If your ORCID iD is not yet authorized, please contact the project administrator at scigma.academic@gmail.com.
Privacy Notice
This notice explains how personal data is processed when you sign in to SCIGMA using ORCID.
Controller
The service is operated in the context of DHI Rome / Deutsches Historisches Institut in Rom.
For general legal information, please see the
Imprint. Creator of this web service is Christoph Sander.
Purpose of processing
Personal data is processed to authenticate users, potentially restrict access to authorized ORCID iDs,
protect the application against unauthorized use, and maintain the technical security of the service.
Data processed
Your authenticated ORCID iD.
Session cookie data required to keep you signed in.
Technical request data such as IP address, timestamp, requested URL, browser information, and error information.
Whether your ORCID iD is included in the local access allowlist.
ORCID sign-in
Authentication is performed through ORCID using OAuth/OpenID Connect. You are redirected to ORCID
to sign in. After successful authentication, ORCID returns an authentication result to this service.
This service uses the ORCID iD to decide whether access is permitted.
Legal basis
The processing is carried out to provide access to the protected research application and to ensure
its security and proper operation. Depending on the specific use case, the legal basis may be
performance of a task or agreement, legitimate interests in secure service operation, or another
applicable legal basis under Article 6 GDPR.
Cookies
The service uses a technically necessary session cookie set by oauth2-proxy. This cookie is required
to maintain your authenticated session and is not used for advertising or tracking.
Logs and retention
Server logs may temporarily contain technical request data such as IP address, timestamp, URL,
browser information, and authentication-related status information. These logs are used for security,
troubleshooting, and operation of the service and are retained only as long as necessary for these purposes.
Recipients
Authentication involves ORCID as the external identity provider. In addition, technical service data
may be processed by the server infrastructure used to operate this application.
Your rights
Subject to the applicable legal requirements, you may have the right to request access, rectification,
erasure, restriction of processing, portability, or to object to processing of your personal data.
Contact
If you have questions about access authorization or data protection for this service, please contact:
scigma.academic@gmail.com.