Skip to content

Legal

Privacy noticeTerms of serviceCancellation and refundsData processing agreementCookiesYour dataImprint

Your data

Last updated 2026-11-02

You have rights over the personal data we hold about you. This page explains how to use them, and (because OrganMatch™ holds scientific records as well as account details) what we can and cannot remove. Our privacy notice lists what we hold and why.

How to make a request

Write to contact@organthis.com or support@organthis.com (both work) from the email address on your account, and tell us what you would like. If you write from another address, we ask you to confirm the request from the address on your account first. We never ask for a copy of an identity document.

Get a copy of your data

We send you a machine-readable export of your account details, protocols, experiments, lab book records, saved items and your protocol-use records. On a plan that includes it, you can also export your Lab Book runs yourself from your dashboard at any time.

Correct something

Some profile details, such as your name, organisation and display currency, can be changed directly in your account settings. If something is wrong that you cannot edit yourself, write to us and we will correct it. We do not change records that document what happened at the time, such as audit records, invoices and published citations; if one of them is wrong, we add a correction instead.

Close your account

You can close your account yourself:

  1. Sign in and open Dashboard, Account.
  2. Press Close my account, enter your password, type CLOSE, and press Close my account again.

You can also write to support@organthis.com (or contact@organthis.com) from the email address on your account. If your organisation has a paid plan that you manage, cancel it on the Billing page first (see Cancellation and refunds).

What happens when you close it yourself:

  • We sign you out on every device at once and lock the account.
  • We erase it about 14 days later, on the date the closing page shows. It can take longer if something must be settled first, such as the copy of your data you asked for. Until then, the link in the email we send you keeps your account, unless a legal request makes us erase it sooner.

When we close your account, we erase it. Your name, email, organisation, profile, workspace, SOP progress and notifications are removed, and so are your own Lab Book runs. Runs you recorded inside an organisation that other people belong to stay with that organisation, because they are part of its records. Your records of how you used protocols are deleted too: we delete them when you close your account, or earlier if you ask.

Before we erase anything, we ask you whether you want a copy first. On the closing form, tick Email me a copy of my data before it is erased. If you tick it, your account is erased only after we have sent you the copy.

What we keep, and why

Some records cannot simply be deleted, because doing so would damage the scientific and financial integrity of the platform for other people, or because the law requires us to keep them.

  • Audit records stay, linked to a marker that replaces your account instead of your name and email. They exist so that a change to a shared protocol remains attributable and reversible. One exception: the audit trail of an organisation is sealed against any change, so if you were a member of an organisation, its administrators can still see your email address next to the actions you took there.
  • Published protocols that other researchers are relying on stay available, with your authorship attribution removed if you ask. If you want the protocol itself withdrawn rather than anonymised, tell us and we will treat it as a withdrawal request.
  • Protocols you did not publish are archived, not erased, and stay out of the catalogue.
  • Financial records (invoices, credit notes, payments, billing details, subscription and licence history, and your confirmation at checkout that you may act for the organisation) are kept for seven years from the end of the calendar year they belong to, because Austrian tax and commercial law requires it (§132 BAO, §212 UGB). Closing your account does not remove your account reference from them.
  • Your acceptance of our Terms of service (which version you accepted and when) is kept as a record of the agreement, linked to the same marker.
  • Backups of the database are kept for about two weeks, with a copy on a separate Hetzner storage box in the European Union, so erased data can remain in a backup until it expires. If we ever have to restore a backup, we erase your data again.

The marker is not anonymous in every case: through the financial records we keep, it can still be linked to you. That link is used only for those records.

Object or restrict

You can object to us using your data for a purpose based on our legitimate interests, or ask us to pause using it while a question is resolved. Tell us which use you mean. Where we can stop that use for you alone, we do, and confirm it. Some uses, such as recording which protocols an account uses, cannot be switched off for a single account today. If your objection to one of them succeeds, we delete the records concerned or, if you prefer, close your account, and we tell you which we did.

If you are not satisfied

Write to us first and we will try to put it right. You also have the right to complain to the data protection authority in the country where you live or work.

Our lead supervisory authority is the Austrian data protection authority:

Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Wien, Austria
dsb@dsb.gv.at · www.dsb.gv.at

How long we take

We answer within one month. If a request is complex we may extend that by two further months, and we will tell you why within the first month. If we cannot do part of what you ask, we tell you which part and why.