Skip to main content

Federation identity, how it works

Updated 26 May 2026

Some SYFERS tools use a shared login through People. This allows your identity to be recognised across several tools. The data you can see and the actions you can take depend on your permissions in each tool.

The shared sign-in lives at people.syfers.eu. That service hosts the identity record (your email, session, and magic-link login) for every federation app.

Your work data, such as evaluations, decisions and documents, falls under the arrangements of the tool in which you use it. A shared identity does not grant general access to that data.

Who is responsible for what

For your identity data (email, session, login):

  • people.syfers.eu and the app you are using are joint controllers in the sense of Article 26 GDPR.
  • Either side can answer access, correction, or deletion requests.
  • We have a single point of contact at privacy@syntrociety.org that routes the request to the right team.

For your app data (the things you do inside the app):

  • Only the app you are using is the controller.
  • The app's own privacy notice explains what it holds, why, and for how long.

What this means in practice

For questions about your personal data, send one message to privacy@syntrociety.org. We will identify which services need to handle your request. People provides a personal area for viewing your contact details and requesting deletion.

A deletion request may involve several services. Which data is deleted, and which must be retained under a legal obligation, is determined when the request is handled.

When this arrangement applies

This page applies to compass.syfers.eu, chart.syfers.eu, and lens.syfers.eu. The marketing surfaces syfers.eu and syntrociety.org are sole controllers of their own visitor data and do not use the shared sign-in.

Questions about identity data go to privacy@syntrociety.org.