About this document

This document covers protection and privacy topics for personal data related to the Eclipse Vorto repository - hereinafter referred to as "Vorto". It discusses how Vorto collects and processes personal data.

This policy is an addendum to the Eclipse Foundation Privacy Policy.

Key Points

• Information models marked public are visible by anyone. You cannot unpublish a released and public model, you can only deprecate it since others might already be referring to your model.
• You have full control on inviting collaborators to your namespace and privileges for each of them.
• We only store your GitHub-Id (for GitHub authentication) or Bosch Subject-Id (for Bosch authentication) to uniquely identify you. Email-id is optional and you can choose to add/remove it from your account.
• You can export all your models and choose to delete your account at anytime. All published models for a deleted account becomes anonymous.

Types of personal data collected and processed

The following types of personal data is processed:

1. Account Information:
   • GitHub-Id: The GitHub-Id is an identifier which uniquely identifies your account if you login with your GitHub credentials. Models created or modified by you show this identifier publicly.
   • Bosch Subject-Id: The Bosch Subject-Id is an identifier which uniquely identifies your account if you login with your Bosch credentials. Models created or modified by you show this identifier publicly.
2. IP address: Captured in access logs, used to serve you data faster using CDN.
3. Email Address (Optional): A user may provide an email address. Email address is used by the system to notify users of pending actions such as release approvals or notify the user upon discussions on their models.

Other information you share with us

1. Public Information: You are solely responsible for Vorto models created or modified by you. Think carefully before sharing or releasing a model and marking them public, especially if they contain sensitive information. Your account identifier and timestamps for your models are visible to other users of Vorto repository depending on who you share your namespaces/models with.
2. Comments: Any comment made by you as part of discussions on a Vorto model are visible to all collaborators of your namespace. A copy of your comment will also be sent to your email if you have have provided your email address in your account settings. You are solely responsible for the content of your comments.
3. Images: You are solely responsible for images uploaded by you. Please make sure the images do not infringe any copyright.

Personal data processing details and considerations

• We only store log data for a maximum of 7 days
• You can export your Vorto models at any time
• You can delete your account at any time
• We do not use tracking cookies to monitor your activity on our platform or serve you ads
• You can choose to add/remove/update your email address at any time
• We never share or sell your personal data with any third party
• Your personal data is stored in AWS Cloud in Frankfurt region

Assistance

Questions regarding the privacy policy for Vorto repository should be directed to vorto-support@bosch.com.