Version 1.0 – February 2024

Preamble

Drouhard AC’s privacy policy regulates matters related to the security of the processing of Personal Data, which we collect when you try, buy and/or use one of our Apps in the Atlassian Marketplace, in accordance with the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) which remains in force from the 25th of May 2018 (hereinafter referred to as GDPR).

This policy applies unless otherwise stated. If you do not agree with this policy, do not access or use our Apps or interact with any other aspect of our business.

Cloud Apps (Forge)

All our Apps ("Marketplace Products") are built using Atlassian Forge.

Atlassian Forge is an app framework that prioritises security and privacy.

Apps developed using the Forge framework are hosted exclusively on Atlassian servers. This ensures that all app data is stored in a secure environment managed by Atlassian. As part of their hosting services, Atlassian Forge handles essential functions such as authentication, authorisation, software execution, and data management. The storage location for app data aligns with your Jira or Confluence Cloud region, guaranteeing data localisation and adherence to regional regulations. By entrusting your data to Atlassian's robust infrastructure, we ensure the highest level of professionalism and security for your app data.

Personal Data

Personal Data is understood as every information which allows to directly or indirectly identify a natural person (their name and surname, email address, telephone number and any other data of a person which, when combined may lead to the identification of a particular natural person).

In Drouhard AC when you try, buy and/or use one of our Apps, as a consequence of your consent with Atlassian’s Privacy Policy, Atlassian transmits to Us the following information about Billing Contacts and Technical Contacts that you provided: Name, Corporate email, and phone number, Corporate address. We don’t collect your personal data as a result of your use of our apps, nor do we have any responsibility for the communication to other users of information posted by you on Jira or any of our apps.

All the information we collect about you is aggregated and with statistical purposes. In particular, we are not tracking any kind of personal information or Jira instance info that could identify uniquely your site, any field value, any username or real name of the people that use our Apps, any filter saved.

Access to Customer Data

Access to Customer Data is restricted to authorised Drouhard AC employees and subcontractors who are part of our support and development teams. These individuals undergo a thorough screening process and are bound by strict confidentiality agreements. We ensure that our subcontractors are contractually obligated to uphold the same high standards of data security and privacy that we maintain. This ensures that your Customer Data is accessed only by trusted personnel who require it for the purposes of providing support and improving our services.

Retention and Deletion of Personal Information:

We will only retain data for as long as it is needed and compliant with our data retention procedures. We will maintain your personal information if you are a customer for as long as is desirable in order to manage any account held with us.

We will retain your personal information if you are a potential customer (for instance, if you have requested for information regarding our services and feature) or have subscribed to our marketing list for a maximum of three (3) years, starting from our first communication with you unless you request otherwise. Your personal information which is no longer required to retain are disposed of in a secure manner and consent of data subjects will be taken accordingly.

Privacy Rights

Every user is entitled to the following:

• The right to access – You have the right to request us for copies of your personal/non-personal data.

• The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request us to complete the information you believe is incomplete.

• The right to erasure – You have the right to request that us erase your personal data, under certain conditions.

• The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.

• The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.

• The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us on https://drouhard.atlassian.net/servicedesk/customer/portal/2

Data Protection Officer

If you have any questions about the collection, processing, or use of your data, or if you would like to request information, correct, block, or delete data, revoke the consent given, or object to a particular use of data, you can also contact our data protection officer directly:

Mr. B. Drouhard, Drouhard AC, 82 rue du Bois Hercé, 44100 Nantes, France

Additional important information

If you have any additional questions or concerns regarding our data security and privacy practices, we encourage you to contact us. We are here to address any inquiries you may have and provide you with further information and clarification. Your privacy and data security are of utmost importance to us, and we are committed to ensuring that your concerns are promptly and thoroughly addressed. Please don't hesitate to reach out to us for any further assistance you may need.