Privacy

Privacy Notice

This notice explains how personal data is processed when you use the gated access functions of MAR Article 17 Analytics. Public dashboard views and public issuer search do not require registration.

Controller

The controller is Dr. Ralf Elsas-Nicolle. Contact details are provided in the imprint. Ludwig-Maximilians-Universitat Munchen is not the operator of this website.

Data We Process

For gated access, we process the email address you enter, the issuer LEI selected for the access request, confirmation status and timestamps, a technical access token, and any optional message you submit. Server logs may also contain standard technical metadata needed for security and operation.

Purpose

We use this data to operate double opt-in access, prevent abuse, document consent, unlock registered research downloads, understand professional or academic interest in the database, and respond if you leave a message.

No Sale of Contact Data

We will not sell email addresses, messages, or access records. We will not provide them to third parties for their own advertising or marketing. Marketing email would require separate consent.

Service Providers

The website is hosted on Vercel. Supabase is used for authentication, access records, and private file storage. Brevo is used for transactional email delivery. These providers process data only to deliver the website, authentication, storage, and email functions.

Retention and Deletion

Access records are kept while the research access service is operated and while they are useful for consent documentation, security, and abuse prevention. You may request deletion of your access record by contacting the controller. Some technical logs may be retained for a limited period where required for security or operational integrity.

Your Rights

Subject to the conditions of the GDPR, you may request access, correction, deletion, restriction, objection, and data portability. You may also lodge a complaint with a competent supervisory authority.

Cookies

After confirmed access, the website may set a technical access cookie for the browser session so that issuer profile downloads and registered downloads do not require repeated confirmation. This cookie is used only for access control.