVLambda website are computed

With whom de we share your personal data?

We only share your personal data with a third party under the following circumstances:

• when the third party is a user who has access to your personal data according to the visibility rules stated above
• when the third party is one of our data processors
• when the sharing is necessary to investigate, mitigate, or stop an attack against the server
• when the sharing is necessary to investigate, mitigate, or stop a violation of the terms of service
• when compelled by law or a court order to do so

Our data processors are:

• OVH, which hosts the server in its Gravelines, France, data center
• rsync.net, which hosts encrypted backups of the server in its Zurich, Switzerland, data center

How long do we keep backups?

We keep one year of backups.

What happens when your account is deleted?

Here is what happens when your account is deleted.

Your username is retained indefinitely to avoid username recycling.

Your password and your discussion forum profile are deleted immediately.

The messages you posted in the discussion forum, the private messages you sent to other users in the discussion forum, and the log of your activity in the discussion forum are anonymized: they are attributed to a new fictitious user whose username is unrelated to your username and whose IP address is 0.0.0.0.

Your user id, your discussion forum user id, your email address, the log of various events related to your account, your discussion forum avatar, the deletion token, the deletion reason, and the deletion context are moved to a deletion report.

The deletion report is sent to your email address, encrypted, archived for six month, and then deleted.

The deletion token is a random string of characters that would help us verify your identity should you contact us during the six-month period following the deletion of your account.

Lawful bases for the processing of your personal data

Under the General Data Protection Regulation, a data controller can rely on any of the following lawful bases for the processing of personal data:

• The data subject consented to the processing.
• The processing is necessary to perform a contract.
• The processing is necessary to comply with a legal obligation.
• The processing is necessary to protect a vital interest.
• The processing is necessary to perform a task of public interest.
• The processing is necessary to pursue a legitimate interest.

For the processing of your personal data, we rely on the lawful basis that the processing is necessary to pursue the legitimate interest of building an online community around the EVLambda project.

Your rights

Under the General Data Protection Regulation, you have the following rights:

• You have the right to ask us for a copy of your personal data.
• You have the right to ask us to rectify your personal data.
• You have the right to ask us to erase your personal data, under certain conditions.
• You have the right to ask us to restrict the processing of your personal data, under certain conditions.
• You have the right to ask us to transfer to you or to another data controller the personal data you provided to us, under certain conditions.
• You have the right to object to the processing of your personal data, under certain conditions.
• You have the right not to be subject to a decision based solely on automated processing, under certain conditions.

If you make a request, we have one month to respond to you.

How to exercise your rights

You can exercise most of your rights online.

If you cannot exercise one of your rights online, please contact the administrator.

How to complain

If you have questions or complaints about the processing of your personal data, please contact the administrator.

You can also complain directly to the Belgian Data Protection Authority.

Third-party websites

This privacy policy does not apply to third-party websites linked from the EVLambda website.

Amendment

We may amend this privacy policy from time to time by posting an amended version on this page. Such amendment will become effective on the date it is posted. Whenever you log in, you will be notified if this privacy policy has been amended since you last agreed to it.

Changelog

2024-01-07: initial revision