Data controller
Centre national de la recherche scientifique (CNRS), 3 rue Michel-Ange, 75794 Paris cedex 16, for the UAR 3224 Centre de recherche sur la conservation (CRC).
Data protection officer
Data protection officer of the CNRS (CNRS, Service protection des données, 2 rue Jean Zay, 54519 Vandœuvre-lès-Nancy): dpd.demandes@dpd-cnrs.fr
Purposes
- Managing accounts: letting contributors sign in and describe analyses.
- Securing the platform: limiting sign-in attempts and investigating abuse.
- Keeping the history of the data: who entered or changed a resource, and when.
- Service notices: mails about restrictions that end and workflows that will be cleaned.
- Answering the messages you send us.
Legal bases
The processing is necessary for a task carried out in the public interest by the CNRS: running a research platform (GDPR, article 6(1)(e)). Sending us a message by e-mail rests on your request.
Data we keep
- Account: name, user name, institutional e-mail address, groups, password (stored only as a hash) and the secret of your second factor.
- Sign-in records: date, user name, IP address, browser identification and the outcome (success or failure).
- Access log, for every visitor, with or without an account: date and time, IP address, method, page requested (without the query string; the tokens of password-reset, activation and two-factor links are removed), status, size, duration, host, path of the referring page and browser identification. Purpose: security and operation of the service. It is not shared and not used for statistics about individuals.
- The web server's error log, for failed requests only: date, IP address and the request line as sent (a link token included, for links that expire within days), kept for the same purpose and not shared.
- History of the data: the account that created or changed each resource, and the date.
- Resources can name researchers (authors, contacts) as part of the scientific description.
- The contact form opens your own mail application: nothing you type is stored by the platform before you send it.
Retention periods
| Sign-in records | 6 months (183 days), then deleted. |
|---|---|
| Access log | 30 days, then deleted. |
| Error log | 30 days, then deleted. |
| Accounts | Kept while the contributor works on the platform. An account without a sign-in for 24 months is anonymised, 30 days after a notice sent to its e-mail address: the name, the e-mail address and the password are erased and the account is closed. An account is never deleted, so that the history of the data keeps its author. In the edit history, the e-mail address is erased and the name stays as credit for the contribution. |
| History of the data | Kept with the platform's history. When an account is anonymised, the e-mail address is erased and the name stays as contribution credit. |
| Backups | Nightly backups are kept for up to six months. |
Recipients
The administrators and the team of the Centre de recherche sur la conservation, and the host of the platform, UAR Huma-Num. Nothing is sold, and no data is given to advertisers.
Third-party services
Some content is not hosted by ManuSpectrum: your browser loads it directly from the services below. Each of them receives your IP address and your browser identification (user agent), and, when the request is a fetch made by a page script, the address of ManuSpectrum as origin. ManuSpectrum sets no cookie for them and stores nothing on your device for them. They are in the European Union unless stated otherwise.
Purpose: to show you the images and maps of the platform. Legal basis: legitimate interest (GDPR, article 6(1)(f)). For the services used only by signed-in editors, the same basis applies to the editing tools.
Every visitor
- Image servers of the institutions that hold the manuscripts (IIIF). When the images of a document are not hosted by ManuSpectrum, your browser loads them from the IIIF server of the holding institution, in the Explorer and on resource pages: for example the Bibliothèque nationale de France (Gallica), the Université de Caen Normandie, e-codices, the Vatican Library or the BVMM of the IRHT. The list depends on the documents described.
- Université de Caen Normandie (iiif.unicaen.fr): the homepage shows three images loaded from its IIIF server.
- OpenFreeMap (tiles.openfreemap.org): the vector tiles, fonts and sprites of the base map, loaded whenever a map is shown: the Map view of the Explorer, the search map, the maps of the resource reports and the map widgets of the editing tools. OpenFreeMap is served through Cloudflare (United States). Data © OpenMapTiles, © OpenStreetMap contributors.
- OpenHistoricalMap (vtiles.openhistoricalmap.org): historical borders and names of political entities, loaded only when you tick « Historical borders ». Data © OpenHistoricalMap contributors.
Signed-in editors and administrators only
- Biblissima import workflow: the thumbnails are loaded from the Biblissima portal or from the IIIF server of the holding library.
- Rich-text editor (CKEditor, part of Arches): each time it opens, it asks cke4.ckeditor.com (CKSource) whether its version is up to date. Its spell checker (SCAYT) is off by default; if you switch it on, the text you type is sent to WebSpellChecker (svc.webspellchecker.net), which does not state where it processes it: this is outside our control. We advise using your browser's spell checker instead.
- Thesaurus page of Arches (administrators only): the fonts are loaded from Google Fonts (fonts.googleapis.com, fonts.gstatic.com), operated by Google, which may process the request outside the European Union.
Services used by the platform itself
These calls come from the server and carry no visitor data. The platform asks Biblissima and the IIIF servers of the holding institutions for data and images. E-mail goes through the mail relay of Huma-Num, which handles the names and addresses of the account holders in the messages it carries. Certificates are issued by Let's Encrypt (United States), which only learns the address of the operator.
Not used
No analytics or tracking service, no Google reCAPTCHA, no advertising, no social network widget. The Mapbox map service of Arches is not configured.
Transfers outside the European Union
None by the platform, which is hosted in France. The exceptions are the services above that are stated to process data outside the European Union or whose location is not stated: Google Fonts, WebSpellChecker, Let's Encrypt and OpenFreeMap (served through Cloudflare, United States).
Your rights
You can access and obtain a copy of the data concerning you, object to the processing of this data or have it rectified. You also have the right to restriction of the processing of your data. You can exercise these rights by contacting:
Scientific lead of the project, UAR 3224 Centre de recherche sur la conservation (CRC), 36 rue Geoffroy-Saint-Hilaire, 75005 Paris, github.crc@mnhn.fr
You can also contact the Data Protection Officer (DPO) of the CNRS at: CNRS - Service protection des données, 2 rue Jean Zay, 54519 Vandœuvre-lès-Nancy - dpd.demandes@dpd-cnrs.fr.
If you consider that your rights under the French Data Protection Act (Informatique et Libertés) are not respected, you can lodge a complaint online with the CNIL, 3 Place de Fontenoy, TSA 80715 – 75334 Paris Cedex 07 (https://www.cnil.fr/).
Cookies and browser storage
| Name | Purpose |
|---|---|
manuspectrum | Keeps you signed in. |
csrftoken | Protects forms against forged requests. |
django_language | Remembers the language you chose. |
There is no tracker, no analytics service and no advertising cookie. The Analysis Explorer keeps your selection and layout in your browser's local storage; they are never sent to the server.
Restricted resources
A restriction on a resource is temporary by construction: 12 months at most, unless an administrator records an exception. It is lifted automatically the day after its end date. The person who set it and the creator of the resource are told 30 and 7 days before, and again when the resource becomes public.
Abandoned workflows
A workflow with no activity for 90 days is cleaned. Its creators are told 21 and 7 days before. Only what the workflow itself created is removed, and only while it is still a draft.