This Notice applies to the websites at altmetric.com and related services (“Altmetric”), including Altmetric Badges and Explorer. Altmetric is operated by the Altmetric team of Digital Science & Research Solutions Ltd, with registered office at 4 Crinan Street, London N1 9XW (“we” or “us”). We take privacy seriously and this Notice is designed to help you understand what personal data we collect, how we may use and manage it and the rights you may have in relation to such personal data. When we refer to “personal data” in this Notice, we mean information relating to an identified or identifiable individual that we collect and use in connection with Altmetric; not aggregate or other anonymised data or information we process on behalf of our customers.
How do we collect and use personal data?
We collect personal data in the following ways:
- information you provide to us directly online. For example, when you register to use an Altmetric product, complete one of our web forms or make a support request, we collect the personal data you provide, like your name, email address and other basic contact details / professional information. We will use this information to enable you to access and use Altmetric or fulfil the request you’ve made. More occasional examples could include where you respond to a survey or enter into a competition.
- information you provide to us in person. For example, when you visit one of our exhibition booths or attend one of our events, you may provide us with your contact details. We will use this information to answer your enquiries or provide other information requested by you.
- information we collect from our other interactions / business dealings. For example, if you attend a webinar, contact us via social media or otherwise interact with our business, including as a representative of a current / prospective customer, supplier or partner, we may track and make a record of those interactions, which may contain personal data.
- Information we collect from third parties or publicly available sources. Altmetric tracks and analyse the online attention paid to scholarly research outputs. This is done by collecting metadata about the outputs we track, as well as by collecting mentions of research outputs from a variety of online attention sources, which may contain personal data. For example, we collect publicly available information about authors of research outputs tracked by Altmetric (e.g., journal articles, books, book chapters, datasets, and other content), and about creators or authors of mentions, for research outputs tracked by Altmetric (e.g., social media, news, policy, blog, and patent mentions). How we use the personal data we collect varies depending on the Altmetric product—for further information, see “What personal data do we use in our products?” —and may vary between different data sources. For example, we use public Twitter profile information (number of tweets, domains linked to, number of links, profile description) in order to assign a score value to tweets; and the public profile Twitter information to classify the tweeter (e.g., as “member of the public”, “scientific communicator”, “practitioner” or “researcher”), some of which is made available to users of Altmetric. However, we only use author names from news, patent, and policy document mentions internally, to search in Crossref and identify matching research outputs.
In all the above cases, where we have a relationship with you, we may also use the personal data we collect to manage and keep a record of that relationship and other business administration purposes you’d reasonably expect and, subject always to your preferences, to provide information we think may be of interest to you. If you provide personal data to us about someone else (such as one of your colleagues), please ensure that you have their permission to do so and that they’re aware of the contents of this Notice.
The legal basis for our use of your personal data
In order to comply with European data privacy laws, we are required to set out the legal bases for our use of your personal data, which are as follows:
- where you have given us your explicit consent, which you can withdraw at any time. For example, we rely on your consent to fulfil specific requests you’ve made, such as to receive our blog emails, or provide information you’ve opted-in to receive;
- where the processing is necessary for the performance of our contract with you, or to enter into such a contract. For example, if you register to use Altmetric, we will need to use your details to set-up and administer your account;
- where the processing is necessary to comply with our legal obligations; or
- the processing is in our legitimate interests, provided these are not overridden by your individual rights. For example, we rely on our legitimate interests to use the publicly available personal data we collect from scholarly research outputs and on-line attention sources within Altmetric, including to develop metrics and qualitative data we use to analyse and showcase the attention and influence of research, amongst other things, which we believe adds value to the research community and provides a valuable complement to more traditional measures. We also rely on our legitimate interests to contact you when you’ve not previously given us your consent to do so.
Who we share your personal data with
We may share your personal data within the Digital Science group on a confidential basis for our internal administrative, billing and other business purposes. We do not generally disclose or share personal data with third parties, except where it’s necessary for legitimate business reasons, such as:
- to the agents, advisers and service providers that assist us in running / we use to administer our business;
- to the subcontractors and service providers we use to provide and support Altmetric. This may include hosting providers such as AWS, marketing service providers like MailChimp and analytics tool providers like Intercom;
- if part of our business is sold to or integrated with another business, to our advisers and any prospective purchasers (and their advisers);
- in such circumstances for which you have given your consent;
- if necessary for the performance of the contract we have with you or in order to enforce any claims we are entitled to;
- if required by law or ordered by a court;
- in the case of already publicly available research-related information, to users of Altmetric, including via our API and as part of the Altmetric Researcher Data Access Programme.
We include appropriate confidentiality and security obligations in our contracts with our service providers and only permit them to process your personal data for specified purposes and in accordance with our instructions (not for their own purposes).
Note, where you are using Altmetric pursuant to an organisation’s subscription, that organisation will have admin rights over your account, including the ability to track your usage; and we will act in accordance with any instructions they may give in respect of that content (whose policies – not this policy – will govern how the personal data we process on their behalf is used).
Security and storage
We take appropriate technical and organisational security measures to protect personal data from accidental or unlawful destruction, accidental loss and unauthorised access, destruction, misuse, modification or disclosure, including through the encryption of data both in transit and at rest, and annual penetration testing of our products by third-party security specialists. We only keep your personal data for as long as it is necessary for the purposes for which it was collected, after which it will be destroyed, erased or anonymised. In the case of research outputs or mentions, we may need to retain a record of your association with that content indefinitely so we can continue to corroborate our metrics.
In order to run our business and provide Altmetric, we may transfer personal data from the UK or the European Economic Area (EEA), including to our affiliates and service providers, many of whom are located outside of these jurisdictions. Whenever we make such transfers, we will ensure an appropriate level of protection is afforded to your personal data by implementing at least one of the following safeguards:
- making sure the destination country has been deemed to provide an adequate level of protection for personal data;
- by using model form contracts that have been officially declared to afford your personal data an appropriate protection;
- in the case of transfers to the United States, checking the recipient is part of the “Privacy Shield”.
Please email us at email@example.com if you would like more information about these safeguards.
European data privacy laws give rights to individuals in respect of personal data that organisations hold about them, for example:
- to request a copy of the personal data that we hold about them;
- to object to the processing of their personal data; or
- to request that their personal data is rectified or deleted, or its processing limited.
To make any requests regarding your personal data, please email us at firstname.lastname@example.org. We will comply with any such requests as required in accordance with applicable law. Please be aware, however, that there are a number of limitations to these rights, and there may be circumstances where we’re not able to comply with your request.
Third party sites
If any part of Altmetric is made available on or through third party websites or other resources, includes links to such resources, or other resources contain links to any part of Altmetric, this is done for convenience only. We recommend that you check the privacy and security policies of such resources as they are not subject to this Notice.
If you would like any further information, or have any questions or concerns, regarding your personal data, as a first step, please email us at email@example.com or write to us at:
- If you’re based in Europe: 4 Crinan Street, London N1 9XW, UK
- If you’re based outside of Europe: 625 Massachusetts Ave, Cambridge, MA 02139, USA
You have the right to make a complaint at any time to your local supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns in the first instance.
EU-US Privacy Shield Notice
Our US affiliate, Digital Science & Research Solutions Inc. (“Digital Science US”), participates in the EU-US Privacy Shield. This Notice applies to personal data transferred to Digital Science US, in the United States, from the UK or European Economic Area, where transferred in reliance on the EU-US Privacy Shield (which is referred to in this Notice as EU Personal Data).
To the extent there is any conflict between the Privacy Shield Principles and this Notice, the Privacy Shield Principles will prevail in respect of EU Personal Data.
Commitment to the Privacy Shield Principles
Digital Science US participates in the EU-US Privacy Shield Framework and has certified its compliance with the Privacy Shield Principles regarding the collection, use and retention of EU Personal Data. Digital Science US is responsible for the processing of EU Personal Data, and remains liable for its onward transfer to third parties acting as agents on our behalf, in accordance with the Privacy Shield Principles.
For purposes of enforcing compliance with the Privacy Shield, Digital Science US is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.
To learn more about the Privacy Shield Principles, and to view Digital Science US’s certification, please visit https://www.privacyshield.gov/welcome.
Disclosure for national security or law enforcement
Digital Science US may be required to share your personal data to public authorities and law enforcement agencies in response to lawful requests, including requests to meet national security and law enforcement requirements.
Resolution of Privacy Shield queries and complaint mechanism
If you have a Privacy Shield-related (or general privacy-related) query or complaint, we encourage you to contact us (see contact details above) as a first step. Any unresolved complaints may be referred to our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request. You may also contact your local supervisory authority within the European Economic Area.
Under certain conditions, more fully described on the Privacy Shield website, including when other dispute resolution procedures have been exhausted, you may invoke binding arbitration.
Changes to this Notice
We reserve the right to modify or replace this Notice at any time by posting the revised Notice on our website. You are responsible for reviewing with any such change each time you access any part of Altmetric.
Last Updated: 5 July 2019