Home > Privacy Notice GSC Privacy Notice

Introduction

GÉANT Software Catalogue is an information repository of software projects and teams identified among GÉANT project participants. It has been established in order to facilitate and support the GÉANT software engineering community.

This Privacy Notice is meant to help you understand what information we collect, why we collect it, and how you can update, manage, export, and delete your information including your personal data.

GÉANT is the body which is responsible for the international coordination of GÉANT Software Catalogue service.

To view the general Privacy Notice for GÉANT, please visit the GÉANT website.

Why Do We Process Your Personal Data?

We use information, which include personal data, collected through the service to provide and improve the service, process your requests, prevent fraud, provide you with information, comply with the applicable laws, and as otherwise permitted with your consent.

In particular, we process personal data in order to:

  • provide you a comprehensive picture of software development efforts in GÉANT community;
  • with your permission, contact you and send notifications via e-mail;
  • facilitate your collaboration with other GÉANT participants;
  • adjust the service to your individual needs;
  • handle incidents and service delivery issues;
  • keep the service secure and reliable.

What Personal Data Do We Process?

  • Information Received from Third Parties

  • Data related to software development is already stored and maintained on an ongoing basis in multiple third-party databases such as GÉANT Jira, GÉANT Bitbucket, individual NRENs' Git repositories or external hosting platforms such as GitHub or GitLab. Personal data are also available via GÉANT Service Provider Proxy and GÉANT CoManage APIs. We retrieve data from such databases. If we combine that information with information about you collected through the Service, we will still treat that combined information as set forth in this Privacy Policy.

  • Information You Provide to Us

  • Although we mainly collect information from third party databases, you may provide a supplemental information about software development so that the catalogue can become more and more reliable.

  • Information Related to Software Development

  • The following is processed in order to build a comprehensive information about development software in GÉANT community: contact information of projects team members, source code contribution (e.g. Git commits), issue tracking contribution (e.g. JIRA issues), structure of the organisation and role assignments of GÉANT participants.

  • Information Related to You

  • When you access Software Catalogue you are asked to authenticate first. This is a mandatory step to let us know who you are and whether you are a GÉANT participant. Scope of the data we retrieve highly depends on what your mother institution can share with us.

    When are a contributor in any of GÉANT-related software project and the Software Catalogue is aware of that project then it is very likely that we already collect some information about you. It possible as we explore multiple third party databases (please refer to section titled "Information Received from Third Parties").

    Moreover, our web servers collect log information in order to provide minimal data set necessary for system administrators in order to resolve incidents and investigate failures. The logs may contain IP addresses and basic details of incoming HTTP requests.

  • Information Collected Automatically

  • Like other online companies, we receive technical information when you use our services. We use these technologies to analyse how people use our service, to improve functionality and to save your log-in information for future sessions. To achieve that we involve cookies and embedded scripts.

Who Do We Share Data With?

Access GÉANT Software Catalogue is restricted to the group of active participants of the GÉANT project, namely limited via federated authentication mechanism based on the SAML protocol.

The server logs are only shared within the GÉANT Software Catalogue DevOps team for management, support and security purposes.

Data Storage and Retention Periods

Any user of the GÉANT Software Catalogue can create a project and hence populate it with personal data retrieved from external systems or entered manually. Personal data collected in the GÉANT Software Catalogue is retained until the project is deleted, no longer than 1 year after termination of GÉANT project.

Personal data gathered for the application and web-server statistics is kept no longer than 1 year.

Security of your Personal Data

We support the following processes to ensure the security of your data:

  • Processing your data fairly and lawfully;
  • Managing, limiting and controlling access to personal data;
  • Resilience of processing systems and services;
  • Your personal data is securely destroyed when no longer required;
  • Regular testing of the effectiveness of measures implemented.

With these measures we intent to minimise the risk of disclosure of your personal data.

Data Subject Rights

You have the following rights regarding your personal data:

  • You have the right to request access to your data;
  • You have the right to ask us to rectify or erase personal data;
  • You have the right to object to your data being processed by us.

You also have the right to inquire what personal data we hold about you, and to present a complaint to the Supervisory Authority (Autoriteit Persoonsgegevens at https://autoriteitpersoonsgegevens.nl) about our personal data processing activities if you feel your personal data is not being managed as described here.

Changes and updates to the Privacy Notice

Services and products offered to you may change from time to time and this Privacy Notice will be updated appropriately. We reserve the right to amend the Privacy Notice at any time - in such case, an updated version of the Privacy Notice will be posted on the respective website and we encourage you to check it from time to time.

GÉANT keeps this Privacy Notice under regular review; the last update was in March 2018.

Questions, Concerns and Complaints

The GÉANT Association head office is based in The Netherlands. Please let us know if you have any questions, complaints or concerns about how GÉANT processes your personal data or about this Privacy Notice, by contacting GÉANT’s Data Protection Officer:

Ana Alves
GÉANT Association
Hoekenrode 3 1102 BR - Amsterdam - Zuidoost - The Netherlands
Tel number: +31 20 530 4488 Email: GDPR@geant.org

If you wish to raise a complaint directly with the relevant supervisory authority, their details are:

For Netherlands

Dutch Data Protection Authority: Autoriteit Persoonsgegevens
Postbus 93374 2509 AJ DEN HAAG.
Telephone number: (+31) - (0)70 - 888 85 00.
https://autoriteitpersoonsgegevens.nl/nl
GÉANT’s registration number in Netherlands is FG004357

For United Kingdom

Information Commissioners Office
Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
https://ico.org.uk/global/contact-us/
GÉANT’s registration number in UK is ZA187860

Please feel free to contact us for any further questions, through this email address gdpr@geant.org.