Source: https://trackspace.lhsystems.com/static/data-privacy-policy.html
Timestamp: 2019-12-11 06:21:45
Document Index: 55774808

Matched Legal Cases: ['Art. 15', 'Art. 16', 'Art. 17', 'Art. 18', 'Art. 20', 'Art. 6', 'Art. 9', 'Art. 6', 'Art. 21', 'Art. 7', 'Art. 6', 'Art. 77']

Data Privacy Policy of the trackSpace Suite
1.1. Controllership depending on your Controller’s Usage of this Service
Controllership means determining the purposes and means of the processing of personal data within this Service.
This service is intended for the use by organizations. Where the Service is made available to you through an organization (e.g. your employer), that organization is responsible for the Service’s sites/personal data input over which it has control. If this is the case, please direct your data privacy questions to your administrator/team lead/project lead/data protection officer, as your use of the Service shall be subject to that organization's policies.
Lufthansa Systems GmbH & Co. KG is not responsible for the privacy or security practices of your organization, which may be different than this policy.
1.2. Lufthansa Systems GmbH & Co. KG as Controller
We, Lufthansa Systems GmbH & Co. KG (Am Messeplatz 1, 65479 Raunheim, Germany), hereinafter also called “LSY”, “we”, “us”, wish to inform you how your personal data is processed when you use a trackSpace Suite service (e.g. trackSpace or docSpace), hereinafter also called “website” or referred to as “Services", provided by us.
If you have any further queries regarding data protection in connection with our website or the services offered, please contact our data protection officer or coordinator:
Group Data Protection Office for the Lufthansa Group:
60546 Frankfurt a. M.
Data Protection Officer at Lufthansa Systems GmbH & Co. KG:
E-Mail: dataprotection@lhsystems.com
2.1.1. Account and Profile Information
We collect information about you when you register for an account and providing your contacts, create or modify your profile, set preferences, sign-up for the Services. You also have the option of adding information about you (= data) such as display name (alias), profile photo, job title, and other details to your profile to be displayed in our Services. We keep track of your preferences when you select settings within the Services.
2.1.2. Content you provide through our Services
When you use our Services, we collect and store content that you post, send, receive and share. This content includes any information about you that you may choose to include. Examples of content we collect and store include: the summary and description added to a JIRA issue, the pages you create in Confluence, your repositories and pull requests in Bitbucket, comments you enter in connection with an incident in status pages, and any feedback you provide to us. Content also includes the files and links you upload to the Services.
2.1.3. Information you provide through our support channels
2.2.1. Your use of the Services
We keep track of certain information about you when you visit and interact with any of our Services. This information includes the features you use; the links you click on; the type, size and filenames of attachments you upload to the Services; frequently used search terms; and content you create and update.
2.2.2. Device and Connection Information
Lufthansa Systems uses cookies to improve performance and your user experience, e.g. to allow you to access and use the Services without re-entering your username or password, or to determine the recent issues or pages you worked on.
2.2.3.1. How do we use them?
For performance. These cookies and similar technologies collect information on how users interact with the Services and enable us to improve how the Services operate.
2.2.3.2. How can you opt-out?
2.3. Information we receive from other sources
2.3.1. Other users of the Services
Other users of our Services may provide information about you when they submit content through the Services. For example, you may be mentioned in a JIRA issue opened by someone else. We also receive your email address from other Service users when they provide it in order to invite you to the Services. Similarly, an administrator may provide your contact information when they designate you as the billing or technical contact on your company's account.
2.3.2. Other services you link to your account
We receive information about you when you or your administrator integrate or link a third-party service with our Services. You or your administrator may also integrate our Services with other services you use, such as to allow you to access, store, share and edit certain content from a third-party through our Services. For example, you may authorize our Services to access, display and store files from a third-party document-sharing service within the Services interface. Or you may authorize our Services to connect with a third-party calendaring service so that your meetings and connections are available to you through the Services. You may authorize our Services to sync a contact list or address book so that you can easily connect with those contacts within the Services or invite them to collaborate with you on our Services. The information we receive when you link or integrate our Services with a third-party service depends on the settings, permissions and privacy policy controlled by that third-party service. You should always check the privacy settings and notices in these third-party services to understand what data may be disclosed to us or shared with our Services.
2.3.3. LSY Companies
We may receive information about you from companies that are owned or operated by LSY, in accordance with their terms and policies.
2.3.4. Other Partners
How we use the information collected depends partly on the Services you use how you use them, based on any preferences or settings you have communicated to us. Below are the specific purposes for which we use the information we collect about you.
3.1. To provide the Services and personalize your experience
3.2. For research and development
3.3. To communicate with you about the Services
We use your contact information to send transactional communications via email and within the Services, including confirming your purchases, reminding you of subscription expirations, responding to your comments, questions and requests, providing customer support, and sending you technical notices, updates, security alerts, and administrative messages. We send you email notifications when you or others interact with you on the Services, for example, when you are @mentioned on a page or ticket or when a task if assigned to you. We also provide tailored communications based on your activity and interactions with us. For example, certain actions you take in the Services may automatically trigger a feature or third-party app suggestion within the Services that would make that task easier. We also send you communications as you onboard to a particular Service to help you become more proficient in using that Service. These communications are part of the Services and in most cases you cannot opt out of them. If an opt-out is available, you will find that option within the communication itself or in your account settings.
3.4. Customer support
3.5. For safety and security
3.6. To protect our legitimate business interests and legal rights
3.7. With your consent
Your personal data are deleted as soon as they are no longer needed for the specified purposes. In certain circumstances, personal data are kept for the period of time during which claims against the Lufthansa Systems GmbH & Co. KG may be enforced (statutory limitation period of three to thirty years). Personal data are also saved to the extent that and for so long as LSY is legally obliged to do so. Corresponding burdens of proof and duties of retention arise from, among others, the Commercial Code, Tax Code and Money Laundering Act. These prescribe retention periods up to ten years.
5. Legal basis for processing (for EEA users)
We are committed to ensuring fair and transparent processing. That is why it is important to us that data subjects can exercise the following rights where the respective legal requirements are satisfied:
Right of Access by the Data Subject (Art. 15 GDPR): You shall have the right to receive/access information from us regarding the processing of your personal data.
Right to Rectification (Art. 16 GDPR): You shall have the right to demand that we correct your personal data which are incorrect, outdated and/or incomplete.
Right to Erasure (Art. 17 GDPR): You shall have the right to demand the deletion of your personal data in accordance with the requirements of Article 17 GDPR.
Right to Restriction of Processing (Art. 18 GDPR): You shall have the right to demand the restriction of the processing of your personal data in accordance with the requirements of Article 18 GDPR.
Right to Data Portability (Art. 20 GDPR): Insofar as the data processing undertaken is based upon a consent (Art. 6(1)(a) or Art. 9(2)(a)) or a fulfilment of a contractual agreement (Art. 6(1)(b)) and it makes use of an automated processing system, you shall have the right to receive your data in a structured, commonplace and machine-readable format and to transfer these data to another data processing service provider.
Right to Object (Art. 21 GDPR): Insofar as the processing is based upon an overriding interest or your data are used for the purposes of direct advertising, you shall have the right to object to the processing of your data. An objection shall be permissible if the processing either is carried out in the public interest or in the exercising of official authority or owing to a justified interest of LSY or of a third party. In the event that you object, we request that you state your reasons to us regarding why you are objecting to the data processing. In addition, you shall have the right to object to the data processing for the purposes of direct advertising. This shall also be valid for profiling insofar as this is undertaken in conjunction with the direct advertising.
Right of Withdrawal (Art. 7(3) GDPR): If you give your consent to us for processing your personal data, please note that you may withdraw this consent at any time. To exercise your right, please email one of the contacts named under “1. Controller”. In order to process your request and for identification purposes, please note that we will process your personal data in accordance with Art. 6(1)(c) GDPR. Please also note that your consent can only be withdrawn with future effect and such a withdrawal does not have any influence on the lawfulness of past processing. In some cases, we may be entitled in spite of your withdrawal to continue to process your personal data on a different legal basis – e.g. to perform a contract.
Right to Complain (Art. 77 GDPR): You also have the right to lodge a complaint with a supervisory authority. The relevant supervisory authority for the Lufthansa Systems GmbH & Co. KG is:
To exercise your rights please contact us via e-mail: dataprotection@lhsystems.com.
The Services are not directed to individuals under 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information. If you become aware that a child has provided us with personal information, please contact our support services or an administrator.
We may change this privacy policy from time to time. We will post any privacy policy changes on this page and, if the changes are significant, we will provide a more prominent notice. We will also keep prior versions of this Privacy Policy in an archive for your review. We encourage you to review our privacy policy whenever you use the Services to stay informed about our information practices and the ways you can help protect your privacy.