We offer a detailed privacy policy and have a legal framework that ensures data subjects have as strong protection as under GDPR. See also Is Zenodo compliant with the EU GDPR and/or the Swiss FADP?
Can we conclude a Data Processing Agreement (DPAs) with Zenodo?
We are unfortunately not able to conclude Data Processing Agreements (DPAs) with individual institutions. Zenodo is a service offered for free by CERN. We're an intergovernmental organizational and not a commercial provider, and we do not have the capacity to sign DPAs with the >9000 different research organisations that are using Zenodo. In addition, DPAs refer in general to GDPR provisions that are not applicable at CERN.