Privacy Policy / Terms of Use​

18. code.syseleven.de

SysEleven operates a GitLab instance based on a platform provided by GitLab Inc. The GitLab instance acts as a repository for our customers to save and store their source code securely over the course of contract performance. The instance is hosted on a SysEleven subdomain on SysEleven servers within the European Union and is available to users of the customer who are authorised and registered by SysEleven. As the controller within the meaning of Article 4 (7) GDPR, our customer determines the purposes and methods, and on this basis according to the individual case also the legal basis for the processing of its users’ personal data that are collected when using of our GitLab instance. We exclusively process these data as part of contract processing pursuant to Article 28 of the General Data Protection Regulation (GDPR) to provide services for the customer. The following information concerning the legal basis for processing relates to the customer’s legal basis as controller insofar as the data of the customer’s users are concerned. The customer’s information that it provides to its users takes priority over the present policy. For own users of SysEleven, the Privacy Policy for employees and applicants also applies in its current valid version. To set up a user account, the following data are required:

• • Email address
  • Username
  • Full name
  • Company name of employer

These required data are processed for the purpose of proper provision of services to customers as well as for compliance with standard security requirements in the industry. Insofar as you use our GitLab instance as part of your activity as an employee of our customer, the legal basis for data processing is generally Article 6 (1)(b) GDPR in conjunction with Section 26 of the Federal Data Protection Act (BDSG). Please note that GitLab is a collaborative platform with the fundamental operating principle of sharing information among users. SysEleven uses a community edition of GitLab and, where permitted by the internal system configuration options, restricts the visibility of user data to a minimum. The users of our instance can view the usernames and user-defined full names of other users, independently of their association with the same or different customers. Currently, when creating a account, the email address is automatically established as the full name; however, the user can modify this in the account settings.

Users can save optional additional data in their user profiles, in particular:

• • Profile picture
  • Status text
  • Skype account name
  • LinkedIn account name
  • Website URL
  • Twitter account name
  • Location
  • Job title
  • Name of organisation
  • Free text biography

These optional data are processed on the basis of Article 6 (1)(a) GDPR in the context of the user’s consent. The optional data are not required by SysEleven. All optional data that you voluntarily save in your profile can be viewed by other instance users. Consent to processing occurs by entering the data. Users can correct or delete these data on their own and withdraw their consent to processing in this way.

Each time a user accesses the GitLab instance, data can be collected about this process. Depending on the browser used, the log data set includes the following data in particular:

• • Browser type
  • Language setting
  • Date and time of each visitor request
  • IP address

These operation data are processed for the fulfilment of legal obligations pursuant to Article 6 (1) Sentence 1 (c), Article 32 (1) GDPR and furthermore our legitimate interest in improving our service pursuant to Article 6 (1) Sentence 1 (f) GDPR. The legitimate interest lies in proper provision of the GitLab instance, elimination of faults and defence against inadmissible access.

Our GitLab instance only uses cookies to the extent required for its use, particularly in order to identify the users who are logged in. The legal basis is Article 6 (1)(f) GDPR. The legitimate interest lies in provision of the GitLab instance, as well as for the customer’s users to carry out order-related tasks. By checking the “Remember me” box, a cookie is placed that enables automatic login according to the user’s choice. These cookies are automatically erased from your end device after their period of validity has expired. By selecting the “Remember me” function, you consent to the placement of a cookie. The legal basis is Article 6 (1)(a) GDPR. You can prevent the placement of cookies in your browser settings and delete previously placed cookies. The deactivation of cookies can lead to certain functions of the instance not working properly, and in particular automatic login is not possible for further access to the instance.

The data processed by the GitLab instance are erased as soon as the purpose for processing ceases to apply, in particular the provision of services within the framework of the respective contractual relationship, provided that the applicable retention and limitation periods do not justify extended storage.

SysEleven does not disclose to third parties any personal data that are processed in our GitLab instance, except for the profile data listed above that are visible to all users of the GitLab instance.