1. About this Privacy Notice
This Notice explains how TimeAtlas - operated by the Swiss Federal Institute of Technology in Lausanne (EPFL) and Time Machine Organisation - collects, uses, discloses, and protects personal data when you use the Service, register, subscribe to communications, or otherwise interact with us.
2. Who is Responsible for Your Personal Data
Time Atlas is run by the Digital Humanities LabEPFL-DHLAB and Time Machine Unit, INN 144, EPFL, Switzerland]. These entities are the data controller(s) for personal data processed under this Notice.
3. Legal Basis for Processing Data
We process personal data in accordance with applicable data protection laws (Swiss Federal Act on Data Protection). Legal bases may include your consent, performance of a contract, legitimate interests, or legal obligation.
4. What Personal Data We Collect and Why
Depending on your usage of TimeAtlas, we may collect:
| Use-Case | Data Collected | Purpose |
|---|---|---|
| Browsing the website / interface | De-identified or pseudonymised IP addresses, device/browser type, cookies (session & persistent) | For analytics, performance, to ensure security, to optimise user experience |
| Registered user(s) (if you register) | Name, email, institution/affiliation, possibly other profile details | To allow access to advanced features, to save settings, to contact you, etc. |
| Subscribers to newsletters or mailing lists | Name, email | To send updates, project announcements |
| Events / workshops / conferences | Name, affiliation, email, possibly photo consent, logistics / travel details if relevant | To organise the event, communication, reimbursement etc. |
| User-generated content (e.g. annotations, POIs) | Any content you upload; possibly metadata about your usage | To display, preserve, and manage user contributions; to maintain service features |
| Reporting a content issue | Report text and category, page address, interface language, browser type, a daily pseudonymous hash of your IP address and browser, an optional email address, any images you attach, a suggested location when you propose one, and your account identifier when you are logged in | To review and correct the data with its providers; to answer you when you left an email address |
5. Cookies and Tracking Technologies
We use cookies to enable functionality, for session management, analytics, and improving user experience. You can control or disable cookies via your browser settings; note that disabling some cookies may reduce functionality.
6. Who Accesses Your Data
Your personal data is accessed only by Time Atlas staff or project partners who need it to operate the Service. We do not sell your personal data. In case we use third-party services (mailing list, hosting, analytics), we ensure contractual or legal safeguards.
7. Data Storage / Data Location
Data is stored securely on servers located at EPFL in Switzerland. If transferred to third-party services in other jurisdictions (e.g. mailing platforms), we ensure standard contractual clauses or other legal protections are in place.
8. Retention Periods
Browsing / anonymised data: retained for period, e.g. “for the duration of the project + X years” / “for statistics purposes, after which it is deleted or anonymised”. Registered user data: retained as long as your account is active, and for a period afterwards to comply with institutional obligations. Event / newsletter data: retained for event follow-up and for historical record, or until you unsubscribe. Content-issue reports: the report is kept for the duration of the project; contact details left with a report are deleted twelve months after the report is resolved.
9. Your Rights
Depending on applicable law, you have rights including:
- to access the personal data we hold about you
- to correct inaccurate or incomplete data
- to request deletion (right to be forgotten)
- to object to or restrict processing (where applicable)
- to withdraw consent (where processing is based on consent)
- to lodge a complaint with your local supervisory authority
10. Security Measures
We implement appropriate organisational and technical security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. This includes access control, encryption (where feasible), secure backups, staff training. Follow the EPFL policies of management and security for private data.
11. International Transfers
If your data is transferred outside Switzerland, we ensure legal safeguards (e.g. standard contractual clauses) are in place to protect your rights.
12. Changes to this Privacy Notice
We may update this Privacy Notice from time to time. The date of last update will be stated at the top. You will be notified of significant changes by email / notice on site.
13. Contact
If you have any questions or concerns about this Notice or how your data is handled, contact: Email: timeatlas@epfl.ch You may also contact the Data Protection Officer at the legal office of EPFL.