Privacy Statement

Scope of this statement

This Privacy Statement describes the practices of the Ruiz Human-Computer Interaction Lab for the public website at mytrackplus.org and provides general information about data protection, retention, and deletion for research studies that use the MyTrack+ platform. This website is separate from the research platform and does not collect, store, or process study data or health data.

A research study that uses MyTrack+ has its own approved materials describing the study's data practices. Those materials, rather than this website statement, apply to participation in that study.

This website is an unofficial website of the University of Florida, in that the university has no editorial responsibility or control over the content displayed here.

Protection, retention, and deletion of research study data

MyTrack+ uses administrative and technical safeguards to protect sensitive research study data. Study data is stored under a participant ID rather than a participant's name. Access is limited to authorized members of the research team, who sign in through their university's single sign-on. The mobile number needed to send study messages is stored encrypted. Participant feedback links are unique and expire six days after they are sent.

For data collected as part of a research study, the retention period and data protection practices for that particular study follow the Informed Consent Agreement signed before participation. Any deletion of study data, including whether and when deletion can be requested, is also governed by that agreement and applicable research or legal requirements.

To ask a question about study data or request its deletion, contact your research team or the principal investigator (PI) listed on your copy of the Informed Consent Agreement.

Information recorded in server logs

The site origin records limited technical information when it serves a request. This includes the visitor's Internet Protocol (IP) address, the requested path, the response status, the browser's user-agent information, and the date and time of the request.

The site origin records visitor IP addresses and retains its access and error logs for 30 days. The Ruiz HCI Lab uses these records to operate, secure, and troubleshoot the website.

Proxy and university network boundary

The web proxy in front of this site does not record access logs for this host. Proxy error logs can include client IP addresses and are retained for 30 days.

This site is hosted on equipment operated by the Ruiz HCI Lab and connected to the University of Florida network. Traffic to and from the site traverses university network infrastructure and may be monitored or logged by the university for security purposes. Any such records are controlled by the university, not the lab, and are governed by university policy. The lab does not assert that the university does or does not log a particular visit.

Sharing and disclosure of information

The Ruiz HCI Lab does not sell, rent, or trade your personal information. The lab does not share your data with third parties except:

• to the extent necessary to fulfill a specific request you have made, such as using a mailing service to send lab updates you asked to receive;
• as required to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

Florida public records law

The Ruiz HCI Lab is affiliated with the University of Florida, a public institution. Any communication or information you send to the lab may be subject to disclosure under Florida's public records law, Chapter 119 of the Florida Statutes. Information that falls under the definition of a public record may be disclosed to third parties upon request unless a specific legal exemption applies. This includes communications or records in the university's possession, such as logs if they are in its possession.

International visitors and EU GDPR rights

If you are visiting this website from the European Union (EU) or European Economic Area (EEA), the General Data Protection Regulation (GDPR) grants you specific rights regarding your personal data. Where applicable, these rights include:

• the right to access, correct, or request the erasure of your personal data;
• the right to restrict or object to the processing of your data;
• the right to data portability;
• the right to withdraw consent at any time for data processed on the basis of consent.

To exercise any of these rights, contact the lab using the details in the Contact section below.

Children's privacy

The Ruiz HCI Lab does not knowingly collect or solicit personal information from children under the age of 13. If the lab learns that it has inadvertently collected personal information from a child under 13 without verifiable parental consent, it will delete that information from its systems as quickly as possible.

External links

This website links to resources operated by the University of Florida and other organizations. The Ruiz HCI Lab does not control their privacy practices or content. Review the statement provided by an external website before sharing information with it.

Relationship to University of Florida policy

This statement describes Ruiz HCI Lab practice for this website. It does not supersede University of Florida policy; where this statement and university policy conflict, university policy governs.

University privacy information is available from the University of Florida privacy hub.

Changes to this statement

The Ruiz HCI Lab may update this statement when website practices or applicable requirements change. The Last Updated field will identify the effective version. The relationship-to-policy clause above will be reviewed whenever this statement is updated.

Contact

For questions or concerns about this statement, email mytrackplus@ruizlab.org.