Data Security and Privacy Statement

Data Protection Policy for Plugins and Apps

The protection of personal data is central to Communardo. Hence, Communardo has used all technical and organizational means in order to comply with the regulations on data protection. This privacy policy is intended as an amendment to the software license terms. Communardo invites every user to carefully read this privacy policy.

This Data Protection Policy applies to all apps offered by Communardo Products GmbH. Unless otherwise stated, the Data Protection Policy exclusively provides for how Communardo Products GmbH handles your personal data and gives you an overview of what kind of personal data are collected for what purpose and how the protection of your information is ensured.

Responsible department

Communardo Products GmbH

Kleiststraße 10 a
D-01129 Dresden
Germany

Management:
Dirk Röhrborn

Tel.: +49 351 850 33-0
Fax: +49 (351) 850 33-299
E-mail: info@communardo.de
Internet: www.communardo.com

Data protection body

Dresdner Institut für Datenschutz
Hospitalstraße 4
D-01097 Dresden

E-mail: datenschutz(at)communardo.de

Further information can be found at www.dids.de

1. About this document

This privacy statement covers all products by Communardo Products GmbH („we“) and shows how we use and protect the information that our customers („you“) provide to us. By using any of our products or services, you are accepting the practices outlined in this privacy policy.

This privacy policy applies to both personal information (which can be attributed to a specific individual) and non-personal information that is collected by us. We will not share any information with anyone other than our subcontractors, who are also bound by these privacy practices.

2. Customer Data/System

We do not have any access to customer data beyond the information provided by Atlassian Marketplace over the course of evaluating or purchasing our products and are not going to change that in the future. Therefore, we do not use this data for e.g. analysis, except for data anonymized by Atlassian.

No personal data are stored or processed when using our apps.

The following apps are an exception:

Metadata for Confluence:

Communardo is processing customer data as part of a migration from Atlassian Server or Data Center products to Atlassian Cloud products. Although we are not able to limit the type of data customers are storing using our product we advise to not store personal data using this product. Data is processed for the sole purpose of migrating and will not be permanently stored in systems other than Atlassian Confluence Cloud.

User Profiles for Confluence, User Profiles for Jira:

When using these apps, the required profile information of the users, such as birthday, location, e-mail address and telephone number, is processed from the user system. Once the app has been installed, no personal data are transmitted to third-party companies or Communardo in this respect.

The app stores personal data in the customer’s respective server environment (database, file system). Furthermore, the personal data are stored until they are deleted either manually by the user or by using the “purge data feature” for deactivated/deleted users.

Personal data are not logged via the app as part of general system logging.

  • Azure CDN

Type and scope of processing:
We use Azure CDN to properly provide the content of our app. Azure CDN is a service provided by Microsoft Corporation, which acts as a content delivery network (CDN) on our website.

A CDN helps to provide the content of our app portfolio, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to the servers of Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, United States, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Azure CDN.

  • Atlassian Content

Type and scope of processing:
We use several third party libraries provided by Atlassian to properly provide the functionality of our apps. When you use these apps, you establish a connection to the servers of Atlassian. Pty Ltd, Level 6, 341 George Street, Sydney NSW 2000, Australia whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of our apps.

Purpose and legal basis
The content delivery network is used on the basis of our legitimate interests, i.e. interest in a secure and efficient provision and the optimization of our range of apps in accordance with Art. 6 Para. 1 lit f GDPR.

  •  Microsoft Graph API

Type and scope of processing:
We the Microsoft Graph API provided by Microsoft to properly provide the functionality of our apps. When you use these apps, you establish a connection to the servers of Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, United States whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of our apps.

Purpose and legal basis
The Microsoft Graph API is used on the basis of our legitimate interests, i.e. interest in a secure and efficient provision and the optimization of our range of apps in accordance with Art. 6 Para. 1 lit f GDPR.

3. Support

If you have any problems using our products, you may contact our support team. Depending on the issue we may request log files, which you are free to give to us. All log files, including any data that is transferred with them, are only used to analyze and solve your individual issues, nothing further.

4. Security vulnerabilities

We continuously strive to keep our products and data secure for you. If you detect any security vulnerability, please contact our support team and we will immediately find a solution to the issue.

5. Cookies

For products that work with browsers, we use cookies to store information of the user for the duration of his visit and until his next visit at a later time. A „cookie“ is a small amount of data that is stored on the hard drive of the computer of the user.

6. Right to Demand Information

Data subjects may at any time request information about the personal data concerning them and, if necessary, request rectification or deletion or restriction of processing or object to processing. They also have the right to data portability. Furthermore, if data are processed on the basis of consent, this can be revoked at any time for the future. To exercise your rights, you can contact our data protection body, the Dresden Institute for Data Protection (Dresdner Institut für Datenschutz), at datenschutz[at]communardo.de (please visit www.dids.de for further contact details). In addition, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Article 77 GDPR if the processing of personal data is assumed to be unlawful.

Please note: we may insist on the forwarding of documents proving your identity and authenticity prior to furnishing information.

7. Amendment of Privacy Policy

We reserve the right to amend this privacy policy at any time. In case of any significant amendment you will be informed via email.

8. Email

Contact data provided by the Atlassian Marketplace over the course of evaluating or purchasing our products will be filed and evaluated. This data will, for instance, be used to send relevant information to you, to make using our products more efficient and fun. If you decide you do not need further information regarding our products, you may simply unsubscribe from newsletters using the “unsubscribe” Button below the mail or let us know via email at products@communardo.de

9. Newsletter

When downloading pictures within a newsletter, which are usually automatically blocked because of the E-Mail client and to protect privacy, data like IP addresses, date and time will be protocolled. This data is exclusively used for statistical purposes and to improve newsletters. For data analysis, Google Analytics is used. Therefore, information is transmitted to Google in the USA and saved with the help of a pixel tag which is located in the picture. Google Analytics processes this information and makes it possible for Communardo to analyze the opening of newsletters and other related information.

Processing and evaluating of the collected data by Google cannot be fully excluded.

The IP address which is transmitted in the scope of the Google Analytics pixel tag will not be amalgamated with any other data by Google. Further information, as well as the privacy statement of Google, can be found at http://www.google.com/policies/privacy/

If you do not wish your data to be collected and used, simply ignore the option to download the pictures contained in the newsletter.


Privacy Policy for this Website

Communardo Products GmbH takes data protection very seriously with its online offering. Here you will find all the information you need on the subject.

Data protection information

Communardo Products GmbH takes data protection very seriously with its online offering. It is possible to use our website without providing any personal data. We only receive personal data such as your name, address, telephone number or e-mail address if you expressly provide us with this data – for example via our contact form, download offers or e-mail.
We store this data for as long as it is necessary to process your request, after which your data is deleted. Of course, we treat your personal data confidentially and do not pass them on to third parties under any circumstances. You can request information about your data at any time (more on this in the “User rights” section).
As the data controller, Communardo Products GmbH, has implemented numerous technical and organisational measures to ensure the most complete possible protection of the personal data processed via this website. Nevertheless, Internet-based data transmissions can have security gaps, so that absolute protection cannot be guaranteed. For this reason, every person concerned is free to transmit personal data to us by alternative means, such as telephone.

1. Name and address of the controller

The person responsible within the meaning of the General Data Protection Regulation (GDPR), other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:

Communardo Products GmbH
Kleiststraße 10 a
01129 Dresden
Germany

Management:
Dirk Röhrborn

Contact us
Phone: +49 351 850 33-0
Fax: +49 351 850 33-299
E-mail: info@communardo.de
Internet: www.communardo.com

2. Cookies

We use cookies on our website. Cookies are small text files which are stored on a computer system via an Internet browser.
By means of a cookie, the information and offers on our website can be optimised in the interests of the user. Cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. Some cookies remain stored on your end device until you delete them.
You can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers. If you deactivate the setting of cookies in the Internet browser used, not all functions of our website may be fully usable under certain circumstances.

3. Collection of general data and information (log data)

When you access our website, your browser sends a series of technical data, which is logged. Your IP address, your browser identification and domain, the name of the retrieved file, date and time of the retrieval, the transferred data volume and the successful retrieval are recorded in a log file.

All data in the log files are not directly related to personal data and are never combined with other personal data. We register your accesses for reasons of data security in order to ensure the stability and operational safety of our systems and to ward off unauthorised attacks. The log data is used exclusively for internal purposes and will not be passed on to third parties under any circumstances.

4. Contact via our website

Due to legal regulations, our website contains information that enables us to contact our company quickly and electronically and to communicate directly with us, which also includes the e-mail address. If you contact us by e-mail, the personal data you provide will be stored automatically. Such personal data transmitted on a voluntary basis will be stored for the purpose of processing or contacting you.

We use a contact form on our website. If you use the contact form, we collect and process the mandatory information you have entered, such as name and e-mail address, and if you voluntarily provided information about the company, first name and telephone number. In addition, we save the date and time of your contact request.
The data provided by you will be treated confidentially by us and will only be used to process your request. Your personal data will not be passed on to third parties unless this is necessary in individual cases due to the nature of your request or we are legally obliged to do so. Your personal data will be deleted within defined deletion periods. Retention periods remain unaffected by this.

5. Subscription newsletter

On the website you have the possibility to subscribe to the newsletter of our company. The personal data, that is transmitted to us when ordering the newsletter, results from the input mask used for this purpose. Communardo Products GmbH informs its customers and business partners at regular intervals about the company’s offers. The newsletter of our company can only be received by you if (1) you have a valid e-mail address and (2) you register for the newsletter. For legal reasons, a confirmation e-mail in the double opt-in procedure will be sent to the e-mail address you entered for the first time for sending the newsletter. This confirmation e-mail serves to check whether the owner of the e-mail address has authorised receipt of the newsletter. The personal data collected during registration for the newsletter will only be used to send our newsletter. Furthermore, subscribers to the newsletter can be informed by e-mail if this is necessary for the operation of the newsletter service or registration, as might be the case in the event of changes to the newsletter offering or changes to the technical conditions. The personal data collected as part of the newsletter service will not be passed on to third parties. You can cancel your subscription at any time. The consent to the storage of personal data that you have given us for sending the newsletter can be revoked at any time. For the purpose of revoking your consent, you will find a corresponding link in each newsletter, via which you can manage your subscriptions. This allows you to unsubscribe either from individual or all newsletter topics. It is also possible to unsubscribe at any time directly from the newsletter on the website or to inform the data controller of this in some other way.

6. Newsletter tracking

The newsletter of Communardo Products GmbH contains so-called tracking pixels. A pixel-code is a miniature graphic that is embedded in e-mails sent in HTML format to enable log file recording and analysis. This allows statistical evaluation of the success or failure of online marketing campaigns. The embedded pixel-code allows us to determine if and when an e-mail was opened by you and which links in the e-mail were accessed by the person concerned.

The personal data collected in this way is stored and evaluated in order to optimise the dispatch of the newsletter and to adapt the content of future newsletters even better to your interests. This personal data will not be passed on to third parties. You are entitled at any time to revoke the relevant separate declaration of consent given via the Double-OptIn procedure. After a revocation the personal data will be deleted. If you unsubscribe from the newsletter, Communardo Products GmbH automatically interprets this as a revocation.

7. Routine deletion and blocking of personal data

We process and store your personal data only for the period of time necessary to achieve the storage purpose or if required by the European Directive and Regulation Body or another legislator in laws or regulations to which the data controller is subject.

If the storage purpose no longer applies or if a storage period prescribed by the European Directive and Regulation Body or another competent legislator expires, the personal data will be blocked or deleted routinely and in accordance with the statutory provisions.

8. User rights

Data subjects may at any time request information about the personal data concerning them and, if necessary, request rectification or deletion or restriction of processing or object to processing. They also have the right to data portability. Furthermore, if data are processed on the basis of consent, this can be revoked at any time for the future. To exercise your rights, you can contact our data protection body, the Dresden Institute for Data Protection (Dresdner Institut für Datenschutz), at datenschutz@communardo.de (please visit www.dids.de for further contact details). In addition, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Article 77 GDPR if the processing of personal data is assumed to be unlawful.

Please note: we may insist on the forwarding of documents proving your identity and authenticity prior to furnishing information.

9. Legal basis for the processing

Art. 6 para. 1 lit. a GDPR serves our company as a legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary to fulfil a contract to which the data subject is a party, the processing is based on Art. 6 para. 1 lit. b GDPR. The same applies to such processing operations that are necessary for the implementation of pre-contractual measures, for example in cases of inquiries regarding our services. If our company is subject to a legal obligation requiring the processing of personal data, such as for the fulfilment of tax obligations, the processing is based on Art. 6 para. 1 lit. c GDPR.

Ultimately, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and fundamental freedoms of the data subject do not predominate. If the processing of personal data is based on Article 6 para. 1 lit. f GDPR, the legitimate interest lies in the performance of our business activities and the maintenance of our legal capacity.

10. Privacy policy on the use and application of Google Analytics

This website uses functions of the web analysis service Google Analytics. Provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses cookies. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, as we have activated IP anonymisation on our website, your IP address will be shortened beforehand by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can prevent the recording by Google Analytics by clicking on the following link. An Opt-Out-Cookie is set, which prevents the collection of your data with future visits of this website: Disable Google Analytics (https://tools.google.com/dlpage/gaoptout?hl=en).

The anonymous version of the Google Analytics code is used on this website (extended by the code section [‘_gat._anonymizeIp’] in order to guarantee the anonymous collection of IP addresses. As an alternative to the browser add-on or within browsers on mobile devices, please click this link to prevent Google Analytics from collecting IP addresses from this website in the future (the opt-out works only in the browser and only for this domain). An opt-out cookie is placed on your device. If you delete your cookies in this browser, you must click this link again.

We use remarketing function within the Google AdWords service. With the remarketing function we can present users of our website on other websites within the Google display network (on Google itself, so-called “Google ads” or on other websites) ads based on their interests. For this purpose, the interaction of users on our website is analysed, e.g. which offers the user is interested in in order to be able to display targeted advertising to users on other pages even after they have visited our website. For this purpose, Google stores a number in the browsers of users who visit certain Google services or websites in the Google display network. This number, known as a “cookie,” is used to track the visits of these users. This number is used to uniquely identify a web browser on a particular computer, not an individual. Personal data is not stored. You can deactivate the use of cookies by Google by following the following link and downloading and installing the plug-in provided there: https://www.google.com/settings/ads/plugin. You can find more information about Google Remarketing and Google’s privacy policy at: http://www.google.com/privacy/ads/. In addition, you can obtain information from the Digital Advertising Alliance about the setting of cookies and make settings in this regard.

11. Integration of social media plugins

Communardo Products GmbH is represented with selected Internet offers on various social media platforms (e.g. facebook, xing, twitter, etc.). When integrating these offers into our Internet pages, we partly use plug-ins provided by the providers. They establish a direct connection to the servers of the social networks via your browser and transmit data to the operators as soon as the content is loaded and displayed.

In order to make the connection of the external offers as comfortable as it is secure, we have switched off this function of the social plugins by default if you have objected to tracking via Google Analytics. You can prevent the recording by Google Analytics by clicking on the following link. An Opt-Out-Cookie is set, which prevents the collection of your data with future visits of this website: Disable Google Analytics (https://tools.google.com/dlpage/gaoptout?hl=en).

Only when you activate the display of social media content will a connection be established to the servers of the respective social media platform.

12. Applicant management

Communardo Products GmbH processes for the initiation, establishment, execution and processing of an employment relationship in accordance with Art. 6 Para. 1 b GDPR in conjunction with § 26 BDSG Data about your person,

  • Name and address data,
  • Application documents (incl. annexes),
  • other contact details (e-mail, telephone numbers, social media profiles),
  • Answers to applicant surveys
  • Email messages and chat history

This data is generally either transmitted voluntarily by you or requested directly from you, in addition, in legally permissible cases collected from third parties or from public sources. The data collection is carried out for this purpose:

  • Initiation of an employment relationship

Further data processing can take place if you agree to this. You will be informed of this in each case. Consent is voluntary; the refusal of consent does not result in any disadvantages.

The data will be deleted at the latest after 6 months after the discontinuation of the intended use and expiry of statutory retention periods.

In some cases we transfer the processing of your data to service providers with whom we have previously concluded data protection agreements. Data transfers to third countries are not planned.

You can request information, correction, deletion, restriction of the processing of your personal data and exercise your right to data transfer at any time. Consents given for data processing are revocable with effect for the future.

13. Google Fonts

We use Google fonts for the uniform representation of the fonts in different browsers of our website visitors and for the technically safe, maintenance-free and efficient use of fonts, as well as taking into account possible licensing restrictions for their integration. The legal basis is our legitimate interest in accordance with Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR.

The files (CSS, fonts) are requested from the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, requests for fonts are made separately from all other Google services. According to Google, it limits itself to providing fonts and, according to its own information, only evaluates visitor data in aggregated form. This means that the sum of all data is only used to compile statistics (e.g. which font is used and how often. For this purpose, usage data (e.g. interest in content) as well as meta and communication data (e.g. device information and IP addresses), aggregated according to Google information, processed.

Google Fonts are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA; Website: https://fonts.google.com; Data protection declaration: https://policies.google.com/privacy.

Get more information on data security on our social media platforms here.