OpenLink Software and the GDPR
As a passionate supporter of the EU's General Data Protection Regulation (GDPR) and related initiatives to provide users with control over Personally Identifiable Data, here's a simple breakdown of what happens to the data captured during interactions with OpenLink Software registration forms, and how you can take control of that data.
Registration & Profile Management Technology
OpenLink Data Spaces (ODS) is the underlying technology platform that drives our user registration and profile management services. This platform enables loose-coupling of user Identification, Identity Claims Verification (Authentication), and Resource Access Control (Authorization).
Every user registered with our systems has the ability to authenticate identity credentials at login or registration time using a variety of authentication protocols. Currently supported protocols include:
- WebID-TLS (PKI enhanced using Hyperlinks)
- OpenID Connect
- OAuth
Registration & Profile Management Activity
Our services allow you to register with the system using a variety of protocols. Ultimately, we create a user-profile-associated account that isn't publicly available unless you expressly opt-in to profile publication. Here are the main entry points to your profile data managed by our systems:
- My.OpenLinkSW.com -- main Registration and Identity services provider
- Online Shopping Service -- alternate interface to the main registration server
- Free Evaluation License Generator Service -- for both our Virtuoso and Universal Data Access Drivers (UDA) product families
- Checking or Opening a New Support Case
- ID.MyOpenLink.net -- experimental beta site that offers services including Personal Data Spaces
The only mandatory piece of personally identifiable information that we store in our systems is your Email Address, by default, for communication purposes.
Email subscription lists for periodic notifications are also opt-in, in line with GDPR regulation.
Purchases and Related Transactions
We never store credit card information. All interaction with payment service providers takes place through encrypted communications.
Partner Data Sharing Programs and Activities
We do not exchange user data collated by our systems with any business partners. Likewise, we do not broker your data for sale via any personal profile data oriented data exchanges.
As an Open Standards and Self-Sovereign Identity (SSI) advocate, you have full control over access to any profile information held in our systems or any other Identity Provider (IdP) platform loosely coupled with our services, applications, and browser extensions.
Controlling access over parts of your profile data
Access Controls Interface for basic Role-based Access Controls
Access Controls Interface for sophisticated Attribute-based Access Controls (ABAC)
Attribute-based Access Control driven by a SPARQL Query Template
The most sophisticated option for controlling access to your profile data:
Account Deactivation
Accounts may be deactivated with a few clicks:
- Log into your existing account on My.OpenLinkSW.com or ID.MyOpenLink.net
- Click the edit link at upper-left (seen alongside the Profile link)
- Click to the Personal → Main tab
- If you are certain you want to deactivate this account (there is no confirmation dialog!), click the Deactivate button found at the top of the data form
Data Removal
To have your personal identifiable data removed from our systems, contact us with the subject "Account Deletion Request" and the following text in the body of the mail:
To whom it may concern: I hereby request removal of my personal profile data, associated with {email-address}, from your systems.
Clicking on the text above will automatically create a suitable message in our web-contact form; you should only need to change the {email-address} placeholder to the actual email address associated with your ODS account.
This may also be sent by email to gdpr@openlinksw.com using your regular email client.
Related
- General Data Protection Regulation (GDPR) -- OpenLink Glossary Entry
- Verifiable Identity Controlled by You! -- that scales to the Web and Internet
- Web, Logic, Sentences, and the Magic of Being You!