Date of issue: 30/03/2021
Collabora is an IT global consultancy company, specialized in open source software. Our main office is in The Platinum Building, St John's Innovation Park, Cambridge, United Kingdom.
If you have any queries in connection with how we use your data, you can contact our Data Protection representative by emailing firstname.lastname@example.org or phoning one of our offices. You can also contact our EU Representative, Olivier Potin at email@example.com.
We collect personal contact data when attending events, and trade shows, and via the contact form in our website. This data will be later used for leads and possible business opportunities.
When we collect and process Customer data, it is for contractual reasons only.
Where Customer employees' username and contact details have been used in a git commit, the legal basis is legitimate interest on the grounds that it is necessary to be able to trace the history of the software development and protect against malicious code being introduced.
We collect and process the following data to allow us to deliver this contract:
|Business contracts||Full name, email address, phone numbers|
|Shipping equipment||Full name, business address, phone numbers. This could be non-business phone numbers depending on the kind of address the equipment is being shipped to|
|Source code repositories and bug trackers||Full name, username, such as a Github ID|
|Invoicing||Email address, business address, bank details|
|Leads and business development||Full name, email address, and phone number|
Our servers are located in the UK and Canada which are considered to already be bound by GDPR/DPA legislation. On these servers we host email, CRM (customer data management), Phabricator (task management system), Mattermost (internal messaging), Gitlab(source code management) and document storage.
We may occasionally use Google Docs and Hangouts to share information. This data transfer to Google servers in the United States of America is protected by Standard Contractural Clauses.
Data related to invoicing is processed by a 3rd party whose data servers are located in the United States of America. This data transfer is protected by Standard Contractural Clauses.
These 3rd parties are service providers (data processors) to Collabora and we only share information with them as part of regular business activities. In no case, does Collabora sell customer data of any kind.
Collabora will keep all project related data for a period of 12 years from project completion.
Personal data entered into a git repository will be retained permanently.
Collabora will keep all financial records from the project for a period of 12 years from project completion year.
Collabora will keep data collected via contact forms in our website for 2 years.
Data collected from events, and trade shows, will be retained for a period of 6 months.
We operate under the UK Data Protection Act (DPA) 2018 which encompasses the EU GDPR regulation.
The data protection laws require us to make sure that the personal data we hold is:
To exercise any of the rights listed below, please contact us using firstname.lastname@example.org. In order to process your request, we may need to verify your identity for your security. In such cases, we will need you to respond with proof of your identity.
Update policy notice to reflect the UK leaving the EU and the EU changing the US status to non-adequate requiring an alternative method such as Standard Contractural Clauses to be put in place instead of Privacy Shield.