iPlugin Privacy Policy

The information contained in this policy applies to the processing of personal data on our website or through the "iPlugin". Its goal is to inform you about the extent of processing, the processing purposes, the recipients, legal bases, retention periods and your rights. Personal data is any information relating to an identified or identifiable natural person, i. refers to a person (hereinafter also "data subject"), including, for example, your name, address or e-mail address. The term "processing" of personal data means in particular the collection, storage, use and transmission of such data.

 

I. Name and address of the person responsible

The person responsible within the meaning of the General Data Protection Regulation (DSGVO) and other national data protection laws of the member states as well as other data protection regulations is:

Novibyte UG (limited liability)

Elsa Street 28

13053 Berlin

Germany

Email: info@novibyte.com

Web: www.novibyte.com

Managing Director: Marek Paweł Karczewski

 

II. General information about data processing

1. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b of the GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual actions.

Insofar as processing of personal data is required to fulfill a legal obligation that is subject to our company, Art. 6 para. 1 lit. c of the GDPR serves as the legal basis.

If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, Art. 6 para. 1 lit. f of the DDPR serves as the legal basis for processing.

1. 2. Data deletion and storage duration

The personal data of the data subject will be deleted or processing will be restricted as soon as the purpose of the storage is invalidated. Notably, data storage may be prolongued, if this follows from European or national legislator regulations, laws or other regulations to which the controller is subject.

 

III. Provision of internet presence and creation of logfiles

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the calling device (computer, smartphone, tablet, etc.).

The following data is collected:

  • The IP address of the calling device
  • Browser type / browser version
  • Used operating system
  • Referrer URL
  • Host name of the accessing computer
  • Time of server request

This data is also stored in the log files of our system. A storage of this data together with other personal data of the user does not take place.

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files follows Art. 6 para. 1 lit. f of the GDPR.

3. Purpose of the data processing

The temporary storage of the IP address by the system is necessary to allow delivery of the Internet presence to the device of the user. To do this, the user's IP address must be kept for the duration of the session. The storage of the data in log files is done to ensure the correct functionality of the website and for improvemend and statistical analysis purposes. Our legitimate interest in data processing follows from this purpose.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting the data for providing the Internet presence, this is the case when the respective session is ended.

In the case of storing the data in log files this is the case after 7 days at the latest. An additional storage period is possible. In this case, the IP addresses of the users are deleted or anonymised, so that identification of the calling client is no longer possible.

 

IV. Contact by e-mail

1. Description and scope of data processing

It is possible to contact us via the e-mail addresses provided on our website. In this case, the user's personal data transmitted by e-mail will be collected.

2. Legal basis for data processing

The legal basis for the processing of the data, which are transmitted in the course of making contact by e-mail, is Art. 6 (1) lit. f of the DGPR. If the establishment of contact is aimed at the conclusion of a contract or if it takes place within the framework of an existing contractual relationship, additional legal basis for processing is Art. 6 para. 1 lit. b of the GDPR.

3. Purpose of the data processing

The processing of personal data is solely used to process the contact. Our legitimate interest in data processing follows from this purpose.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data sent by e-mail or contact form or transmitted as part of a telephone contact, this is the case when the respective conversation with you is over. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified.

If, in the course of the communication, data is generated which we are obliged to store or store on the basis of tax, commercial or other regulations, the deletion takes place only after expiry of the respective statutory retention or storage periods. The legal basis for this storage is Art. 6 para. 1 lit. c of the GDPR. 

 

V. Registration of the iPlugin

1. Description and scope of data processing

The registration of the iPlugin requires the provision of personal data for the registration of contact information and the acceptance of the terms of usage. The following data is collected during the registration process:

  • E-mail address from Jira
  • Date and time the terms of use were accepted
  • User ID from Jira
  • User's country of origin

2. Legal basis for data processing

The legal basis for processing the data is Art. 6 para. 1 lit. b of the GDPR.

3. Purpose of the data processing

The processing of personal data as part of the opening and further provision of the user account takes place in order to provide the user with the corresponding functionalities of the user account and thus serves to fulfill the corresponding agreement with the user.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. This is usually the case for the data stored in the customer account when the customer account is deleted.

Insofar as data is generated in the context of the customer account for which we are obliged to store or store it on the basis of tax, commercial or other regulations, the deletion takes place only after expiry of the respective statutory retention or storage periods. The legal basis for this storage is Art. 6 para. 1 lit. c of the GDPR.

 

VI. Donations

1. Collection of payment data by payment service providers

Insofar as you make a donation to Novibyte by Paypal, this payment service provider collects necessary payment data itself. In this respect, the privacy policy of the respective payment service provider applies. 

 

VII. Categories of recipients of personal data

For the provision of our Internet presence and the contact options offered, we use various service providers, i.a. Host providers, e-mail providers who process the data stored with them but only on our behalf as a processor according to Art. 28 of the GDPR in the European Union.

 

VIII. Rights of the person concerned

If your personal data is processed, you are the person affected in the sense of the GDPR and you have the following rights in relation to the responsible party (and if applicable, following from further conditions laid down in the relevant regulations):

  • The right of access according to Art. 15 of the GDPR
  • The right to rectification under Art. 16 of the GDPR
  • The right to erasure ("right to be forgotten") according to Art. 17 of the GDPR
  • The right to restriction of processing according to Art. 18 of the GDPR
  • Notification obligation regarding rectification or erasure of personal data or restriction of processing under Art. 19 of the GDPR
  • The right to data portability according to Art. 20 of the GDPR
  • The right to objection according to Art. 21 of the GDPR
  • The right not to be subjected to an automated decision under Art. 22 of the GDPR
  • The right to withdrawal of consent for personal data processing pursuant to Art. 7 (3) of the GDPR

To assert these rights, please use the contact details provided at the beginning or the forms provided at your account page.

Without prejudice to any other administrative or judicial remedy, you also have the right to complain to the competent authority if you believe that the processing of personal data concerning you is contrary to the GDPR.