General Terms of Use for CSC's Services for Research and Education

Effective as of January 28 2021

  1. Use of the services is intended for Finnish academic research and higher education, unless otherwise agreed in advance
  2. Research results should be public
  3. Registering an Account and becoming a User
  4. As a User, you are responsible for the use of the Account and Services
  5. User and Project management
  6. User Content
  7. Processing Personal Data in User Content
  8. Only limited backups are taken and not guaranteed
  9. Service level declaration and limited warranty
  10. How and when are User accounts terminated?
  11. Contacting CSC

Thank you for using CSC – IT Center for Science Ltd.'s ("CSC") services for research (the "Services"). By registering a CSC user account ("Account") or using any of the Services referred to in these General Terms of Use ("Terms"), you (the "User") are agreeing to these Terms. Please read them carefully.

For some services, additional terms or requirements may apply. Additional terms are available with the relevant services, and those additional terms become part of your agreement with CSC if you use those services. CSC reserves the right to change these Terms. When we make material changes to these Terms, we'll provide the Users with prominent notice as appropriate under the circumstances, e.g. by displaying a prominent notice within the Services or by sending you an email.

1. Use of the services is intended for Finnish academic research and higher education, unless otherwise agreed in advance

The rights to use the Services are granted for academic research and higher education by Finnish universities and universities of applied sciences, and by state research institutes, if not otherwise agreed.

The User can only use the Services for the purposes for which they have been granted. The purpose is agreed when CSC opens an Account or approves applications. The purpose may be further specified in a research plan, objectives, proposal, or other definition of scope.

Use of Services may involve additional license conditions by third parties. For example, manufacturers or external authorities may limit the use of services for research purposes only or based on the nationality or affiliation of Users. In cases where extra license conditions are applied, CSC will make them available to the User.

Users are responsible for making sure that their use of the Services is in compliance with laws, including international law, sanctions and other restrictions, and any applicable regulations and license conditions.

2. Research results should be public

Unless otherwise agreed, research results must be released publicly, preferably for peer review.

The User agrees to cite that the Services have been used to produce the results in publications and presentations. How to cite CSC in a paper.

The User commits to follow good research practices.

3. Registering an Account and becoming a User

To use some of the Services you must apply for an Account as described on the CSC web pages. CSC reserves the right to reject a User application.

Access to an Account is controlled by credentials, for example username and passwords.

You must use the email address provided by your organization (e.g. university or company) as your primary contact information. Please contact CSC if you do not have an email address provided by your organization.

Users whose home organizations are identity providers in the Haka, Virtu, or any other agreed identity federation must have an association between their CSC user account and home organization's identity.

CSC maintains a customer register and a customer register information sheet in accordance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and national data protection regulation. The CSC Customer Register Privacy Policy contains a detailed description.

CSC requires User contact details to notify users about changes to these terms, service interruptions, service information, and other important issues.

Users are responsible for keeping their contact details up to date at all times.

CSC is entitled to publish general information about the User and the purpose for which the user rights have been granted. These are: the user's name, organization, science area, project name, description and resource usage. In addition, general information may be visible to other users, e.g., the CSC user account name, email address, project identifier and last login time. We may transfer your data outside of the EU/EEA only in connection with services provided by third-parties, for example to comply with software license agreements.

4. As a User, you are responsible for the use of the Account and Services

Do not:

  • Share your credentials (e.g. password), leave them for others to see, or neglect any security responsibilities defined in the service description.
  • Misuse or abuse any CSC or third-party service or property, including intellectual property. Breaking the law is considered misuse.
  • Misuse or abuse User Content, credentials, or other confidential information.
  • Send or transmit harassing, abusive, libelous, obscene, or unsolicited (spam) communications.
  • Tamper with or deliberately disrupt system resources or network traffic to the Services.

Users agree to notify CSC promptly if their Account has been used without permission, if their credentials have been lost or stolen, or if they notice any breach to the Terms of Use.

Users are liable, even after the Account has been terminated, for damage and costs to CSC:

  • as a result of intentionally violating these terms.
  • as a result of intentionally violating 3rd party licensing conditions.

5. User and Project management

You need a CSC Project ("Project") to use some of the Services. Allocation of resources ("Billing Units") is based on Projects.

Every Project has a User who is a Project Manager. By default, he or she is the first member of the Project.

  • The Project Manager serves as a primary contact person between the Project and CSC.
  • The Project Manager is entitled to make decisions concerning the Content of the Project stored in the Services on behalf of the Project members.
  • The Project Manager can add members to the Project and remove them and is responsible for keeping the list of Project members up to date at all times.
  • The Project Manager is responsible for ensuring that the identity of each user added to the Project is vetted.
  • If leaving the Project, the Project Manager is responsible for transferring Project Manager duties to another member of the Project.
  • If the Project Manager’s account has been terminated and CSC cannot contact the Project Manager with reasonable effort, CSC may contact the project members or their organizations to find a new Project Manager. If no new Project Manager is found, the project will be closed.

A Project is valid for one year at a time, starting from the day of admission, unless agreed otherwise. CSC will notify the Project Manager before the expiration date of the Project. The Project Manager can close the Project if it is no longer needed.

Upon CSC's request, the Project Manager must report on the progress of the project and the use of the Services.

6. User Content

User Content ("Content") means the User's data, software, servers, systems, or processes that use or interact with the Services.

The User is responsible for the Content which they have stored in, or transmitted via, CSC's Services that it complies with all applicable laws and regulations, data policies, and these terms. If the Content includes sensitive or confidential information, the User is responsible for making sure that the Service used to handle the data complies with the required security measures.

CSC has the right to access User Content to secure the accessibility, the quality and the security, which includes, for example, keeping the information on CSC's IT service platform, automated monitoring for intrusion detection, taking backups, copying/moving Content, or reproducing faults. At all times, CSC protects the confidentiality of User Content as far as permitted by law.

No ownership rights or intellectual property rights of Content are transferred when using the Services, if not otherwise agreed.

Users are responsible for sharing of their Content according to the Project's and their own requirements. For example, if a User leaves a Project, they should ensure they transfer Project Content to another User of that Project.

Upon request, we will make a reasonable effort to provide the User with a copy of the User Content (to which the User has ownership or intellectual property rights) after account cancellation or termination. The User must make this request within 90 days of cancellation or termination and provide CSC with a location to store the copy of User Content. Copies of User Content may technically remain on Backup Storage, but access to the data will be strictly restricted.

7. Processing Personal Data in User Content

If User Content contains personal data or special categories of data (i.e. sensitive personal data), the User has to ensure that the service intended to process the data complies with the security level required for this kind of data.

In such a case, the User commits to take care of the Data Controller’s responsibilities as described in applicable data protection legislation. CSC acts as a Processor of the personal data.

CSC offers an IT service platform according to the service descriptions and these Terms of Use for the Users to process their Content on their own account. CSC implements and maintains the measures required by the security of the processing according to the service descriptions and the certified security system.

8. Only limited backups are taken and not guaranteed

CSC takes backup copies of some Content. This is defined in the relevant service description. However, CSC gives no guarantee for restoring any Content and declines any liability for files lost for any reason if not otherwise agreed.

CSC recommends that Users maintain an up-to-date copy of their content by other means if they cannot afford to lose it.

9. Service level declaration and limited warranty

CSC makes no warranty that the Services will operate error-free or without interruption or that any communication to, from, or through the Services will be completely secure. However, CSC aims to follow IT industry best practice service management and security measures.

Use of the Services is at the User's own risk, and CSC is not liable for any damages caused.

CSC reserves the right to modify or terminate any Service at any time.

10. How and when are User accounts terminated?

The CSC user account is valid for one year at a time, starting from the day of admission, unless agreed otherwise. CSC will notify Users well before the expiration date of the Account. The validity of the CSC user account may be continued as long as the Account is needed and the requirements are met.

The right to use our Services ends when the original purpose is no longer valid or the User has parted from the User's affiliated organization. If the User wants to continue the use of Services when affiliated to a new organization, they must contact CSC in order to verify their eligibility.

The User account and associated Content will be handled according to the corresponding service descriptions and their terms of use. CSC will notify the User about their expired Account via the contact information provided by the User before deleting User Content and Account.

The user account and associated services can be terminated or suspended by CSC without notice:

  • In the event of any unauthorized use of the Services.
  • If CSC has a justified reason to suspect that the Services are used contrary to these terms.

You can terminate your user account by giving notice to CSC via the contact information below. If no legal requirements are pending, the User account and associated Content will be deleted. This information cannot be recovered once the Account is terminated.

CSC will retain and use general User information (as defined in section 3) as necessary for reporting and statistical purposes, to comply with legal obligations, resolve disputes, and enforce agreements.

11. Contacting CSC

To contact CSC, email servicedesk@csc.fi or call +358 9 457 2821.

Users are also welcome to give feedback about these terms or any other aspect of our Services.