1. Data Controller Information
Data Controller: University of Cambridge
Department: Yusuf Hamied Department of Chemistry
Address: Lensfield Road, Cambridge CB2 1EW, United Kingdom
Technical Contact: aca41@cam.ac.uk
Data Protection Officer: data.protection@admin.cam.ac.uk
2. Protein Sequence Data Processing
🧬 Active Data Processing Endpoint: /app/sequence
Purpose: Protein phase separation prediction analysis
Legal Basis: Scientific research (GDPR Article 6(1)(e) and Article 9(2)(j))
Data Type: Protein amino acid sequences (may constitute genetic information)
2.1 Information We Collect
- Protein Sequences: Amino acid sequences submitted via /app/sequence endpoint
- Analysis Parameters: User-selected prediction parameters and settings
- Technical Data: IP addresses, browser information, timestamps
- Session Data: Temporary session identifiers for results delivery
- Usage Patterns: Application interaction data for research improvement
2.2 Special Category Data - Genetic Information
Important: Protein sequences may constitute genetic data under GDPR Article 4(13). We process this data for scientific research with these safeguards:
- No Personal Identification: Sequences are processed without linking to individual identity
- Temporary Processing: Sequences processed and results returned without permanent storage
- Access Controls: Limited to authorized research personnel only
- Encryption: All data transmission secured with TLS encryption
3. How Your Protein Data is Used
3.1 Primary Processing Purpose
- Phase Separation Prediction: Analyze protein sequences for phase separation propensity
- Result Generation: Provide scientific predictions and analysis results
- Algorithm Execution: Run computational models against submitted sequences
3.2 Research and Development
- Algorithm Improvement: Aggregate analysis to enhance prediction accuracy
- Scientific Validation: Statistical analysis of prediction patterns (anonymized)
- Publication Support: Anonymized usage statistics for academic publications
3.3 Legal Basis for Processing
- Scientific Research: Article 6(1)(e) GDPR - Public task in public interest
- Genetic Data: Article 9(2)(j) GDPR - Scientific research with safeguards
- Legitimate Interests: Article 6(1)(f) GDPR - Advancing computational biology
4. Data Retention for Scientific Tool
4.1 Protein Sequence Data
- Processing Duration: Sequences held in memory only during analysis (typically seconds to minutes)
- Result Delivery: Results displayed immediately, no server-side storage
- Session End: All sequence data purged when session closes
- Log Retention: Access logs (with IP addresses) kept for 12 months maximum
4.2 Anonymized Research Data
- Usage Statistics: Aggregated, anonymized usage patterns retained for research
- Performance Metrics: Algorithm performance data (no sequence content) retained indefinitely
- Publication Data: Summary statistics for scientific publication (fully anonymized)
5. Your Rights
5.1 Individual Rights Under GDPR
- Access: Request information about your data processing
- Rectification: Correct any inaccurate information
- Erasure: Request deletion of personal data
- Restriction: Limit processing of your data
- Portability: Receive your data in machine-readable format
- Object: Object to processing based on legitimate interests
5.2 Exercising Your Rights
Privacy Requests: data.protection@admin.cam.ac.uk
Technical Queries: aca41@cam.ac.uk
Response Time: Within 30 days
5.3 Scientific Research Considerations
Since protein sequences are processed immediately without permanent storage, most data subject rights are automatically protected. For anonymized research data, certain rights may be limited under Article 89 GDPR scientific research exemptions.
6. Technical Security Measures
6.1 Data Protection
- Transmission Security: TLS 1.3 encryption for all data transmission
- No Persistent Storage: Protein sequences not written to disk
- Memory Protection: Secure memory handling during processing
- Access Controls: Restricted server access to authorized personnel only
- Regular Updates: Server security patches applied regularly
6.2 Infrastructure Security
- University Network: Protected within Cambridge University secure network
- Firewall Protection: Multi-layer network security
- Monitoring: Continuous security monitoring and logging
8. Contact Information
Privacy Questions
Data Protection Officer: data.protection@admin.cam.ac.uk
Technical Support: aca41@cam.ac.uk
Department Contact: Yusuf Hamied Department of Chemistry
Supervisory Authority
You have the right to lodge a complaint with:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Phone: 0303 123 1113
Updates to This Policy
Material changes will be announced via website notification. This policy is reviewed annually.