The GÉANT Software Catalogue (GSC) is an information repository of software projects and teams identified among the GÉANT Project participants. It has been established in 2019 in order to facilitate and support the GÉANT Project (GN4 and now GN5) software engineering community. It provides the Géant Project with important information about software projects within the Géant Project, size of developer’s community, languages and licences used.
This Privacy Notice is meant to help you understand what information we collect, why we collect it, and how you can update, manage, export, and delete your information including your personal data.
The GSC is used only for the Géant Project purposes, and it is the Géant Project internal tool - only available for the Géant Project Participants.
GÉANT VERENIGING (Association), registered with the Chamber of Commerce in Amsterdam with registration number 40535155 with its registered address at Hoekenrode 3, 1102 BR, Amsterdam, the Netherlands (hereinafter: Géant) is the data controller of the GÉANT Software Catalogue service.
There is a Data Protection Officer appointed at Géant, who can be contacted at: firstname.lastname@example.org
This privacy notice covers processing of personal data within the Géant Software Catalogue context. To view the general Privacy Notice for GÉANT, please visit the GÉANT website.
We use information, which include personal data, collected through the service to provide and improve the service, process your requests, prevent fraud, provide you with information, comply with the applicable laws.
In particular, we process personal data in order to:
For the purposes of the Géant Software Catalogue we will process the following personal data:
Upon registration to the GSC, GSC will correlate software projects connected with you from Gitlab, Github, Jira or other software repositories including committers contributing to that project.
Data related to software development is already stored and maintained on an ongoing basis in multiple third-party databases such as GÉANT Jira, GÉANT Bitbucket, individual NRENs' Git repositories or external hosting platforms such as GitHub or GitLab or other software repositories. Personal data are also available via GÉANT Service Provider Proxy and GÉANT eduTeams. We retrieve data from such databases. If we combine that information with information about you collected through the GSC, we will still treat that combined information as set forth in this Privacy Notice. Also, if you use Slack and have a profile photo – your profile photo will be visible in the GSC.
Although we mainly collect information from third party databases, you may provide a supplemental information about your software projects so that the catalogue can become more and more reliable.
The following is processed in order to build a comprehensive information about development software in GÉANT Project community: contact information of projects team members (emails), source code contribution (e.g. Git commits), issue tracking contribution (e.g. JIRA issues), structure of the organisation and role assignments of GÉANT participants.
When you access GÉANT Software Catalogue you are asked to authenticate first. This is a mandatory step to let us know who you are and whether you are a GÉANT participant. Scope of the data we retrieve highly depends on what your mother institution can share with us.
When are a contributor in any of GÉANT-related software project and the GÉANT Software Catalogue is aware of that project then it is very likely that we already collect some information about you. It possible as we explore multiple third party databases (please refer to section titled "Information Received from Third Parties").
Moreover, our web servers collect log information in order to provide minimal data set necessary for system administrators in order to resolve incidents and investigate failures. The logs may contain IP addresses and basic details of incoming HTTP requests.
Like other online companies, we receive technical information when you use our services. We use these technologies to analyse how people use our service, to improve functionality and to save your log-in information for future sessions. To achieve that we use analytical services for GSC and embedded scripts.
The legal basis for processing your personal data is legitimate interest, which consists in providing valuable statistics regarding Géant Project about software project, languages, technology, size of developers community, time dedicated to the software projects, what is not overriding rights and freedoms of Géant Project Participants.
Access GÉANT Software Catalogue is restricted to the group of active participants of the GÉANT Project, namely limited via federated authentication mechanism based on the SAML protocol.
The server logs are only shared within the GÉANT Software Catalogue DevOps team for management, support and security purposes from PSNC (Poland) on the basis of the Data Processing Agreement in accordance with the GDPR.
Any user of the GÉANT Software Catalogue can create a software project and hence populate it with personal data retrieved from external systems or entered manually. Personal data collected in the GÉANT Software Catalogue is retained until such software project is deleted, then it is tagged as inactive. Data are kept for time of the Géant Project and 7 years after the termination of the Project.
All our data is stored within the EEA.
Access to technical log data is restricted and can only be accessed via secure methods by specifically authorised staff. To prevent unauthorised access or disclosure we have put in place technical and organisational procedures to secure the data we collect.
You have the following rights regarding your personal data:
You can exercise those rights by contacting email@example.com
You also have the right to present a complaint about our personal data processing activities if you feel your personal data is not being managed as described here to the relevant Supervisory Authority:
Services and products offered to you may change from time to time and this Privacy Notice will be updated appropriately. When the Privacy Notice will be changed, an updated version of the Privacy Notice will be posted on the GSC website and additionally notification will be sent to you.
GÉANT keeps this Privacy Notice under regular review; the last update was in March 2023.
If you have any questions, complaints or concerns about how GÉANT processes your personal data or about this Privacy Notice, please contact us:
Hoekenrode 3 1102 BR - Amsterdam - Zuidoost - The Netherlands
phone number: +31 20 530 4488, email: GDPR@geant.org
Please feel free to contact us for any further questions, through this email address firstname.lastname@example.org.