PRIVACY POLICYfor Graphity for Confluence
Effective date: July 7, 2025
Your privacy is important to us and we know that you care about your personal data and how it is used. This Privacy Policy is meant to help you understand how your personal information is processed by the Software, which personal data we collect, why we collect it and what we do with it.
Definitions
Personal data means data/information about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).
Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, structuring, storage, alteration, retrieval, use, disclosure, restriction, erasure or destruction.
The User is the individual using the Software.
Data collection and use
No personal data is made available to yWorks when you install the Software on a server.
When a license is applied to the Software, the information about a technical contact and a billing contact is made available to yWorks via Atlassian.
Types of data collected
Billing
This information includes contact name, company name (if any), physical or email addresses, and phone numbers. Please see Atlassian's privacy policy for details (https://www.atlassian.com/legal/privacy-policy).
We process the via Atlassian shared personal data only for specific and limited purposes. We save your company contact information in the database of yWorks so we may use your email address or phone number to communicate with you, for example to respond to queries, to notify you of a new release of the product you purchased or to remind you of the expiry of a service agreement for the Software.
Software usage
The Software does not send any data or personal data from your server nor from any client browser to us or any third party with the following exception:
If enabled in the administration panel of the Software, the Software sends anonymous error reports to yWorks, including the URL from which the Software is hosted. Sending an error report is optional. Users may add a description to error reports. If the user provides personal data along with that description, this data is added to the error report and may be stored together with the report at yWorks.
The Software uses the local storage to store application specific settings. These settings do not include any personal data. These settings will only be used by the Software and are not disclosed to yWorks or any third party.
Legal basis for processing
The collected data is processed by yWorks GmbH based on:
- In order to fulfill a contract to which the data subject is party, e.g. technical support (Art. 6(1) lit. b GDPR).
- Legal obligations by which processing of personal data is required, e.g. tax obligations (Art. 6(1) lit. c GDPR).
- Finally, processing operations could be based on Article 6(1) lit. f GDPR. This legal basis is used for processing operations which are not covered by any of the aforementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. In this case our legitimate interest is to carry out our business in favor of the well-being of all our employees and the shareholders.
Retention of data
yWorks GmbH will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies.
Disclosure of data
yWorks GmbH may disclose your Personal Data in the good faith belief that such action is necessary to:
- To comply with a legal obligation
- To protect and defend the rights or property of yWorks GmbH
- To prevent or investigate possible wrongdoing in connection with the Service
- To protect the personal safety of users of the Service or the public
- To protect against legal liability
Security of data
The security of your data is important to us but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
Your data protection rights under the General Data Protection Regulation (GDPR)
yWorks GmbH aims to take reasonable steps to allow you to correct, amend, delete or limit the use of your Personal Data.
If you wish to be informed about what Personal Data we hold about you and if you want it to be removed from our systems, please contact us.
In certain circumstances, you have the following data protection rights:
The right to access, update or delete the information we have on you. Whenever made possible, you can access, update or request deletion of your Personal Data directly within your account settings section. If you are unable to perform these actions yourself, please contact us to assist you.
The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete.
The right to object. You have the right to object to our processing of your Personal Data.
The right of restriction. You have the right to request that we restrict the processing of your personal information.
The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.
The right to withdraw consent. You also have the right to withdraw your consent at any time where yWorks GmbH relied on your consent to process your personal information.
Please note that we may ask you to verify your identity before responding to such requests.
You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the European Economic Area (EEA).
Changes to this privacy policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.
We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the "effective date" at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Data controller and contact information
Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:
yWorks GmbH
vor dem Kreuzberg 28
72070 Tübingen, Germany
WWW: https://www.yWorks.com
email: contact@yWorks.com
phone: +49 7071 9709050
fax: +49 7071 9709051
Each data subject may contact our data protection officer at any time with all questions and suggestions regarding data protection:
Data Protection Officer
c/o yWorks GmbH
vor dem Kreuzberg 28
72070 Tübingen, Germany
email: dpo@yWorks.com
Respecting section 8.4 (d) of the Atlassian Marketplace Vendor Agreement (https://www.atlassian.com/licensing/marketplace/publisheragreement) it shall be made clear that Atlassian is not responsible for the privacy, security or integrity of End User Data as defined in the Atlassian Marketplace Vendor Agreement section 8.4. (a) collected or processed by Licensor or by Licensor’s marketplace apps.
