Skip to content

Privacy Policy

Before requesting resources, read the Terms of Usage and this Privacy Policy. By signing in to the User Dashboard, you accept the terms and acknowledge this policy.

Last updated: September 2026

The ICARUS | NTUA High-Performance Computing Infrastructure service is operated by the National Technical University of Athens (NTUA) and provides access to high-performance computing (HPC) resources and related computational services.

The National Technical University of Athens is committed to protecting the personal data of its users and processing such data in accordance with the General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679, as well as applicable Greek legislation.

1. Personal Data We Process

When you access and use ICARUS, your personal data may be processed as part of authentication, account management, access control and the provision of HPC services.

User authentication is performed through a SAML2-based identity infrastructure. During authentication, the Identity Provider (IdP) may provide ICARUS with the information necessary to identify the user and manage their account.

Depending on the Identity Provider and its configuration, this information may include:

  • username or unique user identifier,
  • first name,
  • last name,
  • email address,
  • institutional or organizational affiliation, where provided and required for access management.

In addition, information generated through the use of ICARUS may be collected and recorded where necessary for operating and administering the service, including:

  • user account information,
  • project and group information,
  • information concerning the allocation and use of computing resources,
  • information concerning the submission, execution and status of computational jobs,
  • activity and audit logs,
  • information required for security and access control,
  • technical support requests and communications submitted through the service.

2. Purposes of Processing

Personal data is processed only to the extent necessary to:

  • authenticate users and provide secure access to ICARUS,
  • create and manage user accounts,
  • manage projects, groups, resource allocations and access permissions,
  • provide and administer HPC services,
  • monitor and record the use of computing resources,
  • ensure the security, reliability and integrity of the infrastructure,
  • detect, prevent and investigate unauthorized access or misuse of the service,
  • provide technical support,
  • fulfil administrative, scientific and funding-related obligations, where applicable,
  • comply with legal and regulatory obligations.

The processing of personal data is carried out on the legal basis provided by applicable legislation. Depending on the purpose of a particular processing activity, processing may be based on:

  • the performance of a task carried out in the public interest or in the exercise of official authority,
  • compliance with a legal obligation,
  • ensuring the security and proper operation of NTUA's information and computing infrastructure.

Where consent is required as the legal basis for a specific processing activity, consent will be obtained in accordance with applicable legislation.

4. SAML2 Authentication

ICARUS uses federated authentication through SAML2. Authentication is performed by the user's Identity Provider and not by ICARUS itself.

ICARUS receives from the Identity Provider the identity information necessary for authentication, account creation and updates, and access management.

The ICARUS SAML Service Provider metadata are available at:

ICARUS SAML Service Provider metadata

5. Cookies and Technical Data

ICARUS uses technically necessary cookies and session mechanisms required for authentication, security and the proper operation of the service. The service may also record technical information such as:

  • IP address,
  • date and time of access,
  • browser or client information,
  • authentication and security events,
  • server and application logs.

This information is used for security, troubleshooting, operational monitoring, auditing, incident investigation, and maintaining the availability and integrity of the service.

ICARUS does not use personal data for advertising purposes or for commercial profiling of users.

6. Data Sharing and Disclosure

Personal data is not sold or used for advertising purposes.

Personal data may be accessed by authorized NTUA personnel and, where necessary for the operation, maintenance or security of the service, by technical administrators or service providers acting on behalf of NTUA, subject to appropriate confidentiality and data-protection obligations.

Where computing resources or related services are provided in cooperation with other research infrastructures, identity federations, academic institutions or external service providers, the minimum information necessary for authentication, authorization, accounting, resource management and service operation may be transferred to or processed by the relevant parties.

7. Data Retention

Personal data is retained only for as long as necessary for the purposes for which it is processed and in accordance with applicable legal, administrative and operational requirements.

Log data may be retained for a limited period depending on security, operational and incident-investigation requirements.

Account, project, allocation and computing-resource usage information may be retained for as long as necessary for operational, administrative, scientific, auditing or funding-related purposes.

8. Users' Rights

Under the GDPR and subject to the conditions provided by applicable law, users may have the right to:

  • access their personal data,
  • request rectification of inaccurate or incomplete personal data,
  • request erasure of personal data,
  • request restriction of processing,
  • object to certain processing activities,
  • request data portability, where applicable.

Where processing is based on consent, consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Users may exercise their rights by contacting NTUA and, in particular for matters concerning the protection of personal data, the NTUA Data Protection Officer.

9. Data Protection Officer

The Data Protection Officer (DPO) of the National Technical University of Athens (NTUA) is Eugenia Tzannini, Assistant Professor of Law at the School of Applied Mathematical and Physical Sciences of NTUA and Attorney at the Supreme Court of Greece (Areios Pagos).

The DPO may be contacted by email or in writing at:

Data Protection Officer
National Technical University of Athens (NTUA)
Zografou Campus
15780, Athens, Greece
Email: dpo@mail.ntua.gr

Further information concerning data protection at NTUA is available on the official NTUA website: NTUA data protection information

10. ICARUS Contact

For matters concerning the operation of the ICARUS service, technical support, or user accounts, users may use the service's support ticket system to request assistance.

For matters specifically concerning the processing of personal data or the exercise of data-protection rights, users may contact the NTUA Data Protection Officer.

11. Changes to this Privacy Policy

This Privacy Policy may be updated periodically to reflect changes to the ICARUS service, applicable legislation or the way in which personal data is processed. The latest version of this Privacy Policy will be published on the ICARUS website.