End User Privacy Policy

for applications

for team neusta GmbH
Konsul-Smidt-Strasse 24
28217 Bremen, Germany

Phone: +49 421 20696 - 0
Fax: +49 421 20696 - 99
Email: atlassian@team-neusta.de

1. General

The applications are provided by team neusta GmbH, Konsul-Smidt-Straße 24, 28217 Bremen, via the Atlassian Marketplace operated by Atlassian Pty Ltd, c/o Atlassian, Inc., 350 Bush Street, Floor 13, San Francisco, CA 94104 (hereinafter referred to as “Atlassian”).

So that you may have the best possible control over your personal data, this privacy policy is designed to inform you about which personal data we collect when you use the app, how we use this data, and what rights and choices you have.

You can access this privacy policy at any time on our website (https://www.team-neusta.de/service/datenschutz/) under “DATA PROTECTION.”

2. Data Protection

We take the protection of your personal data very seriously. We treat your personal data confidentially and process it in accordance with the EU General Data Protection Regulation (GDPR), the statutory data protection regulations of the Federal Republic of Germany, and this privacy policy.

3. NOTICE CONCERNING THE DATA CONTROLLER

The organization in charge of handling your data is:

team neusta GmbH
Konsul-Smidt-Strasse 24
28217 Bremen, Germany

Phone: +49 421 20696 - 0
Fax: +49 421 20696 - 99
Email: atlassian@team-neusta.de

The data controller means the natural or legal person who, alone or together with others, decides on the purposes and means of processing personal data.

4. DATA PROTECTION OFFICER

We have appointed

Mr. Günther Ewald
HEC GmbH
Konsul-Smidt-Strasse 24
28217 Bremen, Germany

Phone: +49 421 207 500
Email: datenschutz@neusta.de

as our data protection officer.
 

5. COLLECTION, PROCESSING, STORAGE AND USE OF YOUR PERSONAL DATA

Personal data is all information that relates to identified or identifiable natural persons, e.g. first name, surname, email address.

5.1.    COLLECTION, PROCESSING, STORAGE AND USE OF YOUR DATA WHEN ORDERING THE APP VIA THE ATLASSIAN MARKETPLACE

You can order the app via the Atlassian Marketplace. When ordering the app, various pieces of (personal) data are transmitted to the Atlassian Marketplace. The processing of this data is carried out exclusively by Altlassian and is beyond our control. More information on data protection can be found in Atlassian’s privacy policy, available at:

https://www.atlassian.com/legal/privacy-policy

Atlassian sends us the order data you have provided, including your name, company name, address, email address, and telephone number.

This data is stored and used by us to assign the app to you and to provide you with information about the app, e.g. assistance, how-tos, webinars. These purposes are considered within our legitimate interests in processing your data in accordance with Art. 6 para. 1 lit. f GDPR. The legal basis for processing is your consent under Art. 6 para. 1 lit. f GDPR.

Your data will be deleted by us, unless there are contractual or legal obligations to the contrary, as soon as it is no longer required to achieve the aforementioned purposes. This is the case, for example, when you no longer have a license for the app.

5.2.    COLLECTION, PROCESSING, STORAGE AND USE OF YOUR DATA WHEN YOU CONTACT

You have the option to contact us by phone or email and send us a message. All personal data resulting from your contact will be stored and processed by us.

The legal basis for processing the data you transmit to us when you contact us is Art. 6 para. 1 lit. f GDPR. If you contact us for the purpose of entering into a contractual relationship with us, the legal basis for the processing of your data is also Art. 6 para. 1 lit. b GDPR.

We will use your data exclusively for the processing of your request, the processing of a possible contract, and to contact you. These purposes are considered within our legitimate interests in processing your data in accordance with Art. 6 para. 1 lit. f GDPR.

Your data will be deleted by us, unless there are contractual or legal obligations to the contrary, as soon as it is no longer required to achieve the aforementioned purposes. This is the case when your request has been answered and the underlying facts of your contact have been fully clarified. If you enter into a contract with us as a result of your contact, your data will only be deleted when it is no longer required to fulfil said contract or implement precontractual measures. We would like to point out that it may be necessary to save your data even after the contract has been fulfilled in order to meet other contractual or legal obligations.

You can object to the use of your personal data at any time without incurring any costs other than the cost to transmit your objection. In such a case, the data stored from when you contacted us will be deleted; we will then discontinue the processing of your request. If the data is required to fulfil or establish a contractual relationship with you, premature erasure of data is only possible insofar as contractual or legal obligations do not preclude erasure.

5.3.    COLLECTION, PROCESSING, STORAGE AND USE OF YOUR DATA WHEN USING OUR SUPPORT

The use of our support services is possible after prior registration with the mandatory name and email address data. In addition to this mandatory data, you can voluntarily provide further data. This data and all other personal data resulting from your support request will be stored and processed by us.

The legal basis for processing is your consent under Art. 6 para. 1 lit. b GDPR.

We will use your data to establish and implement the contractual relationship, to process your support request, to provide our support services, and to contact you.

Your data will be deleted by us, unless there are contractual or legal obligations to the contrary, as soon as it is no longer required to fulfill a contract, perform precontractual measures, or achieve the aforementioned purposes. This is particularly the case when your support request has been fully clarified and processed by us. We would like to point out that it may be necessary to save your data even after the contract has been fulfilled in order to meet other contractual or legal obligations.

5.4.    COLLECTION, PROCESSING, STORAGE AND USE OF YOUR DATA WHEN USING OUR APP

Our app enables you to supplement JIRA with information, including personal data, from your customer relationship management system (hereinafter referred to as “CRM system”). You alone decide and determine which information and personal data from your CRM system will be linked to JIRA and which information and personal data are displayed in JIRA. The processing of this information and personal data takes place exclusively by you and is completely beyond our sphere of influence.

 

6. DISCLOSURE AND TRANSFER OF PERSONAL DATA

Your personal data will not be passed on, sold or otherwise transferred to third parties. We only pass on your personal data, if at all, to third parties for the purpose of fulfilling a contract or within the framework of a legal permit or on the basis of your consent, which can be revoked at any time for the future, and only to the extent necessary to fulfill our contractual obligations.

Our service partners need your personal data and will process it exclusively on our behalf, as expressly permitted by Art. 28 para. 3 GDPR.

We only transfer your personal data to state institutions or authorities if obliged to do so under law.
 

 

7. LOCATION OF YOUR DATA, DATA SECURITY

Our servers and data centers are located at neusta infrastructure services GmbH, Konsul-Smidt-Straße 24, 28217 Bremen, Germany.

The GDPR guarantees the same high level of data protection within the European Union. When selecting our service partners, we therefore usually rely on European partners and therefore process your personal data within the European Union if possible. However, we also use the services of some third-party providers. Your data will only be processed by a third party provider in a third country if the requirements of Art. 44 ff. GDPR are met. A transfer of personal data to a third country may only be carried out if the European Commission has decided that the third country in question offers an appropriate level of data protection in accordance with the regulations applicable within the European Union. In addition, personal data may then be transmitted to a third country if suitable guarantees (e.g. through the conclusion of so-called standard data protection clauses) are met. In any case, we will take all necessary steps to ensure that your personal data is always adequately protected.

We take various physical, technical, organizational and administrative security measures to protect the protection of your data to the appropriate extent, depending on the sensitivity of the data.
 

8. DATA SUBJECT RIGHTS

With regard to the processing of your personal data, the GDPR grants you comprehensive rights as a data subject vis-à-vis the data controller, as described below:

 

8.1.    RIGHT OF INFORMATION PER ART. 15 GDPR.

You have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it is not processed by us. the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of automated decisionmaking including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed about which guarantees exist in accordance with Art. 46 of the GDPR if your data are transferred to third countries. 

 

8.2.    RIGHT TO HAVE DATA CORRECTED PER ART. 16 GDPR

You have the right to immediate correction of incorrect data relating to you and/or completion of your incomplete data stored by us.

 

8.3.    RIGHT TO HAVE DATA DELETED PER ART. 17 GDPR

If the requirements of Art. 17 para. 1 GDPR are met, you also have the right to request that we delete your personal data. However, this right shall not exist, in particular, if the processing is essential to the exercise of the right to freedom of expression and information or to compliance with a legal obligation, or if processing is necessary for reasons of public interest, or for the assertion, exercise or defense of legal claims.

 

8.4.    RIGHT TO RESTRICT THE PROCESSING OF DATA PER ART. 18 GDPR

You have the right to request the restriction of the processing of your personal data

  • for as long as the accuracy of the data you have disputed is being checked;
  • if you refuse to have your data deleted due to inadmissible data processing and instead request that the processing of your data be restricted;
  • if you need your data to remain on file in order to assert, exercise. or defend legal claims;
  • if we no longer need this data after the purpose has been achieved; or
  • if you have lodged an objection for reasons derived from your particular situation, as long as it has not yet been determined whether our legitimate reasons prevail.

 

8.5.    RIGHT TO NOTICE PER ART. 19 GDPR

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to communicate this rectification, erasure or restriction of processing to all recipients to whom the personal data concerning you have been disclosed, unless this proves impossible or involves a disproportionate effort. It is your right to be informed regarding such recipients.

 

8.6.    THE RIGHT TO DATA PORTABILITY PER ART. 20 GDPR

You have the right to receive the personal data you have provided to us in a structured, current and machinereadable format or to request its transfer to another responsible person, insofar as this is technically feasible.

 

8.7.    RIGHT TO REVOKE YOUR PRIOR CONSENT PER ART. 7 PARA. 3 GDPR

You have the right at any time to revoke, with future effect, a consent previously given to us for the processing of your personal data. If you exercise this right, we will immediately delete the relevant data, unless other contractual or legal regulations require otherwise. Withdrawing consent does not affect the legality of processing carried out based on consent before its withdrawal.

 

8.8.    RIGHT TO FILE COMPLAINTS PER ART. 77 GDPR

If you believe that the processing of personal data concerning you is contrary to the GDPR, you have the right, irrespective of any other administrative or judicial remedy, to lodge a complaint with a supervisory authority, specifically in the Member State in which you reside, work, or where the suspected infringement took place.

 

8.9.    RIGHT OF OBJECTION

IF, WITHIN THE CONTEXT OF A CONSIDERATION OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, WITH EFFECT FOR THE FUTURE, ON GROUNDS ARISING FROM YOUR SPECIFIC SITUATION.

IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS FOR PROCESSING WHICH ARE WORTHY OF PROTECTION AND WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECTMARKETING PURPOSES.

9. UPDATE

We reserve the right to change this privacy policy in the future. We will inform you in advance of any significant changes we make to it.

The use of your personal data is subject to the current version of the privacy policy, which can be accessed at any time via the “PRIVACY POLICY” link in the app. If you continue to use the app after the changes take effect, you are declaring your consent to the updated terms of the policy.


Please do not hesitate to contact us if you have any questions or comments about the above privacy policy. Please send an email to atlassian@team-neusta.de.


Updated: January 2021