OpenLink Software and the GDPR
You should control your own personal data — including the data we hold.
As a passionate supporter of the EU’s General Data Protection Regulation (GDPR) and related initiatives to give users control over personally identifiable data, here is a plain breakdown of what happens to the data captured through OpenLink Software registration forms, and how you can take control of it.
Registration & profile management technology#
OpenLink Data Spaces (ODS) is the platform behind our user registration and profile management services. It loosely couples identification, identity claims verification (authentication), and resource access control (authorization).
Every registered user can authenticate identity credentials at login or registration using a choice of protocols:
Registration & profile management activity#
However you register, we create a user-profile-associated account that is not publicly available unless you expressly opt in to profile publication.
These are the main entry points to the profile data our systems hold for you:
- My.OpenLinkSW.com — the main registration and identity services provider
- Online shopping service — an alternate interface to the main registration server
- Free evaluation license generator — for both the Virtuoso and Universal Data Access Drivers product families
- Checking or opening a support case
- ID.MyOpenLink.net — an experimental beta site offering Personal Data Spaces
The only mandatory piece of personally identifiable information we store is your email address, by default, for communication purposes. Email subscription lists for periodic notifications are also opt-in, in line with GDPR.
What we never do#
Store your card details
We never store credit card information. All interaction with payment service providers takes place over encrypted communications.
Share or broker your data
We do not exchange user data collated by our systems with business partners, and we do not broker your data for sale through any personal-profile data exchange.
Controlling access to your profile data#
As an open standards and Self-Sovereign Identity advocate, you have full control over access to any profile information held in our systems — or in any other identity provider loosely coupled with our services, applications, and browser extensions.
Controlling access over parts of your profile data
Basic role-based access controls
Attribute-based access controls (ABAC)
ABAC driven by a SPARQL query template
The most sophisticated option for controlling access to your profile data:
Account deactivation#
An account can be deactivated in a few clicks.
- Log in to your existing account on My.OpenLinkSW.com or ID.MyOpenLink.net.
- Click the edit link at upper left, alongside the Profile link.
- Go to the Personal → Main tab.
- Click Deactivate at the top of the data form. Be certain first — there is no confirmation dialog.
Data removal#
To have your personally identifiable data removed from our systems, contact us with the subject “Account Deletion Request” and this text in the body:
To whom it may concern: I hereby request removal of my personal profile data, associated with {email-address}, from your systems.
Open a pre-filled request in our web contact form — you need only replace the {email-address} placeholder with the address associated with your ODS account.
It can also be sent by email to gdpr@openlinksw.com from your regular mail client.
Cookies and similar technologies#
This site uses as few as it can. The strictly necessary ones are always on; analytics cookies stay off until you accept them in the cookie banner, and you can change your choice at any time with Cookie Settings, which is also in the footer of every page.
Content from other providers
To show its pages, this site loads software libraries and fonts from content delivery networks (jsDelivr, cdnjs, the jQuery CDN and Google Fonts). When your browser fetches them, those providers receive your IP address and the usual details of a web request. They do not set cookies through this site.
Your choices
You can accept or reject analytics when the banner first appears, and change your mind at any time with Cookie Settings. Withdrawing consent stops analytics and deletes its cookies; it does not affect anything done before. If your browser sends the Global Privacy Control signal, analytics stays off and the banner is not shown. For your other rights over your data, see Data removal above or contact us.
Related reading#
- General Data Protection Regulation (GDPR) — OpenLink glossary entry
- Verifiable Identity Controlled by You — identity that scales to the Web and Internet
- Web, Logic, Sentences, and the Magic of Being You
Questions about your data?#
Our data protection contact will help with access, correction, or removal requests.