PERSONAL DATA STORED BY THE CLOUD-BASED APPLICATIONS

Jira Email This Issue (hereafter JETI) Cloud

Subject Matter

META-INF’s provision of the Services and related technical support to Customer.

Duration of the Processing

45th day from the uninstallation of the application, or urgently but not later than 8 days when the Controller requires the deletion of all Customer Data by META-INF in accordance with the Data Processing Addendum.

Nature and Purpose of the Processing

Processor will process Customer Data submitted, stored, sent or received by Customer, via the Services for the purposes of providing the Services and related technical support to Customer.

Categories of Data

Personal data submitted, stored, sent or received by Customer, using the application may include the following categories of data:

• ‍Email Audit (log)‍
  
  • Full email body, except attachments
  • Sender and recipient names and email addresses
  • Sender user's anonymized user id (Atlassian Account ID)

• ‍Outgoing emails
  ‍
  
  • ‍Sending server
    
    • Username and password
    • User password are encrypted using a cryptographically strong algorithm (https://en.wikipedia.org/wiki/PKCS standard)
      ‍
  • Email sending configurations (manual email sending, notification schemes, workflow post functions)
    
    • Sender and recipient names and email addresses
      ‍
  • Outgoing email queues
    
    • Sender user's anonymized user id (Atlassian Account ID)

• ‍Incoming emails
  ‍
  
  • ‍Mailbox settings
    
    • Username and password
    • User password are encrypted using a cryptographically strong algorithm (https://en.wikipedia.org/wiki/PKCS standard)
      ‍‍
  • Mail handler configurations
    
    • Sender and recipient names and email addresses
      ‍
  • Mail handler audit logs
    
    • Sender and recipient names and email addresses
    • Email addresses and names found during processing and evaluation
    • The anonymized user id (Atlassian Account ID) of the user on behalf of the mail handler actions are executed
      ‍
  • Incoming mail queue
    
    • Sender name and email address
    • Email headers of the processed messages
      ‍
  • ‍Sending/receiving restrictions‍
    
    • Email addresses‍

‍Data Subjects

Personal data submitted, stored, sent or received via the Services may concern the following categories of data subjects: End Users including Customer’s employees and contractors; the personnel of Customer’s customers, suppliers and subcontractors; and any other person who transmits data via the Services, including individuals collaborating and communicating with End Users.

Content Exporter

Subject Matter

META-INF’s provision of the Services and related technical support to Customer.

Duration of the Processing

At most 1 day from the date of the export activity.

Nature and Purpose of the Processing

Processor will process Customer Data submitted, stored, sent or received by Customer, via the Services for the purposes of providing the Services and related technical support to Customer.

Categories of Data

Personal data submitted, stored, sent or received by Customer, using the application may include the following categories of data: documents, presentations, images, and the Atlassian Account ID of the Customer regarding the last export.

Data Subjects

Personal data submitted, stored, sent or received via the Services may concern the following categories of data subjects: End Users including Customer’s employees and contractors; the personnel of Customer’s customers, suppliers and subcontractors; and any other person who transmits data via the Services, including individuals collaborating and communicating with End Users.

Glass Project Documentation for Jira

Subject Matter

META-INF’s provision of the Services and related technical support to Customer.

Duration of the Processing

45th day from the uninstallation of the application, or urgently but not later than 8 days when the Controller requires the deletion of all Customer Data by META-INF in accordance with the Data Processing Addendum.

In addition to the above, META-INF processes the Customer Data with respect to the saved Jira projects until the next day after the Customer deletes it within the application.

Nature and Purpose of the Processing

Processor will process Customer Data submitted, stored, sent or received by Customer, via the Services for the purposes of providing the Services and related technical support to Customer.

Categories of Data

Personal data submitted, stored, sent or received by Customer, using the application may include the following categories of data:

Confluence OAuth Token

Account ID

Access Token

Refresh Token

Saved Jira Project Configuration

Schemes, workflows details, permissions and general project settings

Users in the project

Data Subjects

Personal data submitted, stored, sent or received via the Services may concern the following categories of data subjects: End Users including Customer’s employees and contractors; the personnel of Customer’s customers, suppliers and subcontractors; and any other person who transmits data via the Services, including individuals collaborating and communicating with End Users.

‍

‍Advanced Content Navigator for Confluence (Cloud)

‍

Subject Matter

META-INFʼs provision of the Services andrelated technical support to Customer.

Duration of the Processing

45th day from the uninstallation of the application, or urgently but not later than 8 days whenthe Controller requires the deletion of all Customer Data by META-INF inaccordance with the Data Processing Addendum.

Nature and Purpose of the Processing

Processor will process Customer Data submitted, stored, sent or received by Customer, via the Services for the purposes of providing the Services and related technical support to Customer.

Categories of Data

Personal data submitted, stored, sent or received by Customer, using the application may include the following categories of data:

• Saved navigation views
  
  • Anonymized user id (Atlassian Account ID) of the user who saved the view
  • Anonymized user ids (Atlassian Account IDs) of users selected in people-related filters
    ‍
• Page assignment
  
  • Display names of the current and previous assignees
  • Anonymized user ids (Atlassian Account IDs) of the current and previous assignees
  • Date of the assignment
    ‍
• Personal preferences
  
  • Anonymized user id (Atlassian Account ID)
  • Userʼs saved preferences within the application (for example remembered onboarding progress, space selection presets, and board column order)
    ‍
• Application logs
  
  • Customer site identifier
  • Anonymized session identifier
  • Usage information about how the application is used (without page content)

Data Subjects

Personal data submitted, stored, sent or received via the Services may concern the following categorie sof data subjects: End Users including Customerʼs employees and contractors; the personnel of Customerʼs customers, suppliers and subcontractors; and any otherperson who transmits data via the Services, including individuals collaborating and communicating with End Users.

‍

Marketplace Integration for Jira

Subject Matter

META-INFʼs provision of the Services and related technical support to Customer.

Duration of the Processing

45th day from the uninstallation of the application, or urgently but not later than 8 days whenthe Controller requires the deletion of all Customer Data by META-INF in accordance with the Data Processing Addendum.

Nature and Purpose of the Processing

Processor will process Customer Data submitted, stored, sent or received by Customer, via the Services for the purposes of providing the Services and related technical support to Customer.

Categories of Data

Personal data submitted, stored, sent or received by Customer, using the application may include the following categories of data:

• Marketplace credentials
  
  • Username
  • API token
  • The API token is stored encrypted

Data Subjects

Personal data submitted, stored, sent or received via the Services may concern the following categories of data subjects: End Users including Customerʼs employees and contractors; the personnel of Customerʼs customers, suppliers and subcontractors; and any other person who transmits data via the Services, including individuals collaborating and communicating with End Users.

‍

Myra

Subject Matter

META-INFʼs provision of the Services and related technical support to Customer.

Duration of the Processing

45th day from the uninstallation of the application, or urgently but not later than 8 days when the Controller requires the deletion of all Customer Data by META-INF in accordance with the Data Processing Addendum.

Nature and Purpose of the Processing

Processor will process Customer Data submitted, stored, sent or received by Customer, via the Services for the purposes of providing the Services and related technical support to Customer.

Categories of Data

Personal data submitted, stored, sent or received by Customer, using the application may include the following categories of data:

• Survey responses
  
  • Anonymized user id (Atlassian Account ID) of the respondent, or an anonymous identifier for respondents who are not signed in
  • Related Jira or Jira Service Management issue, request, or project identifiers
  • Satisfaction ratings and scores
  • Free-text comments and other written answers
  • Email addresses, when the Customer includes an email question in a survey
  • Other answers to Customer-configured survey questions
  • Indication that aresponse may be shown as a customer testimonial Date and time of submission and of any later update
    ‍
• Links between feedback and work items
  
  • Identifiers connecting a feedback response to a Jira issue
    ‍
• Optional feedback notifications
  
  • When enabled by the Customer, notification contents that may include the respondentʼs anonymized user id, ratings, comments, written answers (including email addresses if collected), and related issue or project identifiers
    ‍
• Personal preferences
  
  • Anonymized user id (Atlassian Account ID)
  • Userʼs saved preferences within the application (for example onboarding progress, review prompts, and in-app message status)
    ‍
• Survey branding
  
  • Logo and banner images uploaded by the Customer (which may contain personal data if such content is included in the image)

Data Subjects

Personal data submitted, stored, sent or received via the Services may concern the following categories of data subjects: End Users including Customerʼs employees and contractors; the personnel of Customerʼs customers, suppliers and subcontractors; portal customers and other individuals who respond to surveys (including anonymous respondents); and any other person who transmits data via the Services, including individuals collaborating and communicating with End Users.

‍

‍