Privacy Policy

a. Information You Provide To Us

Personal Information and Demographic Information. On the Sites/Apps, we may ask you to provide us with certain categories of information such as: (1) personally identifiable information, which is information that identifies you personally, such as your first and last name and e-mail address (“Personal Information”); and (2) demographic information, such as information about your area of scientific interest, education level, and occupation (“Demographic Information”). We may collect this information through various forms and in various places on the Sites/Apps, including account registration forms, contact us forms, or when you otherwise interact with the Sites/Apps. If we combine Demographic Information with the Personal Information we collect directly from you on the Sites/Apps, we will treat the combined data as Personal Information under this Privacy Policy.

b. Information We Collect or Store As You Access And Use The Sites/Apps

In addition to any Personal Information or other information that you choose to submit to us via our Sites/Apps, we and our third-party service providers may use a variety of technologies that automatically (or passively) store or collect certain information whenever you visit or interact with the Sites/Apps (“Usage Information”). This Usage Information may be stored or accessed using a variety of technologies that may be downloaded to your personal computer, laptop, tablet or mobile phone (a “Device”) whenever you visit or interact with our Sites/Apps. Usage Information may be non identifying or may be associated with you. Whenever we associate Usage Information with your Personal Information, we will treat it as Personal Information.

This Usage Information may include:

• our IP address or other unique identifier (“Device Identifier”). A Device Identifier is a number that is automatically assigned to your Device used to access the Sites/Apps, and our computers identify your Device by its Device Identifier;
• your Device characteristics(e.g. Device type);
• your Device functionality (including browser, operating system, hardware, mobile network information);
• the URL that referred you to our Sites/Apps;
• the areas within our Sites/Apps that you visit and your activities there, including remembering you and your preferences;
• your Device location; and
• certain other Device data, including the time of day, among other information.

c. Cookies and Comparable Technologies Used for Data Collection

We may use various developed methods and technologies to store or collect Usage Information (“Tracking Technologies”). Tracking Technologies may set, change, alter or modify settings or configurations on your Device. A few of the Tracking Technologies include, without limitation, the following (and subsequent technology and methods later developed):

Cookies. A cookie is a data file placed on a Device when it is used to visit the Sites/Apps. A Flash cookie (or locally shared object) is a data file placed on a Device via the Adobe Flash plug-in that may be built-in to or downloaded by you to your Device. HTML5 cookies can be programmed through HTML5 local storage. Unlike Flash cookies, HTML5 cookies do not require a plug-in. Regular cookies may generally be disabled or removed by tools that are available as part of most commercial browsers, and in some but not all instances can be blocked in the future by selecting certain settings. Each browser you use will need to be set separately and different browsers offer different functionality and options in this regard. Also, these tools may not be effective with regard to Flash cookies or HTML5 cookies. For information on disabling Flash cookies go to Adobe’s website www.adobe.com. Please be aware that if you disable or remove cookies, Flash cookies, or HTML5 cookies on your Device, some parts of our Sites/Apps may not function properly, and that when you revisit our Sites/Apps your ability to limit cookies is subject to your browser settings and limitations.

Web Beacons. Small graphic images or other web programming code called web beacons (also known as “1x1 GIFs” or “clear GIFs”) may be included in our Sites/Apps’ pages and messages. Web beacons may be invisible to you, but any electronic image or other web programming code inserted into a page or e-mail can act as a web beacon. Web beacons or similar technologies may be used for a number of purposes, including, without limitation, to count visitors to the Sites/Apps, to monitor how users navigate the Sites/Apps, to count how many e-mails that were sent were actually opened or to count how many particular articles or links were actually viewed.

Embedded Scripts. An embedded script is programming code that is designed to collect information about your interactions with the Sites/Apps, such as the links you click on. The code is temporarily downloaded onto your Device from our web server or a third party service provider, is active only while you are connected to the Sites/Apps, and is deactivated or deleted thereafter.

ETag, or entity tag. A feature of the cache in browsers. It is an opaque identifier assigned by a web server to a specific version of a resource found at a URL. If the resource content at that URL ever changes, a new and different ETag is assigned. Used in this manner ETags are a form of Device Identifier. ETag tracking may generate unique tracking values even where the consumer blocks HTTP, Flash, and HTML5 cookies.

We may use Tracking Technologies for a variety of purposes, including:

Strictly Necessary. We may use cookies or other Tracking Technologies that we consider are strictly necessary to allow you to use and access our Sites/Apps, including cookies required to prevent fraudulent activity, improve security or allow you to make use of shopping cart functionality.

Performance Related. We may use cookies or other Tracking Technologies that are useful in order to assess the performance of the Sites/Apps, including as part of our analytic practices or otherwise to improve the content, products or services offered through the Sites/Apps.

Functionality Related. We may use cookies or other Tracking Technologies that are required to offer you enhanced functionality when accessing the Sites/Apps, including identifying you when you log in to our Sites/Apps or keeping track of our specified preferences, including in terms of the presentation of content on our Sites/Apps.

Advertising Related. We may use Tracking Technologies to deliver content, including ads, relevant to your interests on our Sites/Apps and third party sites based on how you interact with our advertisements or content. This includes using Tracking Technologies to understand the usefulness to you of the advertisements that have been delivered to you. Further information on this is found in Section 5 below.

Where appropriate (especially when you are a user based in the EU, UK or Switzerland) we will ask for your consent to the usage of any Tracking Technologies exceeding the Strictly Necessary category.

There may be other Tracking Technologies now and later devised and used by us in connection with the Sites/Apps. Further, third parties may use Tracking Technologies with our Sites/Apps. We may not control those Tracking Technologies and in such event, we are not responsible for them. However, with your consent to potentially encountering third party Tracking Technologies in connection with the use of our Sites/Apps you accept that our statements under this Privacy Policy do not apply to the Tracking Technologies or practices of such third parties. For more information on advertising and advertisers, and related Tracking Technologies, click here.

d. Information Third Parties Provide About You

We may, from time to time, supplement the information we collect directly from you on our Sites/Apps with outside records from third parties for various purposes, including to enhance our ability to serve you, to tailor our content to you and to offer you opportunities that may be of interest to you. To the extent we combine information we receive from those sources with Personal Information we collect on the Sites/Apps, it will be treated as Personal Information and we will apply this Privacy Policy to such combined information, unless we have disclosed otherwise. In no other circumstances do our promises under this Privacy Policy apply to information we receive about you from third parties.

e. Information You Provide About a Third Party (Usage of Send-a-Friend Functionality)

You may send someone else a communication from the Sites/Apps, such as sending an invitation to a friend. If so, the information you provide (names, e-mail addresses, mobile number, etc.) is used to facilitate the communication with this third party and is not used by us for any other marketing purpose unless we obtain consent from that person or we explicitly say otherwise. Please be aware that when you use any send-to-a-friend functionality on our Sites/Apps, your e-mail address, mobile number, name or user name and message may be included in the communication sent to your addressee(s). Some of these tools may be third party tools subject to 3rd party privacy policies.

There are separate third party privacy policies for some of the tools and systems we use:

Google Drive (for files collaboration) – https://www.google.com/policies/privacy/

a. Legal Bases for Processing Information

We rely on the following legal grounds to process your personal information:

• Performance of a contract – We need to collect and use your personal information to perform our agreement with you to deliver the Service as described in this Privacy Policy.
• Consent – We may use or disclose some of your personal information such as precise location information or collect cookies as described in this Privacy Policy subject to your consent.
• Legitimate interests – We may use your personal information for our legitimate interests to improve our products and services and the content on our Services. Consistent with our legitimate interests and any choices that we offer or consents that may be required under applicable laws (e.g. GDPR), we may use technical information as described in this Privacy Policy and use personal information for our marketing purposes.

a. When You Agree To Receive Information From Third Parties

You may be presented with an option on our Sites/Apps to receive certain information and/or marketing offers directly from third parties. If you choose to do so, your Personal Information will be disclosed to such third parties and all information you disclose will be subject to the third party privacy policies and practices of such third parties. We are not responsible for such third party privacy policies and practices of such third parties and, therefore, you should review such third party privacy policies and practices of such third parties prior to agreeing to receive such information from them. If you later decide that you no longer want to receive communications from one of these third parties, you will need to contact that third party directly.

b. Third Parties Providing Services on Our Behalf

We may use third party vendors to perform certain services on behalf of us or the Sites/Apps, such as hosting the Sites/Apps, designing and/or operating the Sites/Apps’ features, tracking the Sites/Apps’ activities and analytics, and enabling us to send you special offers or perform other administrative services. We may provide these vendors with access to user information, including Device Identifiers and Personal Information, to carry out the services they are performing for you or for us. Within the scope of our information sharing activities, your personal data may be transferred to other countries (including countries outside the European Economic Area (EEA)) which may have different data protection standards than your country of residence. Please note that data processed in a foreign country may be subject to foreign laws and accessible to foreign governments, courts, law enforcement, and regulatory agencies. However, we will endeavour to take the required measures to keep up an adequate level of data protection when sharing your personal data with recipients established in such countries.

Third party analytics service providers may set and access their own Tracking Technologies on your Device and they may otherwise collect or have access to information about you, potentially including Personal Information, about you. We are not responsible for those third party technologies or activities arising out of them.

c. Administrative and Legal Reasons

We may access, use, preserve, transfer and disclose your information (including Device Identifiers and Personal Information), including disclosure to third parties: (i) to satisfy any applicable law, regulation, subpoenas, governmental requests or legal process if in our good faith opinion such is required or permitted by law; (ii) to protect and/or defend the Sites/Apps’ Terms of Service or other policies applicable to the Sites/Apps, including investigation of potential violations thereof; (iii) to protect the safety, rights, property or security of the Sites/Apps or any third party; and/or (iv) to detect, prevent or otherwise address fraud, security or technical issues. Further, we may use IP address or other Device Identifiers, to identify users, and may do so in cooperation with third parties such as copyright owners, internet service providers, wireless service providers and/or law enforcement agencies, including disclosing such information to third parties, all in our discretion, subject to applicable law. Such disclosures may be carried out without notice to you.

d. Business Transfer

We may share your information, including your Device Identifiers and Personal Information, Demographic Information and Usage Information with our parent, subsidiaries and affiliates. We also reserve the right to disclose and transfer all such information: (i) to a subsequent owner, co-owner or operator of the Sites/Apps or applicable database; or (ii) in connection with a merger, consolidation, restructuring, the sale of substantially all of our interests and/or assets or other corporate change, including, during the course of any due diligence process.

a. Do Third Party Content And Links To Third Party Sites Appear on The Sites/Apps?

The Sites/Apps may contain content that is supplied by a third party, and those third parties may collect Usage Information and your Device Identifier when pages from the Sites/Apps are served to you. In addition, when you are on the Sites/Apps you may be directed to other sites that are operated and controlled by third parties that we do not control. We are not responsible for the data collection and privacy practices employed by any of these third parties or their sites. For example, if you “click” on a link, the “click” may take you off the Sites/Apps onto a different site. These other sites may associate their Tracking Technologies with you, independently collect data about you, including Personal Information, and may or may not have their own published privacy policies. We encourage you to note when you leave our Sites/Apps and to review the third party privacy policies of all third party locations and exercise caution in connection with them.

b. Are There Third Party Ads Served On The Sites/Apps?

The Sites/Apps may use third parties such as network advertisers to serve advertisements on the Sites/Apps and may use third party analytics service providers to evaluate and provide us and/or third parties with information about the use of the Sites/Apps and viewing of ads and of our content. Network advertisers are third parties that display advertisements, which may be based on your visits to the Sites/Apps and other apps and sites you have visited. Third party ad serving enables us to target advertisements to you for products and services in which you might be interested.

The Sites/Apps’ third party ad network providers, the advertisers, the sponsors and/or traffic measurement services may themselves set and access their own cookies (including Flash cookies), web beacons and other Tracking Technologies on your Device and track certain behavioral Usage Information regarding users of your Device via a Device Identifier. These third party Tracking Technologies may be set to, among other things: (a) help deliver advertisements to you that you might be interested in; (b) prevent you from seeing the same advertisements too many times; and (c) understand the usefulness to you of the advertisements that have been delivered to you. You acknowledge that associated technology may access and use your Device and may set or change settings on your Device in connection with the associated operations. Note that any images (or any other parts of content) served by third parties in association with third party ads or other content may serve as web beacons, which enable third parties to carry out the previously described activities. Depending on the applicable law the usage of some or all of this technology may be subject to your prior consent, for more information see Section 1.c.

Third party Tracking Technologies are not controlled by us, even if they use our technology to help store or collect data. This Privacy Policy does not apply to the methods for collecting information used by these third party advertisers and others or the use of the information that such third parties collect. We do however work with third parties to make efforts to have you provided with the information on their practices and any available opportunity to exercise choice. The relevant third party’s Terms of Service, privacy policy, permissions, notices and choices should be reviewed regarding their collection, storage and sharing practices. We make no representations regarding the policies or practices of third party advertisers or advertising networks.

While we may use a variety of companies to serve advertisements on the Sites/Apps, you may wish to visit http://www.networkadvertising.org/optout_nonppii.asp, which provides information regarding this practice by Network Advertising Initiative (“NAI”) members, and your choices regarding having this information used by these companies, including the “opt-out” procedures of NAI members. Opting out of one or more NAI members only means that those NAI members no longer will be able to deliver targeted content and/or ads to you, which will affect this and other sites, but does not mean you will no longer receive any targeted content and/or ads. Also, if your browsers are configured to reject cookies when you visit this opt-out page, or you subsequently erase your cookies, use a different Device or change web browsers, your NAI opt-out may not, or may no longer, be effective. Additional information is available on the NAI’s web site accessible by the above link. You may also opt-out of receiving third party behavioral ads on this site by visiting the Digital Advertising Alliance (“DAA”) website at http://www.aboutads.info/choices/#completed. Similar limitations may apply to the DAA opt-out.

Contacting us

If you have any questions about: your Privacy Policy or practices described in it, you should contact us by e-mail: info@protocols.io.

a. Transfer and Processing of Data

For users within the United States, we process data in data centers located in the United States. We have adopted reasonable physical, technical, and organizational safeguards against accidental, unauthorized, or unlawful destruction, loss, alteration, disclosure, access, use, or processing of user data in our possession. We comply with state and federal laws governing the protection of personal information.

For users within the European Union and Switzerland, we transfer data from the European Union to data centers located in the United States for processing. Such processing is performed in accordance with Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and free movement of such data, known as the General Data Protection Regulation (“GDPR”). This includes the imposition of required safeguards with respect to accidental, unauthorized or unlawful destruction, loss, alteration, disclosure, access, use or processing of data.

Transfers of European Union, or Swiss user data to processors in the United States are made in accordance with the EU-US Data Privacy Framework (DPF), and Swiss-US Privacy Shield Framework, as explained below.

For users in the UK, we transfer data from the UK to data centers located in the United STates for processing. Such processing is performed in accordance with the UK Data Protection Act 2018 (“DPA 2018”), the UK GDPR and the UK-U.S. Data Bridge decision of June 8, 2023, under Section 17A of the Data Protection Act 2018, to establish a data bridge with the United States of America through the UK Extension to the EU-US Data Privacy Framework.

b. Retention and Deletion

We will only retain your personal information for as long as necessary to fulfill the purposes for which it was collected and processed, including for the purposes of satisfying any legal, regulatory, accounting or reporting requirements.

In some circumstances, we may anonymize your personal information so that it can no longer be associated with you, in which case it is no longer personal information.

It is our policy to retain personal information for three (3) months once such personal information is no longer necessary to deliver the Service and to delete such personal information thereafter. This means that, if you close your account with us, we will delete personal information associated with your account after three (3) months. Regarding other types of information we collect as described in this policy (Cookies, Log Files, Geo-Location Information, Device Identifiers), it is our policy to retain such personal information for three (3) months and to delete such personal information thereafter.

c. Users Located in the European Union, United Kingdom and Switzerland

We comply with the EU-US Data Privacy Framework and the Swiss-US Privacy Shield Framework as set forth by the US Department of Commerce regarding the collection, use, and retention of personal information from European Union member countries, the United Kingdom and Switzerland transferred to the United States pursuant to the applicable Privacy Framework. We have certified that we adhere to the Data Privacy Framework and Privacy Shield Principles with respect to such data. If there is any conflict between the policies in this privacy policy and data subject rights under the Data Privacy Framework/Privacy Shield Principles, those Principles shall govern. To learn more about the Data Privacy Framework program, and to view our certification page, please visit https://www.dataprivacyframework.gov/s/

Under the legislation applicable to you, you may be entitled to exercise some or all of the following rights.

If you are a resident of the EU, UK, or Switzerland, have the right to:

• request an accounting of all personal information that we possess that pertains to you in an electronically portable format (e.g., electronic copies of information attached to an email).
• request that we change any personal information that pertains to you.
• request that we delete any personal information that pertains to you.
• fully or partially withdraw your consent to the collection, processing, and/or transfer of your personal information.

To request an accounting of your personal information, a change to your personal information, deletion of your personal information, or to withdraw your consent to the collection, processing, and/or transfer of your personal information, contact info@protocols.io. Once we have received notification that you withdraw your consent, we will no longer process your information for the purpose(s) to which you originally consented unless there are compelling legitimate grounds for further processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

We commit to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to the applicable framework( EU-US Data Privacy Framework, UK-U.S. Data Bridge or Swiss-US Privacy Shield Framework). EU, UK and Swiss residents with Privacy inquiries or complaints should first contact Leonid Teytelman at lenny@protocols.io.

We are committed to refer unresolved privacy complaints under the Data Privacy Framework to an independent dispute resolution mechanism, the BBB National Programs Data Privacy Framework Services, operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://bbbprograms.org/programs/all-programs/dpf-consumers/ProcessForConsumers for more information and to file a complaint. This service is provided free of charge to you.

If your Privacy complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See Data Privacy Framework Annex 1 athttps://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=2.

You also have a right to lodge a complaint with a national Data Protection Authority. Each European Union member nation has established its own Data Protection Authority; you can find out about the Data Protection Authority in your country here:http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.