User Rights under the GDPR

History

Authors Björn Grüning
Alireza Heidari
Tunc Kayikcioglu
Helena Rasche
Revisions 6
Revised 2026-09-07
History

This section describes how your user rights are exercised according the GDPR. This belongs to your rights in the context of Galaxy Service provided by the Freiburg Galaxy Team and the European Galaxy Community.

Right to be Informed

We have published all of the documentation regarding the GDPR compliance at https://github.com/usegalaxy-eu/gdpr. We will inform you of any and all processing activities and their affect on your personal information.

Right to Access to Personal Information

The only personal information we store that is associated with you, you can see on https://usegalaxy.eu/user/information. We have logs containing IP addresses, but these logs are destroyed after 24 hours and are not associated with a single user account.

Right to Rectification of Personal Information

You can do this on https://usegalaxy.eu/user/information.

Right to Erasure

We can manually delete your account upon your request. You can also initiate this yourself by completing the steps at User → User Preferences → Delete Account after logging in to your account.

Right to Restrict Processing

All of the processing activities we currently do are required to use the Service. We do not transmit any Personally Identifiable Information (PII) to third parties.

Right to Data Portability

Data Portability is currently not possible. But we are working to make this possible in the future.

Right to Object

All of the processing activities we currently do are required to use the Service. We do not transmit any PII to third parties. If we do processing activities in the future that do affect PII, we will inform you in advance and permit you to opt-out.

Right to Not be Subject to Automated Decision-making Including Profiling

We do not profile our users.

Our systems may temporarily disable access automatically when they detect abusive behavior, in order to protect the integrity and availability of the Service. This temporary protective measure is based on our legitimate interests in preventing abuse and securing the Service (GDPR Article 6(1)(f)). You may request human review by contacting contact@usegalaxy.eu. We will not make a final account termination decision solely by automated means. See our Terms of Service for details.