Terms and Conditions of the Genomic Data Infrastructure Portal for Data Users
1. Introduction
The portal of the Genomic Data Infrastructure (hereinafter 'Portal') is developed, owned and operated by PNED G.I.E., 6 avenue des Hauts-Fourneaux, L-4362 Esch-sur-Alzette, Grand-Duchy of Luxembourg (hereinafter 'LNDS'). The LNDS can be contacted at info@lnds.lu.
2. Conditions of Use
2.1. Purpose
This Portal provides access to the genomic metadata that is held within the 1+MG Framework by the Genomic Data Infrastructure (hereinafter 'GDI') participants. The Portal supports researchers and/or users (hereinafter 'the User' or the 'Users') by allowing queries over aggregated metadata and providing access to the relevant datasets according to the GDI data governance process. The Portal provides Users access only to test environment with synthetic data.
2.2. Eligibility
This Portal is dedicated exclusively to users affiliated with the institutions that are signatories or accession countries to the 1+MG Declaration and participating in GDI. Only Users who are registered and have accepted the Terms through the opt-in feature displayed will be able to get access to the GDI database's synthetic data layer.
3. User's Obligations
3.1. Compliance
Users agree to use the GDI's synthetic data only for lawful purposes, in accordance with these Terms, the EU General Data Protection Regulation 2016/679 (GDPR), relevant health related regulations and other applicable laws and regulations.
3.2. General Access to the Website
Anybody can use the public features of the website (https://portal.dev.gdi.lu), in accordance with these Terms.
3.3. Authorised Access and Rules of Use
Although the website includes public features, some features are strictly limited to Users with an infrastructure account set up. Such accounts shall follow the following principles:
- The User, under the created account, may request and obtain access to the Portal (https://portal.gdi.lu/) and the GDI's database synthetic data layer, provided that the current Terms are understood, fulfilled, and accepted;
- Users must not share access credentials and/or login details with others;
- When requesting access to data, Users must provide accurate and complete information (name, e-mail, intended use of the data, and the User's organizational affiliation). Only approved institutions that are partners of the GDI project can submit an account request on the Portal. The access request shall be based on prior authorization from the User's original institution, which approves both platform and data access. LNDS reserves the right to refuse account creation or deactivate any User account that fails to demonstrate a valid link to a relevant GDI participant institution. Users are obligated to keep their registered information accurate and up to date, and to communicate any changes within a reasonable time frame. LNDS shall not be responsible for any inability to access the User account resulting from misstatements, inaccurate data, or failure to communicate changes in information:
- The User is prohibited from taking screenshots of the data environment and using any tools, including artificial intelligence applications, that may impact the GDI data environment, in particular distorting or compromising the implementation of the FAIR data principle and information security;
- The User shall immediately report to LNDS any known or suspected security breach or misuse of the GDI data via incident@lnds.lu;
- Any research result from using the GDI database should refer to the source with an appropriate acknowledgment, or citation of the data source provided by the Portal.
3.4. Prohibited Activities
Users must not:
- Use the Portal in any manner that disrupts its functionality;
- Use the Portal for commercial purposes, unless explicitly authorized by its data governance bodies;
- Misrepresent their identity or their affiliation to the GDI participants' institution;
- Take screenshots of the data environment, and use any tools, including artificial intelligence applications, that may affect the GDI data environment, in particular those that could distort or compromise the implementation of the FAIR data principle and data security;
- Use the data for research that is not in line with the ethical standards and principles.
4. Liability and Warranties
LNDS does not guarantee that this Portal is free from errors, viruses, or malicious software. LNDS reserves the right to modify, correct, or remove the content of this Portal at any time and without notice and any compensation.
This Portal serves as a Users' interface allowing to search the data made available by GDI participant institutions. The data is provided on an 'as is' basis and without any express, implied, or statutory warranty of any kind regarding the accuracy of the data.
LNDS does not warrant that this Portal or its content will meet Users' needs, or will otherwise be uninterrupted, error-free, or continuously functional.
Users assume full responsibility for selecting the Portal and determining whether to use or rely on its contents. The User is liable for any consequences resulting from a violation of these conditions of use. Such consequences may include, but are not limited to, reporting the violation to the associated participating institution and, if the User's activities are deemed unlawful, reporting to the appropriate authorities.
5. Intellectual Property
All intellectual property rights related to the Portal, including but not limited to copyrights, trademarks, trade names, trade secrets, designs, patents, know-how, logos, domain names, database rights, software, code, and generated synthetic data belong to LNDS. These rights cover assets owned, developed, or otherwise acquired prior to the entry into force of the Terms or during their enforcement.
Users may not display, reproduce, distribute, or create derivative works based on the Portal, its content or any of the GDI participants' logos, trade names, or corporate names, without explicit permission from LNDS.
6. Suspension
LNDS reserves the right to temporarily suspend access to the Portal for maintenance, updates, or security purposes.
LNDS reserves the right to temporarily suspend access to the Portal, in case of breach of these Terms, or for investigation purposes.
7. Termination
LNDS may terminate or restrict a User's access to the Portal without prior notice if:
- Any illegal activity or breach of security is attributable to the User;
- The User breaches these Terms;
- The User or its institution ceases to be participants in the 1+MG Declaration.
Upon termination, the User must immediately cease all use of the Portal. Any provisions of these Terms intended to survive termination (e.g., liability disclaimers) will remain in effect.
LNDS may terminate the Terms and their use of the Portal at any time by closing their account or ceasing access to the Portal and notifying the User in writing at least one (1) calendar month in advance.
The User may terminate the Terms and their use of the Portal at any time by closing their account or ceasing access to the Portal and notifying LNDS in writing at least one (1) calendar month in advance, via support@lnds.lu. LNDS reserves the right to retain any data necessary to comply with legal obligations or enforce its rights.
8. Governing Law and Dispute Resolution
These Terms shall be governed by the laws of Luxembourg. Any disputes will be subject to the exclusive jurisdiction of the courts of Luxembourg.
9. Modification of the Current Terms
LNDS reserves the right to modify these Terms at any time. Users will be notified of any significant changes at least 8 days prior to the change, and continued use of the Portal constitutes acceptance of the modified Terms.
10. Miscellaneous
LNDS and the GDI participants are not liable for any delay or failure to perform obligation under these Terms, due to circumstances beyond LNDS control, including but not limited to electrical, technological, or other utility failures, force majeure, embargoes, acts or orders of government, acts of terrorism or war, changes in legislation or any other events outside of LNDS' control.
In the case of any questions relating to Terms, Users' rights and obligations arising from these Terms, and any infrastructure account, or any other matter, please contact info@lnds.lu.
If any provision or part-provision of these Terms is or becomes invalid, illegal or unenforceable, it shall be deemed deleted. However, that shall not affect the validity and enforceability of the rest of these Terms.
Privacy Notice
LNDS Data Catalogue Privacy Notice
The Luxembourg National Data Service (6 avenue des Hauts-Fourneaux L-4362 Esch-sur-Alzette, Grand-Duchy of Luxembourg, LNDS) collects and processes Personal Data when you visit this website or otherwise interact with us. LNDS acts as the Controller of such processing and is committed to respecting your privacy and protecting your personal data in accordance with the law, in particular, the EU General Data Protection Regulation 2016/679 (GDPR).
Words in capital letters in this Privacy Notice, shall have the meaning given in GDPR.
Processing Purposes
The processing of your data is based on the following grounds:
| Purpose of processing | GDPR legal basis |
|---|---|
| Managing certain features of the website and ensuring Portal usage and platform functionality (e.g., allowing you to play videos, access and share content, or fill out forms available on the website) | The processing is necessary for the purpose of legitimate interest pursued by LNDS, which is the usual website and contact management. |
| Analysing Portal usage and improving platform functionality | The processing is necessary for the purpose of monitoring user interaction, measuring performance or supporting security and analytics functions under consent measures (art. 7 of GDPR). |
| Processing authentication data, which includes name, surname, emails, roles, groups and access entitlements (confirmation that the user has been granted access to datasets) | Legitimate interest for LNDS to manage the authentication process. |
Data Categories
In addition to the information you may communicate to LNDS, such as through forms available on the website, we may collect and process the following categories of personal data:
- Your IP address and related traffic data, data collected through cookies and similar technologies (including web beacons, tracking pixels and similar technologies), as described under the Cookie Policy.
- Your authentication data (including name, surname, emails, roles, groups, and access entitlements).
Third-party Data Recipients
LNDS may share your data with service providers (such as website features providers) as necessary to achieve the above purposes.
Such data is processed by the following categories of service providers:
- Authentication process data (name, surname, email, roles, groups, and entitlements) shared for user identity proxy platform services;
- Authentication data and query-related information processed for operating the allele frequency browser and data-subject level query functionalities;
- Authentication process data and Portal usage data processed for technical infrastructure provision, platform functionality, security, and performance.
Data Transfers Outside the EU/EEA
LNDS shall transfer no Personal Data, governed by the rules of this website, outside the EU/EEA.
Data Retention
LNDS shall not retain any Personal Data, after the provision of service is completed, except where required by applicable law.
Your Statutory Rights
You have certain rights under the GDPR and can exercise them by contacting the Luxembourg National Data Service at dpo@lnds.lu.
- Right to information: You can find updated information on the LNDS' processing of your data at any time on this webpage, or by contacting us.
- Access right: You have the right to access your personal data. LNDS processes a large quantity of information, and can thus request, in accordance with GDPR, that before the information is delivered, you specify the information or processing activities to which your request relates.
- Right to rectification: You can ask us to rectify or update inaccurate or incomplete data.
- Other rights: In certain cases, you may object to or request to restrict the processing, of your Personal for request the erasure or portability of your data.
You can contact the Luxembourg data protection authority (https://cnpd.public.lu/en.html) to file a claim.
Data Protection Contact Point
You can contact the Luxembourg National Data Service's Data Protection Officer here:
Luxembourg National Data Service Data Protection Officer
6 avenue des Hauts-Fourneaux L-4362 Esch-sur-Alzette, Grand-Duchy of Luxembourg
Email: dpo@lnds.lu
Cookie Policy
Cookies are small text files that are placed on your equipment by our website and allow it to function, improve efficiency, or enable specific features. The following table provides information on the cookies we use and their purpose.
Essential (Functional) cookies
| Cookies | Description | Duration |
|---|---|---|
| **Host-next-auth.csrf-token; **Secure-next-auth.callback-url; **Secure-next-auth.pkce.code_verifier; **Secure-next-auth.state | User authentication (Next.js auth options) | While the browser is open |
| _Secure-next-auth.session-token. | user session management (Next.js auth options) | 30 days |
| TS_ | F5 security policy enforcement (ASM cookies) | While the browser is open |
Most web browsers allow control of most cookies through browser settings. Learn more about cookies and how to manage them: