Privacy policy

Introduction

This privacy policy was developed by APTIS and applies to all personal information we collect from visitors of our website (epicsumup.com) and users of our products and services. We are committed to the standards of the GDPR.

In this policy “we”,”us” and “our” refer to APTIS GmbH & Co KG. The policy will inform you about how your personal information is collected, for what purposes it’s used, how we share it and how we secure your information.

1 Why do we collect personal information

Personal Information only includes information that can be directly associated with one individual, meaning you personally. It still includes a wide range of information like name, email address, IP addresses and cookie identifiers. We collect personal information to provide you with the best experience of our products and services.

2 How we collect personal information

We collect personal information in many different ways which we will explain in the following. When we collect personal information, we will let you know why we do and how we will use this information. If you choose to not provide us with personal information when requested, we may not be able to provide you with our best services.

2.1 Personal information you provide to us

When you raise a support request, contact us or apply for a job we collect your account information. This may include your name and email address.

We may collect and process payment information when you buy our services. This may include credit card numbers and billing information, using third party PCI-compliant providers.

Any data that you post for publication for our website or services (publication data) may be processed.

2.2 Personal information we collect through the use of our services

For our product ESU we collect anonymous usage data to improve its features and functions. This data should not contain personal information. It is not our concern to analyse content of any particular user.

Cloud:

All Cloud versions 5.0.0 and newer do not collect any analytics information. These versions are built on Forge and run on Atlassian infrastructure, ensuring full control over data egress.

For older Connect versions, analytics information is still collected. This information includes the specific features or functions of ESU being utilized, the license identifier (SEN), and the account ID of the user accessing these features and functions.

Downloadable Products:

Some of the information collected is related to your usage of our features and functions, such as, display of the Detail View Editor, display of the Summary Panel, and additional information required to detail the operation of the function and which parts of our services are affected. Some of the information collected is related to the operating environment or hosting service, such as the version installed, the name and version of our service, and the customer SEN. The collection of this information can be disabled in the administrator settings. If you have the collection of information by Atlassian disabled, the data collection for ESU is automatically disabled as well.

2.3 Personal information we collect through third party services

On our website we collect analytics information with the help of cookies to help us improve it. This information includes the actions the user is performing while visiting our website. And as such may include personal information. The tools we use are HubSpot, Google Analytics and reCAPTCHA.

HubSpot

HubSpot is a software for customer relationship management (CRM). It uses cookies to identify its users and track their browsing history. For more information please visit HubSpot’s Privacy Policy.

Google Analytics

Google Analytics is an analytics service provided by Google, Inc. Google Analytics helps a website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purposes of evaluating your use of the website, compiling reports based on aggregated data on website activity for website operators and providing other services relating to website activity and internet usage. We use the IP anonymization or masking feature for Google Analytics. With this feature, Google abbreviates your IP address before transferring it from the European Economic Area. We do not combine the information collected through the use of Google Analytics with any personal information. You can always opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout

reCAPTCHA

We use the reCAPTCHA service provided by Google Inc. (Google) to protect your submissions via internet submission forms on this site. This plugin checks if you are a person in order to prevent certain website functions from being (ab)used by spam bots (particularly comments). This plugin query includes the sending of the IP address and possibly other data required by Google for the Google reCAPTCHA service. For this purpose your input will be communicated to and used by Google. However, your IP address is previously truncated by Google within member states of the European Union or in other states which are party to the agreement on the European Economic Area and is, as such, anonymized. Only in exceptional cases is a full IP address transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address provided by reCaptcha from your browser shall not be merged with any other data from Google.

This data collection is subject to the data protection regulations of Google (Google Inc.). For more information about Google’s privacy policy, please visit: https://www.google.com/intl/en/policies/privacy/
By using the reCAPTCHA service, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

LinkedIn

We integrate content and buttons from the social network LinkedIn on our website via a plugin. Provider: LinkedIn Corp., 1000 W. Maude Ave., Sunnyvale, California 94085, USA. In order to be able to load content from LinkedIn, it is technically necessary to transmit the IP address of the user to the company. If the user is logged in to LinkedIn, the visit to a page can be assigned to the account. Insofar as we obtain the user’s consent, the processing of data takes place on the legal basis of Article 6 Paragraph 1 Subparagraph 1 Letter a) GDPR. Otherwise, it is based on Article 6 Paragraph 1 Subparagraph 1 Letter f) GDPR. Our legitimate interest in the integration of LinkedIn content and buttons is the user-friendly design of our website. privacy policy

2.4 Cookies we use

To optimize our web presence, we use cookies. These are small text files stored in your computer’s main memory. These cookies are deleted after you close the browser. Other cookies remain on your computer (long-term cookies) and permit its recognition on your next visit. This allows us to improve your access to our site.

You can prevent storage of cookies by choosing a “disable cookies” option in your browser settings. This can limit the performance of our services as a result.

3 How we use your collected information

The personal information collected will be used for two purposes only: to provide you with our best services and to send communications.

Providing our services

Your information is used to provide and improve our services. This includes the performance improvement, development of new features, research purposes and customer support. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business. Examples of such cases include:

  1. Your information is used to perform your transactions with us and provide you with our services.
  2. Your information is used to detect problems and provide customer care.
  3. Your information is used to improve our services which includes adding new features and capabilities.
  4. Your information is used to insure the security of our services.
  5. Your information is used as required by law.
  6. Your information is used for personalized communication.
Newsletter

When you subscribe to our newsletter, your e-mail address is used for our own advertising purposes until you cancel the newsletter again. The cancellation is possible at any time. The following consent has been expressly granted by you separately, or possibly in the course of an ordering process:
(e.g.. subscribe to newsletter or similar)
You may revoke your consent at any time with future effect. If you no longer want to receive the newsletter, then unsubscribe as follows:
(via mail or unsubscribe link (if available))

Employment opportunities

When you apply for a job, we use the personal information you provide to us to evaluate your suitability for employment and recruitment opportunities at our company. For more information, see our Privacy Policy for applications.

Disclosure

According to the Federal Data Protection Act, you have a right to free-of-charge information about your stored data, and possibly entitlement to correction, blocking or deletion of such data. Inquiries can be directed to the following e-mail addresses: (support@aptis.info)

4 How we share your personal information

We may disclose your personal data to any member of our company insofar as reasonably necessary for the purposes, and on the legal bases, set out in this policy.

Necessary for the provision of Atlassian tools and services, we may provide personal data to Atlassian.

For compliance with a legal obligation to which we are subject, we disclose your personal data.

Some of our provided services require third party service providers e.g. virtual infrastructure, communications providers and customer relationship management. These third parties have been carefully selected by us and we have taken steps to ensure the protection of your personal information. We do not share personal information with third parties for their marketing purposes.

5 Data retention

5.1 Data retention for our cloud services and downloadable products

App data storage and location

ESU, built on Forge and operating within Atlassian infrastructure, automatically aligns with the data residency location selected for your Atlassian products. As ESU is Runs on Atlassian certified, users retain complete control over data egress.

For Connect versions 4.3.0 and older, ESU Cloud utilizes a server located in Germany (plugins.aptis.info) for the storage of plugin data. For license validation purposes, only client information provided and generated by Atlassian is stored. All other content handled by our cloud plugin is stored directly within your Atlassian Cloud installation. Access to this service is restricted to users within an Atlassian Jira instance. Each incoming web request undergoes authentication and authorization prior to granting access to customer data. Our applications access only the information necessary for the provision of our services, and only data generated by our applications may be temporarily retained for initialization purposes. 

Cloud analytics information

All Cloud versions from 5.0.0 and above do not collect any analytics information. For older Connect versions, the collected analytics information is stored on a server hosted in Germany.

Analytics information of our downloadable products

The statistics collected from the use of our downloadable products are also stored on a server hosted in Germany. The information is updated once a day.

5.2 Retaining and deleting personal data

Personal data we process for any purpose shall not be kept for longer than is necessary. In some cases it is not possible for us to specify in advance how long your personal data will be retained. Where the retention of your personal information is necessary for compliance with legal obligation, we may retain your personal information.

6 International data transfers

In the following section we provide information about the circumstances in which your personal data may be transferred to countries outside the European Economic Area (EEA).

Our provided services and our website may be using servers around the world. The European Commission has made an “adequacy decision” with respect to the data protection laws of each of these countries. Transfers to each of these countries will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the European Commission.

Our office is in Germany. If you are a visitor located in the EEA, [APTIS Germany] is the data controller of your personal information provided to us through interactions with our services.

7 Your rights

Your principal rights under data protection law are:

  1. the right to access;
  2. the right to rectification;
  3. the right to erasure;
  4. the right to restrict processing;
  5. the right to object to processing;
  6. the right to data portability;
  7. the right to complain to a supervisory authority; and
  8. the right to withdraw consent.

For any questions about your rights or should you wish to exercise your rights in relation to your personal information, you can do so by written notice to us or via email to support@aptis.info.

8 Changes to this privacy policy

This policy may be updated from time to time. To ensure you are happy with any changes you should check this page occasionally. If there are significant changes to this policy we may notify you by email.

9 Contacting us

We are APTIS GmbH & Co KG, an Atlassian Marketplace Vendor based in Germany. Our principal place of business is at Bergstrasse 121, 47589 Uedem, Germany.

If you have any questions regarding this policy, you may contact us:

  1. by post, to Bergstrasse 121, 47589 Uedem, Germany;
  2. by telephone, on +49 2825 91690 00; or
  3. by email, using support@aptis.info

Table of Contents