Skip to main content

Access Policy

Scope​

This document details the Access Policy applied to the CSAN platform.

Access Policy​

Access to the services of the CSAN platform is open to users from the french research and high-education community (ESR).

  • These users in particular include entities:

    • Focusing primarily on research, experimental development and innovation, including the application of their results in the practice;
    • Focusing primarily on education and dissemination of education, culture and prosperity;
    • Other entities with activities in the public interest.

  • Other entities may be granted access to the CSAN platform for the purpose of scientific, research, educational and innovation projects. In that case, the entity concerned shall ensure that the CSAN platform is used in relation to such activities only.

If the requested resources have been funded by a project that allow providing these resources to that user, access is free of charge. Otherwise, a financial contribution proportional to the amount of resources will be requested from the user. The use of the CSAN platform resources is arbitrated by the steering committee.

The access to the CSAN platform cannot be legally claimed.

Privacy Policy

Name and address of the data controller​

CNRS

3 rue Michel-Ange

75016 PARIS

Name and address of the data protection officer​

DPD (déléguée à la protection des données)

17, rue notre Dame des Pauvres

54 519 VANDOEUVRE LÈS NANCY Cedex

You may, at any time, contact our Data Protection Officer directly with any questions or suggestions concerning data protection at our site.

Purpose of this service​

A container image registry based on Harbor, enabling researchers to manage, distribute, and collaborate on container-based workflows in a federated environment. Access is exclusively managed via EGI Check-in.

Cookies​

The CSAN repository uses cookies. Cookies are text files that are stored in a computer system via an Internet browser. The dashboard needs cookies for its functionality. It would for example not be possible to determine whether a user is logged in or not without the use of cookies. You may at any time prevent the setting of cookies through this service by means of a corresponding browser setting. Already set cookies may be deleted at any time within your browser or respective other software.

Collection of general data and information​

Data received via EGI Check-in:

  • Persistent unique user identifier (eduPersonUniqueId)
  • Name and email address (displayName, mail)
  • Affiliation (eduPersonAffiliation)

Data generated by CSAN:

  • Log data (authentication events, access times, image push/pull records)
  • Container metadata (e.g., created by, timestamps)

Legal basis:

  • Art. 6(1)(b) GDPR – Processing is necessary for the performance of a contract (service provision).
  • Art. 6(1)(a) GDPR – For optional attributes or features based on user consent.

Purpose of Processing​

The collected data is used to:

  • Provide secure and traceable access to CSAN services
  • Ensure operational integrity and detect misuse
  • Enable user/project-specific access controls and visibility
  • Comply with academic infrastructure standards and requirements

Sharing and Disclosure​

Personal data is not shared with third parties outside the infrastructure. If exceptionally necessary, data will only be transferred to entities within the EU/EEA or countries with adequacy decisions by the European Commission.

Routine erasure and blocking of personal data​

Users can contact the CSAN DPO at dpo@csan.fr to exercise their rights. For data originating from your home institution (identity attributes), please contact your institution’s IT helpdesk.

Your Rights​

You have the following rights in relation to your Personal Data:

  • Right of access: You have the right to request information about the data we store about you and any processing of such data.
  • Right of rectification: If your Personal Data is incorrect, you are entitled to have it rectified or completed.
  • Right of erasure: You may ask us to delete or remove your your Personal Data and we will do so in some circumstances, such as where we no longer need it (we may not delete your data when other constraint prevail over your right to deletion).
  • Right to restrict processing: You may ask us to restrict the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of that Personal Data or object to us processing it. We will do it as long as we are not constraint by legal obligations and it does not affect the usability of the CSAN service.
  • Right to data portability: Upon request, users may obtain a machine-readable export of their data (e.g., access logs, project affiliations). This applies only to data directly provided to CSAN.
  • Right to object: You may ask us at any time to stop processing your Personal Data, and we will do so if we are relying on a legitimate interest to process your Personal Data - unless we demonstrate compelling legitimate grounds for the processing.
  • Right to withdraw consent: If processing is based on consent, it may be withdrawn at any time by contacting dpo@csan.fr. Withdrawal may result in loss of access to the service.
  • Right to lodge a complaint with the data protection authority: If you have a concern about our privacy practices, including the way we have handled your Personal Data, you can report it to the data protection authority that is authorized to hear those concerns. In order to exercise any of these rights, please contact the data controller at the above mentioned address at any time.

Data Retention​

The criteria used to determine the period of storage of Personal Data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfillment of the contract or the initiation of a contract.

Code of Conduct Compliance​

CSAN adheres to the GEANT Data Protection Code of Conduct for Service Providers in the research and education sector. More information: https://wiki.refeds.org/display/CODE/

Security​

We maintain reasonable and appropriate security measures to protect Personal Data from loss, misuse, unauthorized access, disclosure, alteration, or destruction in light of the risks inherent in processing this information. However, the Internet cannot be guaranteed to be fully secure and we cannot ensure or warrant the security of any information you provide to us. Please keep this in mind when providing us with your Personal Data.

Update of this Privacy Notice​

We may change this Privacy Notice at any time. If we update this Privacy Notice, we will notify you by posting a new privacy notice on this page. If we make any changes that materially change the ways we process or protect your information, we will provide additional notification of the changes. By continuing to use the CSAN repository or providing us with information following such a replacement Privacy Notice, you agree that you will be deemed to have agreed to be bound by the Privacy Notice as changed. We therefore recommend that you regularly visit the site to keep yourself informed on possible updates.