Effective Date: February 28, 2020
One of Gigantum’s main goals is the broad dissemination of knowledge, code and data. Gigantum bundles data, code and environment into an integrated repository that we call a "Project.” A Project can be publicly or privately posted. Publicly posted Projects can be seen, downloaded, and used by people all over the world. Content creators should have no expectation of privacy for the information in public Projects. Outside of what is necessary to maintain and improve the services, we do not intentionally collect information from private Projects.
What Personal Information Do We Collect?
We collect certain information to provide, improve and protect the Services, and we strive to collect the minimum amount of information necessary to fulfill these purposes. The types of information we collect include account and communications information (see “Account, Contact and Communications Information” section below), usage information (see “Tracking and Cookies” section below), and content information (see “Public Content” section below). We also outline the information we may collect from you in the table below.
The primary way we receive information is when you interact with our Services, even if you have not created an account. For example, when you visit our website or sign into and use our Services then we may receive information about you called usage information or “log data.” Such log data may include your IP address, browser type, operating system, the referring web page, pages visited, location, and device information.
Gigantum does not intentionally collect sensitive personal information, and any incidental posting or storing of such information by you is not our responsibility to correct or protect. Sensitive personal information includes social security numbers, private health data, or private financial data.
Furthermore, the personal information we collect for the maintenance of your account and the Services is protected and not rented or sold to third parties.
We may collect and share certain aggregated and de-identified data with third parties about how our users interact with the Services and respond to our various offerings. This type of aggregation includes statistics on resource consumption, Project content, collaboration, user preferences, and user interaction data like visits and logins.
Below is a table of the different types of data, including personal information, that we may collect or inspect, our purposes for doing so, and the limitations of what we will do with it. Certain categories of data have further explanation in the sections below the table.
|Type of Data||Purpose for Collection||Use||Limitations on Use|
|Name and email address||Needed for creation of account, login, and communications||Providing the Services.||Not shared with any 3rd party, except for the purposes of authentication.|
|Site visits, usage of the Services||Needed for monitoring, maintenance, and improvement of the Services, as well as conformance to the Terms of Service||De-identified and aggregated data may be used for legitimate business purposes.||De-identified and aggregated data may be used for legitimate business purposes.|
|IP address||Needed for monitoring, maintenance, and improvement of the Services, as well as conformance to the Terms of Service||Providing the services.||Not shared with any 3rd party, except for the purposes of authentication or when compelled by legal authorities.|
|Public Content||Needed for monitoring, maintenance, and improvement of the Services, as well as conformance to the Terms of Service||May be used for legitimate business purposes.||Limited by the Terms of Service|
|Private Content||De-identified and aggregated data may be used for legitimate business purposes, and individuals’ data may be used for developing personalized recommender systems with the option by a user to opt out and not have their data used this way.||Individuals’ data will be treated as confidential and will not be shared with any 3rd party, except when compelled by legal authorities.|
Information Sharing and Disclosure
As required by law, we may access, preserve, and disclose your information, if we believe doing so is required or appropriate to: comply with law enforcement requests and legal process, such as a court order or subpoena; enforce the Terms of Service; respond to your requests; or protect your, our or others’ rights, property, or safety.
We reserve the right to transfer your personal information to a third party as part of a sale of some or all of our business and assets to any third party or as part of any business restructuring or reorganization.
Account, Contact, and Communication Information
When you create a Gigantum account you must provide personal information, such as your valid email address, desired username, and password. Providing your first and last name is optional and is displayed in connection to your username for the purposes of username based search in the application and improved communication. Your username will be available in whatever Projects or Datasets you post publicly and may appear in search results. Furthermore, when you log into your account with a device, we may associate that device with your account for purposes such as authentication.
We may use your contact information, such as your email address to communicate with you and send you information about your account and our Services, to help others find your account, and to help prevent spam, fraud, or abuse. If you email us, then we may keep your message, email address, and contact information to respond to your request.
Much of the Gigantum Services are public-facing, and if your content is public-facing then third parties may access and use it in compliance with our Terms of Service. Additionally, limited personal information, such as your first and last name as you enter them, username and email, is associated with your public content and may be gathered by third parties using our Services. Similarly, other public content on Gigantum Cloud may include your username, collected as part of the collaborative process.
Tracking and Cookies
Technologies we use on the website and/or the Service to collect log data, directly or through our vendors, may include cookies (data files placed on the device used to access the website and/or Service), local browser storage, and analytics software (e.g., Google Analytics).
We use Google Analytics as a third party tracking service to collect information about how our website (gigantum.com) performs and how our users, in general, navigate through and use Gigantum. This helps us evaluate our users’ use of the Services; compile statistical reports on activity; and improve our content and website performance. Google Analytics gathers certain information over time, such as your IP address, browser type, internet service provider, referring and exit pages, timestamp, and similar data about your use of the Services. Google provides further information about its own privacy practices and offers a browser add-on to opt out of Google Analytics tracking.
We use Hubspot for tracking website activity (gigantum.com) to improve our Services and support lead generation and communication with users.
“Do Not Track” is a privacy preference you can set in your browser if you do not want online services to collect and share certain kinds of information about your online activity from third party tracking services. We do not track your online browsing activity on other online services over time and we do not permit third-party services to track your activity on our website beyond our Google Analytics tracking, which you may opt out of. Please note, however, that we cannot control third-party tracking and there may be some third-party tracking that occurs without our consent or knowledge. Unless your browser or device settings are configured to make your website and/or Service activities and publicly available information about your activities (such as log data) invisible to usage analytics tools, we do not presently have the capability to omit you from usage analytics to the extent your browser only sends a “do not track” message and does not otherwise screen you from tracking without any action on our part.
To learn more about browser tracking signals and “Do Not Track”, please visit http://allaboutdnt.org.
How We Secure Your Information
We take measures reasonably necessary to protect personal information from unauthorized access, alteration, or destruction; maintain data accuracy; and help ensure its appropriate use. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. No method of transmission, or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.
Retention of Information
We keep your personal information for as long as necessary for the purposes for which it was collected, including to provide you with Service and to conduct our legitimate business interests, or where otherwise required by law.
Your California Privacy Rights
Pursuant to Section 1798.83 of the California Civil Code, California residents have the right to request from a business with whom the California resident has an established business relationship: (1) What types of personal information, if any, of the California resident the business shares with third parties for direct marketing purposes of those third parties; and (2) the identities of the third parties with whom the business has shared such information in the immediately preceding calendar year.
Notice to Residents of Countries Outside the United States.
If you have concerns about the way Gigantum is handling your personal information, please let us know immediately by emailing us directly email@example.com with the subject line “Privacy Concerns.”
Changes to this Privacy Statement
Special Provisions for Users in the European Union/European Economic Area
On What Legal Bases Do We Process Personal Information?
|To provide the website to you.||This is in our legitimate interest (i.e., the provision of the website to you).|
|To provide you with the Service we offer (including any promotions).||This is in our legitimate interest (i.e., the provision of the Service to you), and depending on the circumstances, to perform a contract between you and Gigantum.|
|To communicate with you and other individuals and to carry out your requests and respond to your communications.||This is in our legitimate interest (i.e., the provision and support of the website and Service)|
|To carry out our obligations arising from any contracts entered into between you and Gigantum.||This is to perform a contract between you and Gigantum.|
|To notify you about changes to the website.|
This is in our legitimate interest (i.e., the provision and support of the website and Services, improvement and development of our business operations as well as to improve and ensure the security of the website and those Service).
We may request your consent in circumstances where a legal justification over and above legitimate interests is required by applicable law (e.g., in relation to our use of certain cookies).
|To manage complaints, feedback and questions.||This is in our legitimate interests (i.e., the provision and support of the website and Service and improvements and development of our business operations).|
|To provide you with information about the Service we offer in accordance with your preferences as indicated, including any marketing consent preferences.||We can do this based on your consent.|
|To comply with any legal or regulatory obligations (including in connection with a court order and establishing, exercising or defending legal claims).||This is in our legitimate interests (i.e., protection of our business, employees and customers) and for compliance with legal obligations to which we are subject.|
|To enforce or apply the agreements concerning you (including agreements between you and Gigantum).||This is in our legitimate interest (i.e., protection of our business, employees and customers).|
Transfers Outside of the European Union/European Economic Area
The level of information protection in countries outside the EEA may be less than that offered within the EEA. Where this is the case, we will implement appropriate measures to ensure that your personal information remains protected and secure in accordance with applicable data protection laws. Where our third party vendors process personal data outside the EEA in the course of providing services to us, our written agreement with them will include appropriate measures, usually standard contractual clauses. For more information about the measures in place, please contact us (see “Complaints” section).
|Summary of your rights|
|Right of access to your personal information||You have the right to receive a copy of your personal information that we hold about you, subject to certain exemptions.|
|Right to rectify your personal information||You have the right to ask us to correct your personal information that we hold where it is incorrect or incomplete.|
|Right to erasure of your personal information:||You have the right to ask that your personal information be deleted in certain circumstances. For example (i) where your personal information is no longer necessary in relation to the purposes for which they were collected or otherwise used; (ii) if you withdraw your consent and there is no other legal ground for which we rely on for the continued use of your personal information; (iii) if you object to the use of your personal information (as set out below); (iv) if we have used your personal information unlawfully; or (v) if your personal information needs to be erased to comply with a legal obligation|
|Right to restrict the use of your personal information||You have the right to suspend our use of your personal information in certain circumstances. For example (i) where you think your personal information is inaccurate and only for such period to enable us to verify the accuracy of your personal information; (ii) the use of your personal information is unlawful and you oppose the erasure of your personal information and request that it is suspended instead; (iii) we no longer need your personal information, but your personal information is required by you for the establishment, exercise or defence of legal claims; or (iv) you have objected to the use of your personal information and we are verifying whether our grounds for the use of your personal information override your objection.|
|Right to object to the use of your personal information||You have the right to object to the use of your personal information in certain circumstances. For example (i) where you have grounds relating to your particular situation and we use your personal information for our legitimate interests (or those of a third party); and (ii) if you object to the use of your personal information for direct marketing purposes.|
|Right to data portability||You have the right to obtain your personal information in a structured, commonly used and machine-readable format and for it to be transferred to another organisation, where it is technically feasible. The right only applies where the use of your personal information is based on your consent or for the performance of a contract, and when the use of your personal information is carried out by automated (i.e. electronic) means.|
|Right to withdraw consent||You have the right to withdraw your consent at any time where we rely on consent to use your personal information.|
|Right to complain to the relevant data protection authority||You have the right to complain to the relevant data protection authority where you think we have not used your personal information in accordance with data protection law. You may lodge a complaint with the authority in the member state of your habitual residence or of an alleged infringement of data protection law.|
You can exercise these rights by visiting https://gdpr.gigantum.com.