Privacy policy for data sharing
About the service
AIDA Data Hub facilitates sharing of high-quality personal data on health originating from research and clinical diagnostics, as well as anonymised data and synthesized data of the same kinds. The latest revision of this document (“Privacy policy for data sharing”) was 2026-02-12.
What this privacy policy describes
This documents the processing of your data as an applicant and/or recipient of datasets. It does not document any usage of the received datasets.
What information we process
AIDA Data Hub processes and store details about your applications to datasets, your access to datasets and your download of datasets.
Additionally we process and store your name, email address, your identity at Life Science Login, supplied credentials as a researcher on medical data and information about your institution (such as its name, postal address and country). We also collect your IP addresses (where on the Internet you connect from).
Why do we do so?
Copyright to the datasets we share is held by the researchers who produced them. To share these copyrighted works, a license agreement (data sharing agreement) is typically established. To create the agreement and track its approval we need to keep the information about who has entered into the agreement (person and institution).
In our commitments to the data sharers we also need to collect information about the country the request comes from, as they might have policies restricting what nations data can be shared with. Many of the datasets also require us to provide details about applicants to the data sharers to allow for verifying other policies before sharing as well as follow-up of agreements (e.g. correct citations if publications are done using data shared under agreement).
Access logs and other security related information are required for fulfilling legal obligations.
What is the legal basis for our processing?
Parts of the processing is required for us to fulfill our commitments to the dataset copyright holders and to manage what datasets you should have access to. Since we are a Swedish government agency, there are also legal requirements to store most of our communications outside the agency as well as most documents (e.g. data sharing agreements) we create.
What are your rights?
You are entitled to know what data we process about you, and if anything is wrong, you are entitled to request to have that information corrected. You also have the right to know what the legal basis is for our processing, and how the information is used. If you are not happy with a decision we make, you have the right to appeal.
Who are we?
The data sharing is facilitated by AIDA Data Hub hosted at CMIV, Linköpings universitet. The legal entity is Linköpings universitet (Swedish corporate identity number: 202100-3096). Data sharing support can be reached at aida-data@nbis.se and you can reach the data protection officer for Linköpings universitet at dataskyddsombud@liu.se.