CINXE.COM

<!DOCTYPE html> <html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# "> <head> <meta charset="utf-8" /> <meta name="Generator" content="Drupal 10 (https://www.drupal.org)" /> <meta name="MobileOptimized" content="width" /> <meta name="HandheldFriendly" content="true" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <link rel="icon" href="/sites/default/files/Data%20Privay_logo_Favicon.png" type="image/png" /> <title>Frequently Asked Questions | Data Privacy at CERN</title> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/align.module.css?sf2l56" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/fieldgroup.module.css?sf2l56" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/container-inline.module.css?sf2l56" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/clearfix.module.css?sf2l56" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/details.module.css?sf2l56" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/hidden.module.css?sf2l56" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/item-list.module.css?sf2l56" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/js.module.css?sf2l56" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/nowrap.module.css?sf2l56" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/position-container.module.css?sf2l56" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/progress.module.css?sf2l56" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/reset-appearance.module.css?sf2l56" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/resize.module.css?sf2l56" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/sticky-header.module.css?sf2l56" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/system-status-counter.css?sf2l56" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/system-status-report-counters.css?sf2l56" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/system-status-report-general-info.css?sf2l56" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/tablesort.module.css?sf2l56" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/tree-child.module.css?sf2l56" /> <link rel="stylesheet" media="all" href="/modules/custom/cern-dev-status/css/dev_styling.css?sf2l56" /> <link rel="stylesheet" media="all" href="/core/modules/views/css/views.module.css?sf2l56" /> <link rel="stylesheet" media="all" href="/modules/custom/cern-components/patterns/molecules/faq-list/css/faq-list.component.css?sf2l56" /> <link rel="stylesheet" media="all" href="/modules/custom/cern-toolbar/assets/css/screen.css?sf2l56" /> <link rel="stylesheet" media="all" href="/modules/custom/cern-toolbar/assets/css/cookieconsent.css?sf2l56" /> <link rel="stylesheet" media="all" href="/modules/contrib/extlink/extlink.css?sf2l56" /> <link rel="stylesheet" media="all" href="/core/modules/layout_discovery/layouts/onecol/onecol.css?sf2l56" /> <link rel="stylesheet" media="all" href="/sites/default/files/color/cernclean-25baed5e/colors.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/base.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/layout.css?sf2l56" /> <link rel="stylesheet" media="all" href="//framework.web.cern.ch/framework/3.0/js/prism/prism.css" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/components/footer.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/components/header.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/components/pagination.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/components/forms.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/components/fields.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/components/dropdown.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/components/progress.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/components/accordion.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/components/social-sharing.css?sf2l56" /> <link rel="stylesheet" media="all" href="//framework.web.cern.ch/framework/3.0/js/colorbox/colorbox.css" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/theme.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/cookies.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/viewspage.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/views/faq-views.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/views/agenda-views.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/views/news-views.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/views/stories-views.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/views/resources-views.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/views/taxonomies-views.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/views/search-views.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/views/common-views.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-base-theme/css/views/generic-views.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-theme/css/header.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-theme/css/layout.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-theme/css/common-views.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-theme/css/fields.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-theme/css/forms.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-theme/css/views.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-theme/css/blocks.css?sf2l56" /> <link rel="stylesheet" media="all" href="/themes/custom/cern-theme/css/comments.css?sf2l56" /> <link rel="preload" href="//framework.web.cern.ch/framework/3.0/images/loader.gif" as="image"> </head> <body class="cern-theme-on path-faq has-glyphicons"> <a href="#main-content" class="visually-hidden focusable skip-link"> Skip to main content </a> <div id="cern-toolbar" role="group" aria-label="CERN Toolbar" class="user-not-authenticated"> <h1> <a href="//home.cern" title="CERN"> CERN <span>Accelerating science</span> </a> </h1> <ul> <li class="signin"> <div class="item-list item-list-length-1"> <ul class="cern-signedin toolbar-submenu"><li class="cern-account-links"><a href="https://privacy.web.cern.ch/user/login?destination=FAQ" class="cern-account cern-signin cern-single-mobile-signin">Sign in</a></li></ul> </div> </li> <li><a href="//cern.ch/directory" class="cern-directory" title="Search CERN resources and browse the directory">Directory</a></li> </ul> </div> <div class="dialog-off-canvas-main-canvas" data-off-canvas-main-canvas> <div class="container-fluid"> </div> <header role="banner"> <div class="header-wrapper"> <div class="site-info col-sm-3"> <div class="site-info__logo col-lg-12 col-md-12 col-sm-12"> <a href="/" title="Home" rel="home"> <img src="/sites/default/files/logo/Data%20Privay_logo_Logo_letters%20white.png" alt="home"/> </a> </div> </div> <div class="site-nav col-sm-9 has-search"> <div class="region region-header"> <nav role="navigation" aria-labelledby="block-cernclean-main-menu-menu" id="block-cernclean-main-menu"> <h2 class="sr-only" id="block-cernclean-main-menu-menu">Main navigation</h2> <nav class="navbar navbar-default main-menu"> <div class="container-fluid">  <div class="navbar-header"> <button type="button" class="navbar-toggle collapsed" data-toggle="collapse" data-target="#bs-example-navbar-collapse-1" aria-expanded="false"> <span class="sr-only">Toggle navigation</span> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> </div>  <div class="collapse navbar-collapse" id="bs-example-navbar-collapse-1"> <ul class="nav navbar-nav"> <li> <a href="/everybody" data-drupal-link-system-path="node/503">For Everybody</a> </li> <li> <a href="/data-subjects" title="Here should be information for data subjects" data-drupal-link-system-path="node/501">For Data Subjects</a> </li> <li> <a href="/controlling-and-processing-services" data-drupal-link-system-path="node/502">For Services</a> </li> <li> <a href="/external-entities" data-drupal-link-system-path="node/518">For External Entities</a> </li> <li class="search-item cern-search"> <a href="#" class="cern-item-search search-link" onClick="openSearch()">SEARCH</a> <div id="cern-search-overlay"> <div class="close-cern-search" onClick="closeSearch()"></div> <div class="col-md-offset-2 col-md-8"> <div role="search" class="block block-search block-search-form-block"> <form class="search-block-form" data-drupal-selector="search-block-form" action="/search/node" method="get" id="search-block-form" accept-charset="UTF-8" data-drupal-form-fields="edit-keys"> <div class="form-item js-form-item form-type-search js-form-type-search form-item-keys js-form-item-keys form-no-label form-group"> <input title="Enter the terms you wish to search for." data-drupal-selector="edit-keys" class="form-search form-control" placeholder='E.G.BIRTH OF WEB, LHC PAGE 1, BULLETIN...' type="search" id="edit-keys" name="keys" value="" size="15" maxlength="128"> </div> <div id="edit-keys--description" class="description help-block">Enter the terms you wish to search for.</div> </form> </div> </div> </div> </li> </ul> </div>  </div>  </nav> </nav> </div> </div> </div> </div> </header> <main role="main"> <a id="main-content" tabindex="-1"></a> <div class="container"> <div class="sidebar-left col-md-3 col-sm-12 col-xs-12"> <div class="region region-left"> <section class="language-switcher-language-url block block-language block-language-blocklanguage-interface clearfix" id="block-languageswitcher" role="navigation"> <ul class="links"><li hreflang="en" data-drupal-link-system-path="FAQ" class="en is-active"><a href="/FAQ" class="language-link is-active" hreflang="en" data-drupal-link-system-path="FAQ">en</a></li><li hreflang="fr" data-drupal-link-system-path="FAQ" class="fr"><a href="/fr/FAQ" class="language-link" hreflang="fr" data-drupal-link-system-path="FAQ">fr</a></li></ul> </section> </div> </div> <div class="wrapper-center col-md-9 col-sm-12 col-xs-12"> <div class="region region-content"> <div class="views-element-container form-group"> <div class="accordion-cern view view-test view-id-test view-display-id-page_1 js-view-dom-id-6075c1e75123e30c7eefca6d67eb398d7356928e89f5930405a642bcbbcf5bd1 cern-view-display-page cern-view-display-page_1 clearfix"> <h1 class="mb-3 mt-3 text-center">Frequently Asked Questions</h1> <div class="view-content clearfix"> <h3>Principles</h3> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> Does OC 11 apply to data collected before it entered into force? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>The application of OC 11 is not dependent on the time when the data was collected.</p> <p>It applies to all processing operations carried out since the introduction of the OC 11 on 1.1.2019, including data subject rights which are enforceable also for “old” data.</p> <p>What does this mean in practice?</p> <p>It means that everything that you do today with the data (even if it was collected years ago) must be compliant. This “everything” includes all kind of processing, also storage.</p> <p>Examples:</p> <ul> <li> <p>Personal data was collected in 2010 when a new staff member was hired.<br> The collection was not subject to OC 11, however, if the data is still present today and it turns out that there is no legal basis and purpose for keeping it, you have to delete it (OC 11 obliges!).</p> </li> <li> <p>A transfer of this data to an external entity carried out in March 2018 was not subject to OC 11.<br> However, when the data subject concerned submits today a data subject request to correct the data, CERN has to comply with OC 11 and inform this external entity and ask them to update the data, too.</p> </li> </ul> </div> </div> </div> </div> </div> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> How do you anonymise data? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>Data anonymisation is an irreversible process by which all data that might allow the data subject to be identified is removed from the dataset in order to render the individual unidentifiable.</p> <p>There are several anonymisation techniques, and your choice will depend on the context. As the result of the anonymisation process must be as permanent as the destruction, we advise you to check the reliability of the technique you have chosen on the basis of three criteria:</p> <ol> <li>Is it still possible to single out an individual?</li> <li>Is it still possible to link information to an individual?</li> <li>Is it possible to deduce information about an individual?</li> </ol> <p>If you can answer "no" to the three questions above, the chosen technique is reliable and will lead to complete anonymisation of the data. If in doubt, or if the chosen process does not meet all the criteria, you should carry out an in-depth analysis of the potential risks and consult the ODP.</p> </div> </div> </div> </div> </div> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> Is the IP address of my computer personal data about me? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>Yes, according to the definition in OC 11, personal data includes also “online and device identifiers“.</p> <p>Examples of such identifiers are:</p> <ul> <li>Internet protocol (IP) addresses;</li> <li>cookie identifiers; and</li> <li>other identifiers such as radio frequency identification (RFID) tags.</li> </ul> <p>These identifiers refer to information that is related to an individual’s tools, applications, or devices, like their computer or smartphone. The above is by no means an exhaustive list. Any information that could identify a specific device, like its digital fingerprint, are identifiers.</p> <p>And these identifiers can leave traces which may be used to create a profile of the device user and his identification, especially if combined with unique identifiers and other information received by servers.</p> <p>Therefore, both dynamic and static IP addresses are considered personal data, as they allow the direct or indirect identification of the individual using the corresponding device.</p> </div> </div> </div> </div> </div> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> May I use publicly available personal data? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>Someone posts personal information on a social networking site, so its public and I can use it right?</p> <p>Well, not exactly. Irrespective of the fact that these data are now known in the public domain, they can only be processed for the same purposes that they were originally made public.</p> <p><strong>The data subject always remains the owner of his/her personal data, whether publicy available or not.</strong></p> <p>Consequently, what is posted on a social networking site cannot be used for an employment evaluation for example.</p> </div> </div> </div> </div> </div> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> What is CERN's position in relation to the GDPR? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>The European Organization for Nuclear Research (“CERN”) is an Intergovernmental Organization with its seat in Geneva, Switzerland. By virtue of its particular legal status, the Organization enjoys certain privileges and immunities under international law.</p> <p>CERN processes personal data solely in accordance with its internal legislation. CERN’s data privacy framework builds on principles established in its Member States and more generally the European Union, which are implemented through technical and organizational measures. CERN has designated a Data Privacy Adviser (DPA), who provides a competency centre for all issues related to data privacy at CERN.</p> <p>In any event, as CERN is not subject to any national or similar jurisdiction, disputes in the context of personal data processing shall be resolved in accordance with CERN’s internal legislation or, that failing, by arbitration.</p> <p>A statement regarding data privacy protection is available online <a href="https://home.cern/data-privacy-protection-statement">https://home.cern/data-privacy-protection-statement</a>.</p> <p>CERN will respond to your request in accordance with its internal procedures.</p> </div> </div> </div> </div> </div> <h3>Data Sharing and Transfers</h3> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> A colleague of mine will leave CERN soon (e.g. for retirement or at the end of the contract). I would like to write a personal farewell speech to honour our excellent collaboration. May I consult her personal record to gather details about her career? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>No. Sharing personal data with you would be considered as data transfer, and Operational Circular no. 11 (OC 11) allows data transfers between services at CERN or between a service and an external entity, only. In addition, the data transfer must be for a legitimate purpose.</p> <p>Data transfers to private persons, other than the data subject or a duly authorised representative, is not foreseen in OC 11.</p> <p>Furthermore, granting a person different from the data subject access to his/her personal record would imply the processing of a significant amount of personal data, as well as sensitive data, of that person, also taking into account the technical limitations of extracting the relevant information from the records (mainly in pdf format).</p> <p>However, we can suggest other ways to gather details for the farewell speech.</p> <p>For example, by interviewing your leaving colleague, provided that she consents to the interview, or by asking her to exercise her right to request a copy of her personal data by submitting a corresponding request via the web form referenced at the bottom of the relevant privacy notice. Further information on how to exercise the data subject's right of access can be found on <a href="/right-access">our web site</a>.</p> </div> </div> </div> </div> </div> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> As an individual, can I obtain personal data, such as the private address, of a person working at CERN for my very own purposes? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>No. CERN’s data protection framework allows CERN to process personal data only when it is required for the proper functioning of the Organization (see also § 3 OC 11).</p> <p>Sharing of personal data with natural persons for their private purposes does not qualify as such.</p> <p>This covers also circumstances where you feel having a legitimate interest, such as collecting an outstanding debt of a former colleague who left CERN without leaving his new address.</p> </div> </div> </div> </div> </div> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> Does the processing of Personal Data at CERN by a person who is not a Member of the Personnel, qualify as “Transfer to an External Entity”? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>OC 11 defines “Data Transfer” and “External Entity” as follows:</p> <p>“§ 19. Transfer of Personal Data occurs whenever Personal Data is shared with, or access to such Data is granted to, one or more Services or External Entities.”</p> <p>“§ 20. An External Entity is any legal person outside the Organization from which CERN receives, or to which it transfers, Personal Data.”</p> <p>In jurisprudence, a natural person is a person (in legal meaning, i.e., one who has its own legal personality) that is an individual human being, as opposed to a legal person, which may be a private (i.e., business entity or non-governmental organization) or public (i.e., government) organization.</p> <p>Individuals who are not Members of the Personnel but have a contract as temporary worker, consultant or similar with CERN are natural persons, and thus they are not considered as External Entities. Therefore, they can process personal data at CERN in the context of their mission and this activity would not be considered as Data Transfer.</p> <p>Companies are in general legal persons, and when they process personal data on behalf of CERN they do this often in the context of a service contract that requires them to send their personnel onsite.<br> In this case, we would differentiate between the contractor’s personnel and their employers:</p> <ul> <li>The personnel would not be considered external entities as long as they carry out their work within the CERN structure (being attached to an organic unit, with an office, a phone number, an e-mail address, etc.,) and process personal data withing CERN’s systems, and do not share CERN personal data with their employers, or any other external entity.</li> <li>Their employers, on the other hand, would be considered external entities as they do not work within CERN’s structure.</li> <li>Should the contractor’s personnel share CERN personal data with their employers, or any other external entity, or process personal data outside of CERN’s systems, we would, in that case, consider both the former and the latter as external entities.</li> </ul> </div> </div> </div> </div> </div> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> How to handle requests to provide information about an individual? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>You might be asked to provide information about an individual or otherwise engage in the processing of information about an individual.</p> <p>It would be useful then to consider: Why do I have this information in the first place? Is the processing requested compatible with the purpose for which I have the data?</p> <p>Another test you might employ is: Would the individual be surprised by the processing I am about to perform?</p> <p>For example, someone asks you for an individuals private phone number that you have for your own legitimate reasons. If now the individual receives a call from someone who you have given their phone number to, they may well be very surprised.</p> <p>Avoid surprises!</p> </div> </div> </div> </div> </div> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> The EP department would like to publish an obituary for a CERN physicist who recently passed away. I have been appointed as editor of the obituary. May I have a look at his personal record to gather details about his career? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>To answer the question, we should first check the applicable provisions of Operational Circular no. 11 (OC 11):</p> <p>As sharing of personal data between two services at CERN is allowed by OC 11 if it is in the interest of CERN and if the Office of Data Privacy (ODP) has approved the transfer, one could assume that the access to the personal record should be possible in this specific case.</p> <p>The ODP considers that the purpose of publishing an obituary for a member of the personnel, who passed away during or after his or her contract with CERN, written by CERN is legitimate. The ODP generally approves such requests, provided that the next of kin of the deceased consent to the transfer.</p> <p>So, our reply would be:</p> <p>Yes, if the relatives of the deceased person agree with the edition and publication of an obituary, you may access the personal record of that person.</p> <p>If the deceased person was an active member of the personnel, the Social Affairs Service of CERN is coordinating the <a href="https://admin-eguide.web.cern.ch/en/procedure/death-member-personnel">procedure</a> to be followed after a death of a member of the personnel and acting as the channel of communication between the family, the outside authorities and CERN’s internal services. Therefore, you should approach the Social Affairs Service to enquire whether an obituary is desired</p> <p>In case the deceased person was a CERN retiree, since the Pension Fund Service will not handle such requests or the publication of obituaries, it is suggested to directly contact the relatives to ask for their consent.</p> </div> </div> </div> </div> </div> <h3>Usage of external tools</h3> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> Can I use cloud solutions that store personal data in the USA? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>The current standard privacy conditions in CERN’s commercial contracts expressively require the processing of personal data on behalf of CERN in our member states, only.</p> <p>Consequently, the usage of cloud solutions that process personal data in the US, is no longer conform, neither by persons working at CERN nor by CERN’s suppliers.</p> </div> </div> </div> </div> </div> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> Can I use Googledocs and other cloud services with personal data? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>This is a broad topic, and many issues will depend on the specific case of the cloud service, but here are some key general points to consider:</p> <ul> <li>When you upload personal data to the cloud (including entering it into a Google doc) you are processing personal data.</li> <li>When anyone reads the personal data you have entered, they are also processing personal data.</li> <li>Did you consider the privacy rights of the individuals and the personal content you are uploading?</li> <li>Is the purpose specific and is this the best method for achieving the purpose?</li> <li>Have you obtained the appropriate consent from the individuals or can you justify an appropriate legal basis for the processing you are performing?</li> <li>Do you understand the contractual relationship you have with cloud provider? What rights do they have to the content? What commitments do they have to protect personal data and are they sufficient?</li> <li>Have you protected the access to the content adequately?</li> </ul> <p><strong>You are accountable for the processing of personal data and the general rule is that if you can avoid it, you should!</strong></p> </div> </div> </div> </div> </div> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> I would like to store personal data in the Cloud. What shall I consider? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>There are many types of cloud Services, from applications that you can use to basic cloud storage, from internal solutions to external solutions.</p> <p>What you should be careful of however, is storing personal data of other people in the cloud without adequate protection. So when working in the CERN professional context, be very careful when using cloud Services. Here are some guidelines to consider.</p> <ul> <li>Do you know how the cloud provider treats any data that you store with them? Have you checked? Does it offer adequate protection?</li> <li>Does your hierarchy know (and approve) of the cloud services you are using in your professional work?</li> <li>Is the processing of personal data you are engaged in compatible with the privacy notice for the Service?</li> </ul> <p>Further advice on the use of cloud Services can be obtained from the <a href="https://cloud-licence-office.web.cern.ch/">Cloud Licence Office</a> (CLO).</p> </div> </div> </div> </div> </div> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> Using Doodle? Watch out for accidental profiling! </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>Doodle is a great tool for organising meetings. There are also security measures you can take to avoid all participants from seeing all the other participants and you would be wise to engage them. Hint: Select hidden poll in settings.</p> <p>To give an example. Imagine you wish to organise a meeting to get together all people inside CERN that have children, you may accidentally create a public list of people, their profile (having children) and their presence at a given place and time. Furthermore this list will be accessible and viewable by anyone whether they were invited by you or not. You cannot assume the URL you give to possible participants will remain protected.</p> <p>This is a violation of the privacy rights of individuals as you have created and published a profile by not taking appropriate technical measures to protect their privacy.</p> <p>So be careful to use all the security measures at your disposal.</p> </div> </div> </div> </div> </div> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> Using Google Analytics on your website? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>The google terms and conditions, that you must agree to, contain a number of specific obligations concerning privacy. Please be aware that these are not optional!</p> <p>The most important are:</p> <p>"You will not and will not assist or permit any third party to, pass information to Google that Google could use or recognize as personally identifiable information"</p> <p>"You must post a Privacy Policy and that Privacy Policy must provide notice of Your use of cookies that are used to collect data."</p> <p>"You must disclose the use of Google Analytics, and how it collects and processes data"</p> <p>"You will use commercially reasonable efforts to ensure that a Visitor is provided with clear and comprehensive information about, and consents to, the storing and accessing of cookies or other information on the Visitor’s device where such activity occurs in connection with the Service and where providing such information and obtaining such consent is required by law."</p> <p>"You must not circumvent any privacy features (e.g., an opt-out) that are part of the Service."</p> <p>Source: <a href="https://www.google.com/analytics/terms/us.html">https://www.google.com/analytics/terms/us.html</a></p> <p> </p> </div> </div> </div> </div> </div> <h3>Data Subject Rights</h3> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> How can I access my personnel record or get a copy of it? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>When you are a member of the personnel at CERN and you want to access data contained in your personal administrative files (Personal Records, MERIT, medical and Pension Fund files) or get a copy of them, you have the choice to exercise this right:</p> <ol> <li> <p>either by referring to § 9 of the <a href="https://cds.cern.ch/record/1202760/files/CERN_Circ_Admin_en_10_rev02.pdf?">Administrative Circular no. 10</a> (AC 10): every member of the personnel has the right to consult their personal record, in presence of a Human Relations Advisors (HRA).<br> A delay to exercise this right is not specified in AC 10 and the files are to be consulted in general either in the premisses of the Records Office, or in the office of or via the HRA. They can make you also copies of documents, if applicable.<br> If you want to proceed in this way, please contact directly your HRA or the Records Office, and don't submit a Data Subject Right Request.</p> </li> <li> <p>or by referring to OC 11, which defines a delay of 90 days for granting access.<br> If you prefer this way, you will find corresponding information about the exercise of your <a href="https://privacy.web.cern.ch/right-access">right to information</a> on this web site.</p> </li> </ol> </div> </div> </div> </div> </div> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> How does the Office of Data Privacy handle misprocessing reports? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>Misprocessing reports are followed up by the Office of Data Privacy (ODP) in the following way:</p> <ol> <li> <p>Fact Finding<br> First, the ODP establishes the facts pertaining to the processing of personal data concerned. This is typically done in collaboration with the services involved to find out what was done by whom, when and why. But also the study of applicable documentations, regulations, etc. are part of the fact finding.</p> </li> <li> <p>Compliance Check<br> Then, the ODP assesses whether the processing was/is compliant with Operational Circular no. 11 (OC 11). The ODP checks if essential principles of processing are respected, if a lawful basis exist, if data subject rights are observed, etc.</p> </li> <li> <p>Recommendations<br> Furthermore, if appropriate, the ODP tries to identify ways to bring the processing into compliance and recommends the services concerned specific measures for doing so. This can be for example: “Please, publish a privacy notice.”, or “Delete the data that is no longer needed.”, or “Carry out a Privacy Impact Assessment to analyse risks and identify suitable mitigation measures.”</p> </li> <li> <p>Follow-up<br> Finally - as an “extra step” not defined in OC 11 - the ODP gives the services concerned the opportunity to react on the recommendations, for instance by committing to implement them in a certain time-frame.</p> <p>The reason the ODP has added this extra step is that OC 11 does not provide for follow-up of recommendations, while giving data subjects the right to lodge a complaint if they are dissatisfied, provided that their own personal data is affected by the misprocessing.</p> <p>Thus, data subjects have sufficient elements allowing them to decide whether they would like to file an official complaint with the Data Protection Commission.</p> </li> <li> <p>Documentation<br> The steps above are documented in an evaluation report that is shared with the complainant and the services concerned. A copy is sent also to the Data Protection Commission for information.</p> </li> </ol> <p>As a principle, the ODP handles the reports in a confidential way by not disclosing the identity of the complainant to the services involved. However, this is not always possible, in particular when the own personal data of the complainant are concerned.</p> <p>OC 11 does not define a time limit for the handling of misprocessing reports. The ODP tries to do its best to quickly investigate, evaluate and recommend. Unfortunately, the ODP often faces an important work load, which generates certain delays.</p> </div> </div> </div> </div> </div> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> Why can’t I get a copy of all data CERN holds about me? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>The responsibility for data protection at CERN is decentralised and organised in a particular way: Controlling Services are accountable for their processing activities. Consequently, data subject rights are to be exercised with regard to the personal data held by a specific Controlling Service.</p> <p>It is not possible to satisfy a general request covering "all the information CERN helds about me". Bearing in mind that CERN's service catalogue contains currently over 600 active services, granting such a request would involve a disproportionate effort.</p> <p>Therefore you should identify the Controlling Services concerned, in order to formulate the desired request to access personal data.</p> <p>CERN's <a href="https://CERN.service-now.com/service-portal?id=layered_privacy_notice">Layered Privacy Notice</a> contains the list of Controlling Services that have published their privacy notice, allowing you to understand which personal data they process.</p> <p>In case you are not sure which Controlling Service is responsible for the processing activity you are interested in, the Office of Data Privacy is available to provide you advice.</p> </div> </div> </div> </div> </div> <h3>Photos and Videos</h3> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> Are we allowed to use CDS photos on our website, without a written authorization from the people in the photo? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>If the people on the photo are part of a crowd and can't be individually identified, you can publish the photo.</p> <p>Else, the purpose of the image rather than the image itself should be your starting point.</p> <p>If you intend to use the image to provide information about a certain aspect of CERN's activities, and the people who are photographed are essential, you do not need their written consent.<br> This could be the case for photos featuring persons having acquired a certain notoriety, e.g. a head of state, a famous actor, during their visit at CERN; or for the photo of CERN's Director-General at an official event of the Organization.</p> <p>If the people are interchangeable and the photo is used as a genre image, you are required to obtain the written consent of the person concerned.</p> <p>For purposes such as illustration of web sites (e.g. to show the ambience during lectures, the diversity of the participants, etc. to attract more candidates) the photo of an individual is not essential, but rather a “nice-to-have”. Therefore, you would not be able to demonstrate a legitimate interest.</p> <p>In conclusion, consent would be the most appropriate lawful basis.</p> <p>Please note that for being valid, the consent must be freely given, clear, unambiguous and separate from other terms. You have to inform the individuals about the purpose of the processing (that means: what will be done with the photo? Who has access? When will it be deleted?) when you ask them for consent. Individuals must actively opt in by ticking a box, signing a document, providing an affirmative response to a verbal statement etc. The evidence of consent must be recorded (when, where and how it was given).<br> And: Consent must be as easy to withdraw as to give!</p> <p>And don’t forget, as controlling service you must document your processing operations in a RoPO!</p> </div> </div> </div> </div> </div> <h3>E-mail</h3> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> Can I use mailing lists to contact people? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>While it might seem normal to contact people through mailing lists there are a number of considerations you should make:</p> <ul> <li>Does the individual reasonably expect to be on a mailing list and be contacted?</li> <li>Will the purpose for future communications be related to the original purpose for creating the list?</li> <li>Can the individuals remove themselves from the mailing list easily?</li> </ul> <p>When in doubt<strong> you should always ensure you have obtained the consent of the individual</strong> through an "opt-in" checkbox to receive further information.</p> <p>An example case are events involving external registrants. While it might be reasonable to expect communication after registering for an event that only continues up to the time the event has taken place. Subsequent communications should only be made with the consent of the individual, which should be gathered at the time of registration. An option to subsequently opt-out should be presented in future communications with the individuals.</p> <p>Another example might be team or collaboration mailing lists. It is a reasonable expectation that communications will be made to the individuals during the time of the project, but at the end of the project the individuals should agree to continuing communications if they wish to receive them by an "opt-in" mechanism. An option to subsequently opt-out should be presented in future communications with the individuals.</p> <p> </p> <p>When sending an e-mail you might be tempted to put multiple recipients in the TO: list. Under many situations this is normal (contacting specific colleagues). However, presuming there is a justifiable reason for sending the mail, then you should not, in general, be revealing the list of names to everyone, as this exposes personal information in a public manner and may negatively impact the expectation of privacy.</p> <p>To avoid this,<strong> you should use the BCC (Blind Carbon Copy) mechanism of e-mail clients</strong>, not TO: or CC:, to send to a list of recipients such that no-one else can see who else has received the message.</p> </div> </div> </div> </div> </div> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> Is the creation of an e-groups list processing of personal data? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>Creating lists of people based on specific personal data, for e.g. nationality, is processing of personal data. And it can lead to profiling groups of people unintentionally.</p> <p>Creating lists should be done for clear, identifible and justifiable purposes. The best way to manage lists is through "self registration" allowing people to add or delete themselves.</p> <p>Dynamic lists should be treated with extreme care as their contents can be used to profile segments of the population so be sure to ensure that access to the members of the list are well protected.</p> <p>In most situations <strong>you should not transfer the list outside CERN</strong> to other organisations or persons.</p> </div> </div> </div> </div> </div> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> May I send personal data via e-mail? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>E-mail necessarily generates multiple copies in multiple locations and a number of people have access to e-mail systems. Preferred mechanisms would allow controlled access to the personal data and the possibility of deletion when the purpose of processing has expired. </p> <ul> <li>The use of e-mail for communicating personal data is to be avoided wherever possible.</li> <li>If e-mail is justified, attachments containing personal data should always be encrypted.</li> <li>Secure collaboration workspaces are the preferred mechanism.</li> </ul> </div> </div> </div> </div> </div> <h3>Document Handling</h3> <div class="carousel-cern-item"> <div class="panel panel-default"> <div class="panel-heading"> <h4 class="panel-title"> <a class="collapsed"> <div class="field field--name-node-title field--type-ds field--label-hidden field--item"> Is it acceptable to print documents containing personal data on a printer in my corridor? </div> </a> </h4> </div> <div class="panel-collapse collapse" aria-expanded="false" id=collapse> <div class="panel-body"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p>No. If the printer is easily accessible by other persons, the confidentiality of the information in the document may be compromised. This would be then considered as a data breach.</p> <p>Documents with personal data must not be open to prying eyes, and they should be safe from taken by mistake by somebody else.</p> <p>Therefore you should enable the Secure Print option for all of your printing at CERN, by following these easy <a href="https://home.cern/news/announcement/cern/secure-print-how-ensure-print-confidentiality-and-reduce-paper-waste" target="_blank">instructions</a>.</p> <p>More recommendations about the secure handling of paper documents can be found in our <a href="https://privacy.web.cern.ch/guidelines-handling-paper-documents">corresponding guidelines</a>.</p> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </main> <footer role="contentinfo"> <div class="row cern-footer"> <div class="col-xs-12 col-sm-3 col-md-3 col-lg-3 footer-first-col"> <div class="region region-footercolumn1"> <section id="block-privacy" class="block block-block-content block-block-contenta2131a28-0086-4bc8-8739-6b0575e8b093 clearfix"> <h2 class="block-title">Privacy</h2> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><a href="https://home.cern/data-privacy-protection-policy" target="_blank">CERN's Data Privacy Protection Policy</a></p> <p><a href="https://cern.service-now.com/service-portal?id=layered_privacy_notice" target="_blank">Layered Privacy Notice</a></p> </div> </section> </div> </div> <div class="col-xs-12 col-sm-8 col-md-8 col-lg-8 footer-second-col"> <div class="row">  <div class="col-sm-5 col-md-4 col-md-offset-0 col-lg-4 col-lg-offset-0"> </div>  <div class="col-sm-6 col-sm-offset-1 col-md-4 col-md-offset-0 col-lg-4"> <div class=" mb-4"> </div> </div>  <div class="col-sm-6 col-sm-offset-6 col-md-4 col-md-offset-0 col-lg-4 col-lg-offset-0"> <div class=" mb-4"> <div class="region region-footercolumn4"> <section id="block-contactus" class="block block-block-content block-block-contentda82eef2-f334-4a0f-baaa-879a77aa70ca clearfix"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><ul> <li>CERN</li> <li>Esplanade des Particules 1</li> <li>P.O. Box</li> <li>1211 Geneva 23</li> <li>Switzerland</li> </ul> </div> </section> </div> </div> </div> </div> </div> <div class="col-xs-1 col-sm-1 col-md-1 col-lg-1 footer-last-logo"> <a href="https://home.cern/" title="CERN" target="_blank"><img src="/themes/custom/cern-theme/logo.svg" alt="CERN"/></a> </div> </div> <div class="copy-wrapper light"> <a href="https://copyright.web.cern.ch/"> Copyright </a>  © 2024 CERN</div> </footer> </div> <script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","pathPrefix":"","currentPath":"FAQ","currentPathIsAdmin":false,"isFront":false,"currentLanguage":"en"},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"ajaxPageState":{"libraries":"eJxdj20OwjAIhi_UjSM1tENtZKUWOt3tbedijH-Ah5fPIGJqFQsUKbJRdeGbMRG2VFykmv1Cm1dDawqDp87Th089aWHc_UXqiqaAMUpdkuRetTPpjcjO0jE3YIVfOJSASnBlCchHV8rXIx-ZMP8L9LLu77DUVpDnE12_QZqNc-J4ZwfJFIWd7mq0wljhWvIFzfpkhQs-PCe1uQfTCNyW6Klw2HmVpTG9AexDc-g","theme":"cernclean","theme_token":null},"ajaxTrustedUrl":[],"data":{"extlink":{"extTarget":true,"extTargetNoOverride":false,"extNofollow":false,"extNoreferrer":true,"extFollowNoOverride":false,"extClass":"ext","extLabel":"(link is external)","extImgClass":false,"extSubdomains":true,"extExclude":"","extInclude":"","extCssExclude":"","extCssExplicit":"","extAlert":false,"extAlertText":"This link will take you to an external web site. We are not responsible for their content.","mailtoClass":"mailto","mailtoLabel":"(link sends email)","extUseFontAwesome":false,"extIconPlacement":"append","extFaLinkClasses":"fa fa-external-link","extFaMailtoClasses":"fa fa-envelope-o","whitelistedDomains":[]}},"bootstrap":{"forms_has_error_value_toggle":1,"modal_animation":1,"modal_backdrop":"true","modal_focus_input":1,"modal_keyboard":1,"modal_select_text":1,"modal_show":1,"modal_size":"","popover_enabled":1,"popover_animation":1,"popover_auto_close":1,"popover_container":"body","popover_content":"","popover_delay":"0","popover_html":0,"popover_placement":"right","popover_selector":"","popover_title":"","popover_trigger":"click","tooltip_enabled":1,"tooltip_animation":1,"tooltip_container":"body","tooltip_delay":"0","tooltip_html":0,"tooltip_placement":"auto left","tooltip_selector":"","tooltip_trigger":"hover"},"displayFormats":{"accordion":{"titleColor":null}},"user":{"uid":0,"permissionsHash":"f2749affca730240d3d974bc1d2d01afe18e8d84656a894e71f71b7e65e5db61"}}</script> <script src="/core/assets/vendor/jquery/jquery.min.js?v=3.7.1"></script> <script src="/core/assets/vendor/underscore/underscore-min.js?v=1.13.6"></script> <script src="/core/assets/vendor/once/once.min.js?v=1.0.1"></script> <script src="/core/misc/drupalSettingsLoader.js?v=10.2.6"></script> <script src="/core/misc/drupal.js?v=10.2.6"></script> <script src="/core/misc/drupal.init.js?v=10.2.6"></script> <script src="/core/assets/vendor/tabbable/index.umd.min.js?v=6.2.0"></script> <script src="/core/assets/vendor/js-cookie/js.cookie.min.js?v=3.0.5"></script> <script src="/modules/custom/cern-dev-status/js/cern_dev_status.js?v=3.1.2"></script> <script src="/modules/custom/cern-dev-status/js/cern_dev_status_expand.js?v=3.1.2"></script> <script src="/core/misc/progress.js?v=10.2.6"></script> <script src="/themes/contrib/bootstrap/js/misc/progress.js?sf2l56"></script> <script src="/core/assets/vendor/loadjs/loadjs.min.js?v=4.2.0"></script> <script src="/core/misc/debounce.js?v=10.2.6"></script> <script src="/core/misc/announce.js?v=10.2.6"></script> <script src="/core/misc/message.js?v=10.2.6"></script> <script src="/themes/contrib/bootstrap/js/misc/message.js?sf2l56"></script> <script src="/core/misc/ajax.js?v=10.2.6"></script> <script src="/themes/contrib/bootstrap/js/misc/ajax.js?sf2l56"></script> <script src="//framework.web.cern.ch/framework/3.0/js/prism/prism.js"></script> <script src="/themes/custom/cern-base-theme/js/cernbase.js?sf2l56"></script> <script src="/themes/custom/cern-base-theme/js/components/social-sharing.js?sf2l56"></script> <script src="/themes/custom/cern-base-theme/js/components/footer.js?sf2l56"></script> <script src="/themes/custom/cern-base-theme/js/views/agenda-views.js?sf2l56"></script> <script src="/themes/custom/cern-base-theme/js/views/faq-views.js?sf2l56"></script> <script src="/themes/custom/cern-base-theme/js/views/news-views.js?sf2l56"></script> <script src="/themes/custom/cern-base-theme/js/views/resources-views.js?sf2l56"></script> <script src="/themes/custom/cern-base-theme/js/views/stories-views.js?sf2l56"></script> <script src="/themes/custom/cern-base-theme/js/views/taxonomies-views.js?sf2l56"></script> <script src="/themes/custom/cern-base-theme/js/views/search-views.js?sf2l56"></script> <script src="/themes/custom/cern-base-theme/js/views/common-views.js?sf2l56"></script> <script src="/themes/custom/cern-base-theme/js/box-effects.js?sf2l56"></script> <script src="//framework.web.cern.ch/framework/3.0/js/colorbox/jquery.colorbox-min.js"></script> <script src="//framework.web.cern.ch/framework/3.0/js/scroll-magic/ScrollMagic.min.js"></script> <script src="//framework.web.cern.ch/framework/3.0/js/scroll-magic/text-effects.js"></script> <script src="/themes/custom/cern-theme/js/anchor-fix.js?sf2l56"></script> <script src="/themes/custom/cern-theme/js/cernclean.js?sf2l56"></script> <script src="/modules/contrib/extlink/extlink.js?v=10.2.6"></script> <script src="/themes/custom/cern-base-theme/sass/bootstrap/javascripts/bootstrap.min.js?sf2l56"></script> <script src="/themes/contrib/bootstrap/js/drupal.bootstrap.js?sf2l56"></script> <script src="/themes/contrib/bootstrap/js/attributes.js?sf2l56"></script> <script src="/themes/contrib/bootstrap/js/theme.js?sf2l56"></script> <script src="/themes/contrib/bootstrap/js/popover.js?sf2l56"></script> <script src="/themes/contrib/bootstrap/js/tooltip.js?sf2l56"></script> <script src="/modules/custom/cern-display-formats/assets/js/accordion.js?v=1.x"></script> <script src="/modules/custom/cern-components/patterns/molecules/faq-list/js/faq-list.component.js?sf2l56"></script> <script src="/modules/custom/cern-toolbar/assets/js/cern_toolbar.js?v=1.x"></script> </body> </html>