The controller of your personal data is Paweł Sieniarski running business activities under the business name “Paweł Sieniarski” with its registered office in Jelenia Góra, Poland, at ul. Elewów 14A/6, 58–506 Jelenia Góra, Tax Id. No. 8961526196, Industry Id. No. (REGON): 364852280 (hereinafter: “Controller” or “GitConnector”).
You can contact the Controller as follows:
-
by letter to the address: ul. Elewów 14A/6, 58–506 Jelenia Góra;
-
by e-mail: [email protected].
In order to comply with the obligations resulting from provisions on the protection of personal data, especially Regulation (EU) 2016/679 of the European Parliament and of the European Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (general regulation on the protection of data, hereinafter "GDPR"), the Controller hereby presents to you all sufficient information about the scope and legal basis of the processing of your personal data, as well as Controller’s contact details, to help you understand how your data will be processed and assure you that your data will be protected with all sufficient and effective means.
This Privacy and Cookies Policy (hereinafter “Policy”) is addressed to users of the cloud applications provided by the Controller (hereinafter “Apps”), users of the website available at www.gitconnector.com (hereinafter “Website”), and persons contacting the Controller in any way, in particular by e-mail enquiries. The Apps are made available through the Atlassian Marketplace platform which is provided by Atlassian Pty Ltd, ABN 53 102 443 916 (hereinafter “Atlassian”). Therefore, the Controller may receive certain data relating to users of the Apps directly from Atlassian, including in particular data concerning the relevant Jira instance, licensing data and transaction data. In addition, the Apps partially rely on various technologies and services (e.g. hosting) provided by third-party providers, which may involve the collecting and processing of data relating to users of the Apps.
Below you will find detailed information on how the Controller processes your personal data. Please read this Policy carefully. By using the Apps, you acknowledge that you have read this Privacy and Cookies Policy. If you do not agree with this Policy, you should not use the Apps or provide personal data to the Controller. If you have any questions or concerns, you may contact the Controller using the contact details provided above.
1. PURPOSES AND THE LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
1.1. The Controller collects and processes your personal data in particular when such data is provided directly by you, including, for example, when:
1.1.1. you send a message to the Controller, especially via e-mail or chat;
1.1.2. you send a support request to the Controller;
1.1.3. you use the functionalities of the Controller’s Apps;
1.1.4. you enter into a contract with the Controller.
1.2. As a result of the aforementioned occurrences, GitConnector processes personal data provided directly by you, including in particular your e-mail address.
1.3. The Apps use various IT services and tools, which may involve the processing of data relating to users of the Apps, for example for purposes such as ensuring proper operation of the Apps, analyzing and monitoring their use, and facilitating contact with the Controller. The Controller may receive certain data about users of the Apps from Atlassian. Such data may include:
1.3.1. data relating to licenses (for example country, contact person, e-mail address, phone no., address, number and type of license, date of expiry of the license).
1.3.2. data relating to the transaction (for example purchase date, amount purchased).
1.4. Your personal data will be processed for the following purposes and based on the following legal grounds (for users in the European Economic Area):
1.4.1. processing is necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract, which includes providing the Apps and support services to you under End User Terms, as well as sending emails relating to planned changes to the Apps, recent changes and new features of the Apps (art. 6 sec. 1 (b) GDPR);
1.4.2. processing is necessary for the purposes of the Controller’s legitimate interests (art. 6 sec. 1 (f) GDPR), which include:
a. performing analyses and statistics that will allow the Controller to better adapt the content and services provided to users' needs and expectations;
b. responding to messages sent to the Controller via e-mail or chat or Jira Service Desk;
c. monitoring the Apps to ensure proper operation;
d. taking any necessary steps related to potential claims against the Controller.
1.5. The Controller shall process your personal data solely for the purposes for which it was collected and as set out in this Policy, in accordance with applicable data protection laws.
2. VOLUNTARY PROVISION OF PERSONAL DATA
Providing your personal data is voluntary. However, failure to provide certain data may prevent the Controller from providing services electronically (the Apps) or responding to your inquiries.
3. RECIPIENTS OF YOUR PERSONAL DATA
3.1. Your personal data may be shared with third-party service providers in connection with the use of the IT technologies and tools implemented in or used in the Apps, in particular:
3.1.1. business analytics tools (tracking user interactions with Apps);
3.1.2. Apps monitoring tools (fault tracking to help monitor and quickly recover Apps from faults);
3.1.3. communication tools (e.g. interaction with live chat platforms);
3.1.4. mailing tools (sending emails relating to planned changes to the Apps, recent changes and new features of the Apps).
3.2. The Controller’s Apps are hosted on infrastructure provided by DigitalOcean. The Controller performs backups which are stored in Amazon Web Services (AWS) data centers.
3.3. The Controller may transfer your data to public authorities where required by law in accordance with applicable legal obligations.
3.4. Data is shared for the sole purpose of the proper performance of services and only to the extent which results from the provisions of the contracts concluded with the aforementioned entities.
4. TRANSFERRING DATA OUTSIDE THE EUROPEAN ECONOMIC AREA (FOR EUROPEAN ECONOMIC AREA USERS)
4.1. The tools (indicated in section 3 above) used by the Controller may transfer personal data to countries outside the European Economic Area. Data transfers outside the EEA are based on standard contractual clauses concluded by the Controller and the respective service providers.
4.2. The Controller uses in particular:
4.2.1. DigitalOcean (hosting and databases) - which transfers your personal data outside the European Economic Area (EEA) because its data centers are located in NY/San Francisco, USA. The basis of data transfer outside the EEA are standard contractual clauses;
4.2.2. AWS (backups, static assets and potentially hosting and database) – which transfers your personal data outside the EEA because its data centers are located in Ohio, USA. The basis of data transfer outside the EEA are standard contractual clauses.
5. DATA RETENTION
5.1. Your personal data will be stored for no longer than necessary. Your personal data are stored:
5.1.1. for the duration of the license for the Apps. Your personal information required for licensing and billing is collected and processed by Atlassian and governed by the Atlassian Privacy Policy and Terms of Use. The Controller has access to the aforementioned information provided by Atlassian to apps providers on the terms set out therein;
5.1.2. if the Controller contacts you in the response to your e-mail inquiry - for the time necessary to verify your request/inquiry or to verify that services are being provided correctly;
5.1.3. when processing is based on the Controller’s legitimate interest - as long as the Controller’s interest exists or until you object. However, personal data will be stored until the statute of limitations for potential claims under the applicable law.
6. YOUR RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA (FOR EUROPEAN ECONOMIC AREA USERS)
6.1. Pursuant to GDPR you have the following rights related to the processing of your personal data:
6.1.1. the right to withdraw consent (art. 7 sec. 3 GDPR) – if the data processing is based on your consent,
6.1.2. the right to access your personal data (art. 15 GDPR),
6.1.3. the right to request the rectification of your personal data (art. 16 GDPR),
6.1.4. the right to request the erasure of your personal data (art. 17 GDPR),
6.1.5. the right to request the restriction of the processing of your personal data (art. 18 GDPR),
6.1.6. the right to transfer your personal data, i.e. the right to receive your personal data which you have provided to the Controller, in a structured, commonly used, machine-readable format; you may transmit this data to another data controller or request that the Controller transmits your data to another controller, however, the Controller will only do so if such transmission is technically possible (art. 20 GDPR),
6.1.7. the right to object to the processing of your data on the basis of the Controller’s legitimate interest, which is not overriding your interest or your rights and freedoms, and the right to object to the processing of your data for direct marketing purposes (art. 21 GDPR).
6.2. To exercise the aforementioned rights, please contact the Controller by e-mail: [email protected] or by letter to the address: ul. Elewów 14A/6, 58–506 Jelenia Góra.
6.3. You also have the right to lodge a complaint with the supervisory body dealing with the protection of personal data, usually to the President of the Office for Personal Data Protection (art. 77 GDPR).
7. COOKIES
7.1. Cookies are small files that store certain information about your device, e.g. a computer or smartphone.
7.2. The Controller does not directly set or collect any cookies other than those specified in this section 7.
7.3. The Atlassian Connect framework and JIRA may use cookies, for example for authentication and authorization purposes.
7.4. The Controller has access to AP.cookie (https://developer.atlassian.com/cloud/confluence/jsapi/cookie/), which allows the Controller to indirectly read or manage certain cookies or LocalStorage items within your JIRA subdomain.
7.5. The Controller uses Google Analytics, provided by Google LLC, to analyze the usage of the Website, and improve its functionality. Google Analytics collects information such as device type, pages accessed, session duration, and anonymized IP addresses. This data is used solely for analytical purposes, including monitoring user engagement, improving user experience, and optimizing the Website’s performance.
7.6. The Controller has entered into a Google Ads Data Processing Terms with Google, which ensures that Google acts as a data processor in compliance with GDPR requirements.
7.7. The processing of data in Google Analytics is based on your consent (Article 6 sec. 1 (a) GDPR).
7.8. You can block the Google Analytics tracking code at any time by installing a browser add-on provided by Google: tools.google.com/dlpage/gaoptout.
7.9. You can adjust the scope in which cookies are used on your device yourself. You can do this by changing your browser settings. Remember, however, that many of the cookies are crucial for the proper functioning of Apps and the content displayed on them, therefore blocking such cookies may disrupt or prevent the use of Apps.
8. POLICY CHANGES
In order to ensure that the information provided herein complies with current legal requirements, the Policy may be changed at any time. This reservation also applies to the cases when data protection information must be adjusted due to new or changed Apps and functionalities offered by the Apps. The change of this Policy will be made by placing a new text on the Controller’s website at https://privacy.gitconnector.com, which will come into force automatically during your next use of the Apps.