Home > Privacy Notice Géant Software Catalogue
Privacy Notice

Introduction

The GÉANT Software Catalogue (GSC) is an information repository of software projects and teams identified among the GÉANT Project participants. It has been established in 2019 in order to facilitate and support the GÉANT Project (GN4 and now GN5) software engineering community. It provides the Géant Project with important information about software projects within the Géant Project, size of developer’s community, languages and licences used.

This Privacy Notice is meant to help you understand what information we collect, why we collect it, and how you can update, manage, export, and delete your information including your personal data.

The GSC is used only for the Géant Project purposes, and it is the Géant Project internal tool - only available for the Géant Project Participants.

GÉANT VERENIGING (Association), registered with the Chamber of Commerce in Amsterdam with registration number 40535155 with its registered address at Hoekenrode 3, 1102 BR, Amsterdam, the Netherlands (hereinafter: Géant) is the data controller of the GÉANT Software Catalogue service.

There is a Data Protection Officer appointed at Géant, who can be contacted at: gdpr@geant.org

This privacy notice covers processing of personal data within the Géant Software Catalogue context. To view the general Privacy Notice for GÉANT, please visit the GÉANT website.

Why Do We Process Your Personal Data?

We use information, which include personal data, collected through the service to provide and improve the service, process your requests, prevent fraud, provide you with information, comply with the applicable laws.

In particular, we process personal data in order to:

  • provide you a comprehensive picture of software development efforts in GÉANT Project community;
  • with your permission, contact you and send notifications via e-mail;
  • facilitate your collaboration with other GÉANT Project participants;
  • adjust the service to your individual needs;
  • handle incidents and service delivery issues;
  • keep the service secure and reliable;
  • provide valuable statistics about software project, languages, technology, size of developers community, time dedicated to the software projects.

What Personal Data Do We Process?

For the purposes of the Géant Software Catalogue we will process the following personal data:

  • Your name, surname, affiliation, email
  • Your memberships: in the Géant Project and also active/past status, your NREN information; your organizational role
  • Your source code contribution by software project
  • Your time dedicated to software projects contributions
  • Information about technology and languages used in your software projects
  • Your unique identifier (ID) e.g. from your federation

Upon registration to the GSC, GSC will correlate software projects connected with you from Gitlab, Github, Jira or other software repositories including committers contributing to that project.

  • Information Received from Third Parties

    • Data related to software development is already stored and maintained on an ongoing basis in multiple third-party databases such as GÉANT Jira, GÉANT Bitbucket, individual NRENs' Git repositories or external hosting platforms such as GitHub or GitLab or other software repositories. Personal data are also available via GÉANT Service Provider Proxy and GÉANT eduTeams. We retrieve data from such databases. If we combine that information with information about you collected through the GSC, we will still treat that combined information as set forth in this Privacy Notice. Also, if you use Slack and have a profile photo – your profile photo will be visible in the GSC.

  • Information You Provide to Us

    • Although we mainly collect information from third party databases, you may provide a supplemental information about your software projects so that the catalogue can become more and more reliable.

  • Information Related to Software Development

    • The following is processed in order to build a comprehensive information about development software in GÉANT Project community: contact information of projects team members (emails), source code contribution (e.g. Git commits), issue tracking contribution (e.g. JIRA issues), structure of the organisation and role assignments of GÉANT participants.

  • Information Related to You

    • When you access GÉANT Software Catalogue you are asked to authenticate first. This is a mandatory step to let us know who you are and whether you are a GÉANT participant. Scope of the data we retrieve highly depends on what your mother institution can share with us.

    When are a contributor in any of GÉANT-related software project and the GÉANT Software Catalogue is aware of that project then it is very likely that we already collect some information about you. It possible as we explore multiple third party databases (please refer to section titled "Information Received from Third Parties").

    Moreover, our web servers collect log information in order to provide minimal data set necessary for system administrators in order to resolve incidents and investigate failures. The logs may contain IP addresses and basic details of incoming HTTP requests.

  • Information Collected Automatically

    • Like other online companies, we receive technical information when you use our services. We use these technologies to analyse how people use our service, to improve functionality and to save your log-in information for future sessions. To achieve that we use analytical services for GSC and embedded scripts.

What is the legal basis for the processing?

The legal basis for processing your personal data is legitimate interest, which consists in providing valuable statistics regarding Géant Project about software project, languages, technology, size of developers community, time dedicated to the software projects, what is not overriding rights and freedoms of Géant Project Participants.

Who Do We Share Data With?

Access GÉANT Software Catalogue is restricted to the group of active participants of the GÉANT Project, namely limited via federated authentication mechanism based on the SAML protocol.

The server logs are only shared within the GÉANT Software Catalogue DevOps team for management, support and security purposes from PSNC (Poland) on the basis of the Data Processing Agreement in accordance with the GDPR.

Data Retention

Any user of the GÉANT Software Catalogue can create a software project and hence populate it with personal data retrieved from external systems or entered manually. Personal data collected in the GÉANT Software Catalogue is retained until such software project is deleted, then it is tagged as inactive. Data are kept for time of the Géant Project and 7 years after the termination of the Project.

Data Storage

All our data is stored within the EEA.

Security of your Personal Data

Access to technical log data is restricted and can only be accessed via secure methods by specifically authorised staff. To prevent unauthorised access or disclosure we have put in place technical and organisational procedures to secure the data we collect.

Data Subject Rights

You have the following rights regarding your personal data:

  • You have the right to request access to your data;
  • You have the right to ask us to rectify or erase personal data;
  • You have the right to object to your data being processed by us.

You can exercise those rights by contacting gdpr@geant.org

You also have the right to present a complaint about our personal data processing activities if you feel your personal data is not being managed as described here to the relevant Supervisory Authority:

  • For Netherlands:
    Dutch Data Protection Authority: Autoriteit Persoonsgegevens
    Postbus 93374 2509 AJ DEN HAAG.
    Telephone number: (+31) - (0)70 - 888 85 00.
    https://autoriteitpersoonsgegevens.nl/nl
    GÉANT’s registration number in Netherlands is FG004357
  • For United Kingdom:
    Information Commissioners Office
    Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
    https://ico.org.uk/global/contact-us/
    GÉANT’s registration number in UK is ZA18786

Changes and updates to the Privacy Notice

Services and products offered to you may change from time to time and this Privacy Notice will be updated appropriately. When the Privacy Notice will be changed, an updated version of the Privacy Notice will be posted on the GSC website and additionally notification will be sent to you.

GÉANT keeps this Privacy Notice under regular review; the last update was in March 2023.

Questions, Concerns and Complaints

If you have any questions, complaints or concerns about how GÉANT processes your personal data or about this Privacy Notice, please contact us:

GÉANT Association
Hoekenrode 3 1102 BR - Amsterdam - Zuidoost - The Netherlands
phone number: +31 20 530 4488, email: GDPR@geant.org

Please feel free to contact us for any further questions, through this email address gdpr@geant.org.