Privacy & Cookies

The Climate Risk Database (CRD) collects only the personal data it needs to run accounts and credit contributors. It uses no advertising or analytics cookies and does not sell or share your data for marketing.

Who is responsible

The Climate Risk Database is run by the Resilience Academy, coordinated by the University of Turku (Finland), which acts as the data controller for personal data processed through this website. Questions and requests about your data: resilienceacademyorg@gmail.com.

What we collect

• Account details – username, email address, password (stored only as a secure hash) and, if you add them, your name, organisation, position, city, country and profile text.
• Your contributions – datasets, maps, documents, stories and their metadata, which list you as owner or contact. Published resources and your public profile details (name, organisation and contribution counts) are visible to other registered users.
• Activity records – what you created, uploaded or changed and when, shown in activity feeds and used for statistics and the contributor leaderboard.
• Server logs – IP address, browser and pages requested, kept for security and troubleshooting.
• Messages – when you use a “Contact” button, your message is emailed to the member or group; your email address is shared with them only as the reply-to address. The site does not keep a copy.

Why we use it

To create and secure your account, publish and credit your contributions, show verification and quality information, answer your requests and keep the service running. The legal bases are the performance of the service you signed up for and our legitimate interest in operating a secure, well-documented research data platform (EU General Data Protection Regulation, Art. 6(1)(b) and (f)).

Cookies

Only cookies needed for the site to work are used:

• sessionid – keeps you signed in.
• csrftoken – protects forms against cross-site request forgery.
• django_language – remembers the language you chose.

Your browser may also store small preferences locally (for example the last page you visited, so the “back” link in the map viewer works). You can clear cookies and site data in your browser settings at any time; you will then need to sign in again.

Services from other providers

• Google Fonts – the site’s typefaces are loaded from Google, which receives your IP address.
• OpenStreetMap – background map tiles are loaded from OpenStreetMap servers.

Where it is stored and for how long

Data is stored on University of Turku servers in Finland, within the European Union. Account data is kept while your account exists; published contributions and their activity history are kept as part of the research record unless removed. Server logs are kept only as long as needed for security.

Your rights

You can see and correct most of your data yourself in Account settings. You can also ask us for a copy of your data, to correct or delete it, to restrict or object to its use, or to transfer it. If you think your data is handled unlawfully, you can complain to the data protection authority (in Finland: the Office of the Data Protection Ombudsman, tietosuoja.fi).