Merge pull request #18 from usegalaxy-eu/walle

Update access and add automated scanning

_data/pii.yml

@@ -25,7 +25,6 @@ data:
       access:
         - BG
         - SJ
-        - HR
         - SS
         - MK
         - JD
@@ -43,10 +42,8 @@ data:
       access:
         - BG
         - SJ
-        - HR
         - SS
         - MK
-        - JD
       disposal: After 24 hours
       consent: false
       over_13: true
@@ -59,18 +56,20 @@ data:
       reason: Generated as a result of your use of the system
       handling: |
           We store the data securely in our database which only the
-          UseGalaxy.eu administrators have access to (BG, SJ, HR)
+          UseGalaxy.eu administrators have access to.
+
+          We perform automated security scans on job data to protect our systems against
+          malicious software. The scans take place on our servers and no data is
+          transferred.
 
           Additionaly, pseudonymized data is shared publicly for analysis by
           the Galaxy Project in order to optimise job scheduling and memory
           allocation, allowing us to run more jobs per node than we used to.
       access:
         - BG
         - SJ
-        - HR
         - SS
         - MK
-        - JD
       disposal: Never
       consent: false
       over_13: true
@@ -85,13 +84,16 @@ data:
         Stored permanently until you request deletion. You and the Galaxy
         administrators have access to this data. The Galaxy administrators
         will not access your data except in order to resolve bugs together with you.
+        
+        We perform automated security scans on datasets to protect our systems against
+        malicious software. The scans take place on our servers and no data is
+        transferred. If our systems report malicious data or abuse,
+        the data may be subjected to a manual check by our administrators.
       access:
         - BG
         - SJ
-        - HR
         - SS
         - MK
-        - JD
       disposal: Never / On Request
       consent: true
       over_13: true
@@ -108,7 +110,8 @@ data:
         - HR
         - BG
         - AE
-        - BB
+        - MK
+        - SS
       disposal: Never / On request
       consent: n/a
       over_13: true
@@ -122,10 +125,10 @@ data:
       handling: |
         Documents are access controlled and limited to a small number of people specified by email address, no link-based access is used.
       access:
-        - HR
         - BG
         - AE
-        - BB
+        - MK
+        - SS
       disposal: Never / On request
       consent: n/a
       over_13: true

tos.md

@@ -16,7 +16,15 @@ investigator before uploading it to any public site, including this Service. If
 you have protected data, large data storage requirements, or short deadlines
 you are encouraged to set up your own local Galaxy instance and not use this
 Service. Your access to the service may be revoked at any time for reasons
-deemed necessary by the operators of the Service.
+deemed necessary by the operators of the Service. This includes, but is not limited
+to users who exploit our systems, by e.g. using our services for purposes that are
+not related to science, research and education in the broadest sense, but e.g. by executing
+software that leverages compute resources for the sole purpose of generating revenue.
+When our systems detect abusive behavior originating from your account, 
+we might disable your account automatically and inform you by email about the action
+and your possibilities to lodge an objection. This automated process is required to protect
+our systems and a manual process would not cope with the speed of the operations.
+
 
 You acknowledge that you are responsible for compliance of all of your data
 processing activities carried out on the Galaxy Service with applicable laws