Source: https://swarmos.com/dataprivacy/
Timestamp: 2019-04-24 17:48:37+00:00

Document:
2.1 In agreement with the applicable legal regulations we are authorized to assign other companies or legal persons to perform duties on our behalf, for which the transfer of personal data is required.
2.2 Personal data shall only be transferred to third parties on the basis of legal permissions and in accordance with statutory provisions. We are only transferring personal data to third parties if this is necessary on the basis of Art. 6 (1) (b) GDPR for the fulfillment of the contract or when we pursue our legitimate interests in accordance to Art. 6 (1) (f) GDPR. If third parties are assigned with the processing of data within the scope of a so-called ‘order data processing’ this is done on the basis of Art. 28 GDPR.
2.3 Provided we are using services of third parties in order to provide our service, we are taking appropriate legal measures as well as technical and organizational measures in order to ensure the protection of personal data according to the relevant legal provisions.
3.1 In order to use our App a registration is required. During registration process we need your and your registered users name, first name, name of company, and a valid email address. Such processing is necessary to enter into an End User License Agreement with you and for the performance of the End User License Agreement to which you are a party after having accepted the same (see Art. 6 (1) (b) GDPR. We will not share such data with third parties. We will, however, use such data in order to send you (also via email) offers concerning swarmOS product updates, new products and services in the context of agile development. Such data may be stored in an external CRM outside Europe, e.g. Hubspot Cloud. If you do not agree with the aforementioned practice, you have the option to object by sending us a notice (contact details above).
3.2 We collect and store any information or data that you upload, submit, post, create, transmit, store or display during use of the swarmOS Service Desk (“Service Requests”). Such Content may include any personal data or other sensitive information that you choose to include (passively-collected personal data). We store the Content on swarmOS Atlassian Instance which are hosted in external data centers (e.g. Atlassian). We will keep such data strictly confidential, will not use such data for our own purposes and will not share such data with third parties. We only might access such data in the course of maintenance or bug fixing. The storage of passively-collected personal data is necessary for the performance of the Support Services (see Art. 6 (1) (b) GDPR.
3.3 We collect and store any information or data that you upload, submit, post, create, transmit, store or display during use of the App (“Content”). Such Content may include any personal data or other sensitive information that you choose to include (passively-collected personal data). We store the Content on swarmOS servers which are hosted in external data centers (e.g. Amazon or an external CRM outside Europe, e.g. Hubspot Cloud). We will keep such data strictly confidential, will not use such data for our own purpose and will not share such data with third parties. We only might access such data in the course of maintenance or bug fixing. The storage of passively-collected personal data is necessary fpr the performance of the End User Licence Agreement (see Art. 6 (1) (b) GDPR).
3.4 We will not collect any payment data, such processing will be exclusively conducted by Atlassian marketplace. Atlassian will be subjected to an undertaking to treat your data securely and as strictly confidential and may only use these data to the extent necessary to fulfill their obligations.
3.5 Personal data are treated as strictly confidential and are not divulged to third parties without the User’s consent. Personal data may also be disclosed if necessary to protect other users or if its disclosure is required by law.3.6 Personal data is only used if necessary to provide, operate, maintain, improve, and promote our services, communicate with you, including responding to your comments, questions, and requests, providing customer service and support, sending you technical notices, updates, security alerts, and support and administrative messages, investigate and prevent fraudulent transactions, unauthorized access to our Software and other illegal activities, enable you to communicate, collaborate, and share Content with users you designate. The processing of such personal data is necessary for the performance of the End User License Agreement (see Art. 6 (1) (b) GDPR.
4.1 If you wish to use the contact form of our Website, we will collect the personal data that you provide in the contact form, including but not limited to your name and e- mail address. In addition, we record the date and time of your enquiry. We process any data transmitted through the contact form exclusively for the purpose of answering your enquiry or reacting to your concern.
4.2 It is up to you to decide what information you provide in the contact form. In accordance with Article 6 (1) (a) GDPR, your consent constitutes the legal basis for processing your data.
4.3 After the matter has been dealt with, the data is stored for some time in case you have any further questions. Without prejudice to the relevant legal retention periods, you may request deletion of the data at any time, otherwise the data will be deleted once the matter has been conclusively dealt with.
5.1. Providing you have given your consent in accordance to Art. 6 (1) (a) GDPR we will send periodic email newsletters to the email address you have provided. Where the registration for the newsletter included a concrete description of the newsletter content this description is authoritative for your consent. Otherwise our newsletters includes information on our products, offerings, special offers and our company. For the reception of our newsletters the provision of a valid email address is sufficient.
5.2. For the newsletter registration we use the so-called double opt-in procedure, i.e. you need to confirm the provided email address before being added to our email-list and receiving newsletters. In order to confirm the newsletter registration we will send you an email with a confirmation link, which you need to click in order to confirm your newsletter registration.
5.3 With the registration for the newsletter we store your IP address and the date of your registration. The storage of this information shall serve as the proof of your newsletter registration.
5.4. You may withdraw your registration for the newsletter at any time with effect for the future via a link in the newsletter itself or by notice to the contact data stated above.
6.1 When you visit the Website, our server automatically collects certain browser or device generated information, which may in some cases constitute personal data, including but not limited to:your domain;your IP address;your date, time and duration of your visit;your browser type;your operating system;your page visits;information from third parties;other information about your computer or device; orInternet traffic.
6.2 The processing and storage of this data is based on our legitimate interests in accordance to Art. 6 (1) (f) GDPR, namely the maintenance and improvement of our services.
7.3 Cookies enable us to recognize your computer and make any default settings immediately available. Cookies help us to improve our online offering and to provide you with an even better service customized to meet your particular requirements. This also constitutes a legitimate interest in the processing of the data in accordance with Article 6 (1) (f) of the GDPR.
7.4 Most web browsers are set to accept cookies by default. However, you can disable the storage of cookies or set up your web browser to inform you when you receive a cookie. It is also possible to manually delete stored cookies in the browser settings. Please note that your use of our online offering may be limited or restricted if you refuse to save cookies or delete necessary cookies.
8.1 We use Google Analytics on the basis of a legitimate interest according to Art. 6 (1) (f) DSGVO for the analysis, optimization and commercial operation of our website, a web analysis service of Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). Google Analytics uses so-called "cookies," i.e., text files that are installed in your terminal device and allow an analysis of your use of our website. Generally, information generated by cookies about your use of our website will be transferred to and stored in a server of Google in the United States. On our website the code "gat_anonymizeIp()" was added to Google Analytics to guarantee anonymous collection of IP addresses. As a result, your IP address will be shortened within member countries of the European Union or other countries that are signatories of the Agreement on the European Economic Area before being transmitted to a server of Google in the United States. Only in exceptional cases will the full IP address be transmitted to a server of Google in the United States and then shortened there.
8.2 On behalf of us Google will use this information to analyse your use of the website, in order to compile reports about website activities, and to provide additional services related to website use and internet use to the website operator. The IP address transmitted from your browser for purposes of Google Analytics will not be combined with any other data by Google. You can prevent the installation of cookies by selecting appropriate settings in your browser software; note, however, that in this case you may not be able to use all functions of our website to the full extent.
We use Hubspot Sales and Marketing which tracks your activities on our website, stires submissions from our website forms and on our landing pages by setting cookies in your browsers (clause 7). These cookies are set in order to remember preferences (like form field values) when a visitor returns to our website. Such cookies include the name “visitor_id” plus the unique identifier for the account, which is derived from the tracking code placed on our website. The value stored is the unique ID for the visitor. You can prevent us from setting cookies by deactivating cookies in your browser.
10.1 Our Website contains links to the social networks Facebook, LinkedIn and Twitter. The links are identified by the logo of their relevant providers.
10.2 No personal information is forwarded to the relevant providers before clicking on the links. Calling up the linked website also constitutes the basis for data processing by the relevant website provider.
To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect online. The servers on which personal data is stored are kept in a controlled environment. Nonetheless, making available your personal data, whether in person, by telephone or online, is always associated with certain risks, and no technical system is completely immune to manipulation or sabotage. We cannot guarantee that any passively-collected personal data you choose to store are maintained at levels of protection to meet specific needs or obligations you may have relating to that information. For more information about the security of our Software, please see our Cloud Security Statement.
12.1 swarmOS may, on its own initiative or at the request of the User, supplement, correct or delete any incomplete, erroneous or outdated personal data stored in connection with the operation of the App.
12.2 swarmOS will delete personal data in compliance with applicable law promptly upon User’s request or as soon as they are no longer required for the intended purpose, unless swarmOS is required to keep your data on file under applicable law.
- to complain to the responsible supervisory authority, in accordance with Art.77 GDPR.
14.1 You may at any time revoke your consent with future effect. Revocation of the consent does not affect the legality of any processing performed on the basis of such consent given up until the revocation thereof. In such cases, too, please use the contact data above.
14.2 Insofar as the processing of your personal data is not based on consent given by you but on another legal basis, you can object to the data processing. Your objection will lead to a review and, if necessary, to termination of the data processing. You will be informed of the outcome of the review and – if the data processing is to be continued after all – you will receive further information from us on why the data processing is admissible.

References: Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art.77