CINXE.COM

<!doctype html> <html data-n-head-ssr lang="en-us" data-n-head="%7B%22lang%22:%7B%22ssr%22:%22en-us%22%7D%7D"> <head> <meta data-n-head="ssr" charset="utf-8"><meta data-n-head="ssr" name="viewport" content="width=device-width,initial-scale=1"><meta data-n-head="ssr" data-hid="contentSecurityPolicy" http-equiv="Content-Security-Policy" content=" default-src 'self' https: http:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http: *.googletagmanager.com *.mutinycdn.com; style-src 'self' 'unsafe-inline' https: http: https://fonts.googleapis.com; object-src https: http:; base-uri 'self'; connect-src 'self' https: http: wss: ws: *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.mutinyhq.com *.mutinyhq.io *.mutinycdn.com; frame-src 'self' https: http:; img-src 'self' https: http: data: *.google-analytics.com *.googletagmanager.com *.mutinycdn.com; manifest-src 'self'; media-src 'self' https: http:; child-src 'self' blob: https: http:; font-src 'self' https: http: data: https://fonts.gstatic.com; "><meta data-n-head="ssr" data-hid="formatDetection" name="format-detection" content="telephone=no"><meta data-n-head="ssr" data-hid="msapplication-TileImage" name="msapplication-TileImage" content="/nuxt-images/ico/mstile-144x144.png?cache=20220414"><meta data-n-head="ssr" data-hid="msapplication-config" name="msapplication-config" content="/nuxt-images/ico/browserconfig.xml"><meta data-n-head="ssr" data-hid="robots" name="robots" content="index, follow"><meta data-n-head="ssr" data-hid="description" name="description" content="This Privacy Statement applies to the GitLab websites , GitLab.com , Self-managed , and additional software products and services; collectively Services."><meta data-n-head="ssr" data-hid="twitter:description" name="twitter:description" content="This Privacy Statement applies to the GitLab websites , GitLab.com , Self-managed , and additional software products and services; collectively Services."><meta data-n-head="ssr" data-hid="og:description" property="og:description" content="This Privacy Statement applies to the GitLab websites , GitLab.com , Self-managed , and additional software products and services; collectively Services."><meta data-n-head="ssr" data-hid="og:title" property="og:title" content="GitLab Privacy Statement"><meta data-n-head="ssr" data-hid="twitter:creator" name="twitter:creator" content="@Gitlab"><meta data-n-head="ssr" data-hid="twitter:site" name="twitter:site" content="@Gitlab"><meta data-n-head="ssr" data-hid="twitter:card" name="twitter:card" content="summary_large_image"><meta data-n-head="ssr" data-hid="twitter:image:alt" name="twitter:image:alt" content="undefined"><meta data-n-head="ssr" data-hid="og:image:alt" property="og:image:alt" content="undefined"><meta data-n-head="ssr" data-hid="og:url" name="og:url" content="https://about.gitlab.com/privacy"><meta data-n-head="ssr" data-hid="og:type" property="og:type" content="article"><meta data-n-head="ssr" data-hid="twitter:title" name="twitter:title" content="GitLab Privacy Statement"><meta data-n-head="ssr" data-hid="twitter:image" name="twitter:image" content="https://about.gitlab.com/nuxt-images/open-graph/open-graph-gitlab.png"><meta data-n-head="ssr" data-hid="og:image" property="og:image" content="https://about.gitlab.com/nuxt-images/open-graph/open-graph-gitlab.png"><title>GitLab Privacy Statement | GitLab</title><link data-n-head="ssr" rel="shortcut icon" type="image/x-icon" href="/nuxt-images/ico/favicon.ico?cache=20220414"><link data-n-head="ssr" rel="icon" type="image/png" sizes="192x192" href="/nuxt-images/ico/favicon-192x192.png?cache=2022041"><link data-n-head="ssr" rel="icon" type="image/png" sizes="160x160" href="/nuxt-images/ico/favicon-160x160.png?cache=2022041"><link data-n-head="ssr" rel="icon" type="image/png" sizes="96x96" href="/nuxt-images/ico/favicon-96x96.png?cache=2022041"><link data-n-head="ssr" rel="icon" type="image/png" sizes="32x32" href="/nuxt-images/ico/favicon-32x32.png?cache=2022041"><link data-n-head="ssr" rel="icon" type="image/png" sizes="16x16" href="/nuxt-images/ico/favicon-16x16.png?cache=2022041"><link data-n-head="ssr" rel="apple-touch-icon" sizes="57x57" href="/nuxt-images/ico/apple-touch-icon-57x57.png?cache=2022041"><link data-n-head="ssr" rel="apple-touch-icon" sizes="60x60" href="/nuxt-images/ico/apple-touch-icon-60x60.png?cache=2022041"><link data-n-head="ssr" rel="apple-touch-icon" sizes="72x72" href="/nuxt-images/ico/apple-touch-icon-72x72.png?cache=2022041"><link data-n-head="ssr" rel="apple-touch-icon" sizes="76x76" href="/nuxt-images/ico/apple-touch-icon-76x76.png?cache=2022041"><link data-n-head="ssr" rel="apple-touch-icon" sizes="114x114" href="/nuxt-images/ico/apple-touch-icon-114x114.png?cache=2022041"><link data-n-head="ssr" rel="apple-touch-icon" sizes="120x120" href="/nuxt-images/ico/apple-touch-icon-120x120.png?cache=2022041"><link data-n-head="ssr" rel="apple-touch-icon" sizes="144x144" href="/nuxt-images/ico/apple-touch-icon-144x144.png?cache=2022041"><link data-n-head="ssr" rel="apple-touch-icon" sizes="152x152" href="/nuxt-images/ico/apple-touch-icon-152x152.png?cache=2022041"><link data-n-head="ssr" rel="apple-touch-icon" sizes="180x180" href="/nuxt-images/ico/apple-touch-icon-180x180.png?cache=2022041"><link data-n-head="ssr" rel="alternate" type="application/atom+xml" title="Blog" href="/atom.xml"><link data-n-head="ssr" rel="alternate" type="application/atom+xml" title="All Releases" href="/all-releases.xml"><link data-n-head="ssr" rel="alternate" type="application/atom+xml" title="Security Releases" href="/security-releases.xml"><link data-n-head="ssr" rel="alternate" type="application/atom+xml" title="Major Releases" href="/releases.xml"><link data-n-head="ssr" rel="canonical" href="https://about.gitlab.com/privacy/"><link data-n-head="ssr" rel="preload" as="image" href="/_nuxt/image/eecfc0.svg"><link data-n-head="ssr" rel="preload" as="image" href="/_nuxt/image/c843cb.svg"><link data-n-head="ssr" rel="alternate" hreflang="de-de" href="https://about.gitlab.com/de-de/privacy/"><link data-n-head="ssr" rel="alternate" hreflang="de" href="https://about.gitlab.com/de-de/privacy/"><link data-n-head="ssr" rel="alternate" hreflang="fr-fr" href="https://about.gitlab.com/fr-fr/privacy/"><link data-n-head="ssr" rel="alternate" hreflang="fr" href="https://about.gitlab.com/fr-fr/privacy/"><link data-n-head="ssr" rel="alternate" hreflang="ja-jp" href="https://about.gitlab.com/ja-jp/privacy/"><link data-n-head="ssr" rel="alternate" hreflang="x-default" href="https://about.gitlab.com/privacy/"><link data-n-head="ssr" rel="alternate" hreflang="it-it" href="https://about.gitlab.com/it-it/privacy/"><link data-n-head="ssr" rel="alternate" hreflang="pt-br" href="https://about.gitlab.com/pt-br/privacy/"><link data-n-head="ssr" rel="alternate" hreflang="es" href="https://about.gitlab.com/es/privacy/"><script data-n-head="ssr" data-hid="oneTrustSDK" src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" type="text/javascript" charset="utf-8" data-domain-script="7f944245-c5cd-4eed-a90e-dd955adfdd08" defer></script><script data-n-head="ssr" src="https://cdn.cookielaw.org/consent/7f944245-c5cd-4eed-a90e-dd955adfdd08.js" type="text/javascript" charset="UTF-8" defer></script><script data-n-head="ssr" data-hid="oneTrustAutoBlocking" src="https://cdn.cookielaw.org/consent/7f944245-c5cd-4eed-a90e-dd955adfdd08/OtAutoBlock.js" type="text/javascript" defer></script><script data-n-head="ssr" data-hid="oneTrustGeolocation" src="https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location/geofeed" type="text/javascript" defer></script><script data-n-head="ssr" data-hid="mutiny">!function(){var i,n,c=window.mutiny=window.mutiny||{};window.mutiny.client||(c.client={_queue:{}},i=["identify","trackConversion"],n=[].concat(i,["defaultOptOut","optOut","optIn"]),n.forEach(function(n){var u;c.client[n]=(u=n,function(){for(var n=arguments.length,t=new Array(n),e=0;e<n;e++)t[e]=arguments[e];if(c.client._queue[u]=c.client._queue[u]||[],i.includes(u))return new Promise(function(n,e){c.client._queue[u].push({args:t,resolve:n,reject:e})});c.client._queue[u].push({args:t})})}))}()</script><script data-n-head="ssr" data-hid="mutiny-script" src="https://client-registry.mutinycdn.com/personalize/client/c18972324098ea25.js" data-cfasync="false"></script><script data-n-head="ssr" data-hid="gtagConsent" defer>function gtag(){dataLayer.push(arguments)}window.dataLayer=window.dataLayer||[];const defaultConsents=window.dataLayer.filter(t=>t.length&&0<=Array.from(t).indexOf("default"));defaultConsents.length<=2&&(gtag("consent","default",{analytics_storage:"granted",ad_storage:"granted",functionality_storage:"granted",wait_for_update:500}),gtag("consent","default",{analytics_storage:"denied",ad_storage:"denied",functionality_storage:"denied",region:["AT","BE","BG","HR","CY","CZ","DK","EE","FI","FR","DE","GR","HU","IE","IT","LV","LT","LU","MT","NL","PL","PT","RO","SK","SI","ES","SE","IS","LI","NO","RU","GB","PE","CO","KR","CA-QC"],wait_for_update:500})),window.geofeed=t=>{dataLayer.push({event:"OneTrustCountryLoad",oneTrustCountryId:t.country.toString(),oneTrustStateId:t.state?.toString()})}</script><script data-n-head="ssr" data-hid="bizible" src="//cdn.bizible.com/scripts/bizible.js" defer type="text/javascript"></script><script data-n-head="ssr" data-hid="munchkin" src="//munchkin.marketo.net/munchkin.js" defer type="text/javascript"></script><script data-n-head="ssr" src="https://extend.vimeocdn.com/ga/115027220.js" defer type="text/javascript"></script><script data-n-head="ssr" data-hid="schemaOrg" type="application/ld+json">{"@context":"https://schema.org","@type":"Corporation","name":"GitLab","legalName":"GitLab Inc.","tickerSymbol":"GTLB","url":"https://about.gitlab.com","logo":"https://gitlab.com/gitlab-com/gitlab-artwork/raw/master/logo/logo.png","description":"This Privacy Statement applies to the GitLab websites , GitLab.com , Self-managed , and additional software products and services; collectively Services.","foundingDate":"2011","founders":[{"@type":"Person","name":"Sid Sijbrandij"},{"@type":"Person","name":"Dmitriy Zaporozhets"}],"slogan":"Our mission is to change all creative work from read-only to read-write so that everyone can contribute.","address":{"@type":"PostalAddress","streetAddress":"268 Bush Street #350","addressLocality":"San Francisco","addressRegion":"CA","postalCode":"94104","addressCountry":"USA"},"awards":"Comparably's Best Engineering Team 2021, 2021 Gartner Magic Quadrant for Application Security Testing - Challenger, DevOps Dozen award for the Best DevOps Solution Provider for 2019, 451 Firestarter Award from 451 Research","knowsAbout":[{"@type":"Thing","name":"DevOps"},{"@type":"Thing","name":"CI/CD"},{"@type":"Thing","name":"DevSecOps"},{"@type":"Thing","name":"GitOps"},{"@type":"Thing","name":"DevOps Platform"}],"sameAs":["https://www.facebook.com/gitlab","https://twitter.com/gitlab","https://www.linkedin.com/company/gitlab-com","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg"]}</script><link rel="preload" href="/_nuxt/a5e5ed7.js" as="script"><link rel="preload" href="/_nuxt/41dd6a4.js" as="script"><link rel="preload" href="/_nuxt/css/fd182ce.css" as="style"><link rel="preload" href="/_nuxt/5a8cdbe.js" as="script"><link rel="preload" href="/_nuxt/css/4fb7a35.css" as="style"><link rel="preload" href="/_nuxt/52a471a.js" as="script"><link rel="preload" href="/_nuxt/css/3d5feb1.css" as="style"><link rel="preload" href="/_nuxt/434c7f0.js" as="script"><link rel="stylesheet" href="/_nuxt/css/fd182ce.css"><link rel="stylesheet" href="/_nuxt/css/4fb7a35.css"><link rel="stylesheet" href="/_nuxt/css/3d5feb1.css"><link rel="preload" href="/_nuxt/static/1732377904/privacy/state.js" as="script"><link rel="preload" href="/_nuxt/static/1732377904/privacy/payload.js" as="script"><link rel="preload" href="/_nuxt/static/1732377904/manifest.js" as="script"> </head> <body> <div data-server-rendered="true" id="__nuxt"><div id="__layout"><div class="grid-wrapper" data-v-a2f714dc> <div data-fetch-key="SlpNavigationHOC:0" class="nav-hoc" data-v-a2f714dc></div> <a href="/gitlab-duo/" data-ga-name="gitlab duo enterprise" data-ga-location="header" data-fetch-key="data-v-dbfc8738:0" class="banner" data-v-dbfc8738 data-v-a2f714dc><div class="banner" data-v-dbfc8738><img src="/_nuxt/image/eecfc0.svg" alt="" class="slp-ml-24 banner_image" data-v-dbfc8738> <button type="button" class="slp-btn cta slp-btn-tertiary" data-v-52cd803a data-v-dbfc8738> GitLab Duo Enterprise is now available. <div role="img" aria-hidden="true" class="slp-icon slp-ml-8 arrow-icon slp-icon--color-color-text-300" style="color:color-text-300;width:16px;height:16px" data-v-e356681a data-v-dbfc8738><div data-v-e356681a><svg width="16" height="16" viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M10.159 10.72a.75.75 0 101.06 1.06l3.25-3.25L15 8l-.53-.53-3.25-3.25a.75.75 0 00-1.061 1.06l1.97 1.97H1.75a.75.75 0 100 1.5h10.379l-1.97 1.97z"/></svg></div></div></button> <img src="/_nuxt/image/c843cb.svg" alt="" class="banner_image" data-v-dbfc8738></div></a> <section data-v-a2f714dc><div role="main" class="privacy" data-v-bc187d08 data-v-a2f714dc><div class="slp-container slp-mb-96" data-v-db4b02a6 data-v-bc187d08><section data-v-db4b02a6 data-v-bc187d08><h1 class="slp-mt-64 slp-mb-24 slp-text-heading1-bold" data-v-19cf63b5 data-v-bc187d08> GitLab Privacy Statement </h1> <hr class="slp-hr" data-v-092a6e4c data-v-bc187d08> <p class="last-updated slp-mt-16 slp-text-body2" data-v-19cf63b5 data-v-bc187d08> Last updated: March 19, 2024 </p> <div class="slp-mt-32 slp-text-body1" data-v-19cf63b5 data-v-bc187d08><span class="hero-copy" data-v-19cf63b5 data-v-bc187d08><p>To see our <a href="https://about.gitlab.com/privacy/us-state-privacy-rights-and-disclosures/#California">California Consumer Privacy Act (CCPA) Notice at Collection</a>, please click on the link or see the “U.S. State Privacy Rights” section below.</p> <h3 id="introduction">Introduction <a class="header-anchor" href="#introduction" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>At GitLab, we take the privacy and security of your information seriously. This privacy statement (“Privacy Statement”) will explain how GitLab B.V. and GitLab, Inc. ("GitLab", "we", "our", "us") handle your personal data. "Personal Data," as used in this Privacy Statement, is information that identifies or can reasonably be linked directly or indirectly to an identifiable person. The privacy practices and standards detailed in this Privacy Statement apply to all data subjects globally, unless specifically noted otherwise. In particular, this Privacy Statement will touch on the following sections:</p> <ul> <li> <p><a href="#what-personal-data-does-gitlab-collect-about-me">What Personal Data does GitLab Collect about Me?</a></p> </li> <li> <p><a href="#what-personal-data-is-not-collected-by-gitlab">What Personal Data is Not Collected by GitLab?</a></p> </li> <li> <p><a href="#how-does-gitlab-use-my-personal-data-and-our-legal-basis-for-processing">How Does GitLab Use My Personal Data and Our Legal Basis for Processing?</a></p> </li> <li> <p><a href="#with-whom-does-gitlab-share-my-personal-data">With Whom does GitLab Share My Personal Data ?</a></p> </li> <li> <p><a href="#how-does-gitLab-secure-my-personal-data">How does GitLab Secure My Personal Data?</a></p> </li> <li> <p><a href="#what-are-my-rights-and-choices-regarding-personal-data">What are My Rights and Choices Regarding Personal Data?</a></p> </li> <li> <p><a href="#us-state-privacy-rights">U.S. State Privacy Rights</a></p> </li> <li> <p><a href="#other-important-privacy-information">Other Important Privacy Information</a></p> </li> </ul> <p>This Privacy Statement applies to the GitLab websites ("Websites"), GitLab.com and <a href="/dedicated/">GitLab Dedicated</a> ("SaaS"), Self-managed ("Self-managed"), and additional software products and services; collectively "Services.</p> </span></div></section> <div class="hero-gradient slp-mt-64 slp-mb-24" data-v-db4b02a6 data-v-bc187d08></div> <div data-v-495d6e81 data-v-bc187d08><div id="collapsible-sidebar-wrapper" data-v-495d6e81><div id="collapsible-sidebar-content" data-v-495d6e81><section id="what-personal-data-does-gitlab-collect-about-me" class="body-copy" data-v-495d6e81 data-v-bc187d08><h2 class="slp-my-32 slp-text-heading4-bold" data-v-19cf63b5 data-v-bc187d08> What Personal Data does GitLab Collect about Me? </h2> <div class="slp-text-body2" data-v-19cf63b5 data-v-bc187d08><span data-v-19cf63b5 data-v-bc187d08><p>The categories of Personal Data collected by GitLab change depending on the Services you use and whether those Services are free or paid. We have described below which Services correlate with the processing in each Personal Data category.</p> <h3 id="information-you-provide-directly">Information You Provide Directly <a class="header-anchor" href="#information-you-provide-directly" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>We collect the Personal Data you provide to us, for example:</p> <p><em>Account Information:</em> When you register for an account with GitLab, we collect information that identifies you such as your name, username, email address, country and/or region, and password. This is collected for free and paid users of the SaaS product.</p> <p><em>Profile Information:</em> We collect information that you voluntarily provide in your user profile; this may include your public avatar (which may be a photo), additional email addresses, company/organization name, job title, country, social media handles, and biography. Please note this information will be visible to other users of the Services and to the public, although you can limit the visibility of certain profile fields through your account and profile privacy settings. This is collected for free and paid users of the SaaS product.</p> <p><em>Payment and Identity Verification Information:</em> If you purchase a paid subscription from GitLab, we will collect payment information from you that may include your name, billing address and credit card or bank information. We may also use your credit card information and telephone number to verify your identity and prevent abuse of our pipelines. Please note that GitLab does not directly process or store your entire credit card number, but we do direct that information to our third-party payment processors for processing. This is collected for paid users of the Self-managed and SaaS products.</p> <p><em>Contact Information:</em> If you request GitLab to contact you, or sign up for marketing materials, events, or participate in user research and development, GitLab may collect information such as name, address, email address, telephone number, company name, and size of company. This may be collected through the Websites, such as through our live video and chat function on our marketing pages or during account registration.</p> <p><em>Licensee Information:</em> We collect licensee name, email address, and similar information associated with the individual that receives a license key for the paid users of the Self-managed product.</p> <p><em>Content you provide through the use of the Services:</em> Examples of content we collect and store include but are not limited to: the summary and description added to an issue, your repositories, commits, project contributions, profile metadata, activity data, comments, and any inputs and outputs generated by Artificial Intelligence (“AI”) and Machine-Learning (“ML”) powered features. Content also includes any code, files and links you upload to the Services. This is collected for the free and paid users of the SaaS product.</p> <p><em>Customer Support and Professional Services Information:</em> If you contact GitLab customer support or receive professional services, we will collect information about you related to your account and to the requests you are making or the services being provided. Customer Support information is collected through the Websites, such as the <a href="https://forum.gitlab.com/">GitLab Community Forum</a> and the <a href="https://support.gitlab.com/hc/en-us">GitLab Support Portal</a>. For <a href="https://handbook.gitlab.com/handbook/marketing/developer-relations/community-programs/">Community Programs</a>, support will be provided through the Gitlab <a href="https://docs.gitlab.com/ee/user/project/service_desk/index.html">Service Desk</a>.</p> <p><em>Call Recordings:</em> We may record and transcribe GitLab webinars, trainings, and online events. In addition, we may record and transcribe sales calls hosted on various videoconferencing technologies to enable our sales and support teams to share conversational insights, create training and presentations, and improve their internal processes.</p> <p><em>Other Content You Submit:</em> We may also collect other content that you submit to our Services. For example: feedback, comments and blog posts, or when you participate in any interactive features, surveys, contests, promotions, prize draws, activities or events. When you participate in interactive channels, we may collect and process information for demographic analysis. Such collection is not tied to any specific products, but may be collected through the Websites.</p> <h3 id="information-about-your-use-of-the-services-we-collect-automatically">Information about Your Use of the Services We Collect Automatically <a class="header-anchor" href="#information-about-your-use-of-the-services-we-collect-automatically" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>We may collect certain Personal Data automatically through your use of the Services, for example:</p> <p><em>Device Information and Identifiers:</em> When you access and use our Services, we automatically collect information about your device, which may include: device type, your device operating system, browser type and version, language preference, IP address, hardware identifiers, and mobile IDs. We may also derive your approximate location from this information, including country, city, state and postal code. This information may be collected through any use of the Services.</p> <p><em>Subscription Data:</em> We may automatically collect information about the number of active users, licensing timetables, historical user count, and IP address. This is collected for paid Self-managed and SaaS products. Subscription Data details can be found in the <a href="https://metrics.gitlab.com/?category=subscription">Metrics Dictionary</a>.</p> <p><em>Customer Product Usage Information:</em> We may automatically collect Customer Product Usage Information to gather insights into the success of stages and features, track how value is delivered through the use of the Services, help generate optimal customer implementation of the Services, and understand end-to-end user behavior. Depending on the category of Customer Product Usage Information collected, the metrics are stored in an aggregated and/or pseudonymized format. Please see our <a href="https://handbook.gitlab.com/handbook/legal/privacy/customer-product-usage-information/">Customer Product Usage Information</a> page for more details regarding the purposes, de-identification, data elements, configuration and opt-out instructions for Customer Product Usage Information. This is collected for the free and paid users of the Self-managed and SaaS products.</p> <p><em>Website Usage Data:</em> When you visit our Websites, we automatically log information about how you interact with the sites, such as the referring site, date and time of visit, and the pages you have viewed or links you have clicked. For our Websites, GitLab uses session replay, which captures a de-identified log of the marketing Websites that you visit.</p> <p><em>Cookies and Similar Tracking Technologies:</em> GitLab uses cookies and similar technologies to provide functionality, such as storing your settings, and to recognize you as you use our Services. In addition, we use cookies to gather information to provide interest-based advertising which is tailored to you based on your online activity. Please review our <a href="https://about.gitlab.com/privacy/cookies/">Cookies Policy</a> to learn about our practices and the controls we provide you.</p> <p><em>Email Engagement Information:</em> When we send you emails, they may include technology such as a web beacon, that tells us your device type, email client, and whether you have received and opened an email, or clicked on any links contained in the email.</p> <p><em>Third-Party Integrations:</em> The Services allow for integrations with third-party git applications, such as GitPod, or third-party extensions, such as those in the Visual Studio code marketplace. Further, the Services may contain buttons, links, tools and content from third-party services, such as Meta and X. We may collect information about your use of these integrated applications and extensions, and when you see or interact with these integrations some information may be automatically sent to these third-party companies. However, any third-party integrations’ policies and procedures are not controlled by GitLab, and this Privacy Statement does not cover how third-party integrations use your information. We recommend you read the privacy statements of any third-party companies before connecting to or using their applications or services.</p> <h3 id="information-from-thirdparties-and-partners">Information from Third-Parties and Partners <a class="header-anchor" href="#information-from-thirdparties-and-partners" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>We may collect Personal Data from other parties in the following ways:</p> <p><em>Vendors and Partners:</em> We may receive information about you from third-parties such as vendors, resellers, partners, or affiliates. For example, we receive information from our resellers about you and your orders, or we may supplement the data we collect with demographic information licensed from third-parties in order to personalize the Services and our offers to you. Likewise, our sales, marketing, and recruiting teams may receive access to third-party databases containing information to enrich and cleanse business contacts and other corporate data, which may include your email, phone number, and general geographic location through reverse IP lookup services. We may also receive social listening data from companies that monitor public social media posts.</p> <p><em>Third-Party Services:</em> GitLab allows you to sign up for/in to our Services using third-party accounts, such as Meta or Google. When you give permission for this to happen, GitLab will receive information about you from your third-party account, such as name, email address, location and demographic information. In addition, GitLab allows you to connect the Services through third-party applications, like Jira and Slack. As part of this interaction, third-party applications may send Personal Data to GitLab in accordance with the privacy settings of the third-party service. This Personal Data may include contact information, location, chat commands, and information related to your GitLab projects.</p> <p><em>Other Users of the Services:</em> Other users of the Services may provide information about you when they submit issues and comments, or we may receive information when you are designated as a representative or administrator on your company's account.</p> <p>When you are asked to provide personal data, you may decline. And you may use web browser or operating system controls to prevent certain types of automatic data collection. But if you choose not to provide or allow information that is necessary for certain products or features, those products or features may not be available or function correctly.</p> <h3 id="information-processed-by-ai-powered-features">Information Processed by AI-Powered Features <a class="header-anchor" href="#information-processed-by-ai-powered-features" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>When you use the <a href="https://about.gitlab.com/gitlab-duo/">GitLab Duo</a> suite of AI capabilities, including <a href="https://docs.gitlab.com/ee/user/project/repository/code_suggestions/index.html">Code Suggestions</a>, <a href="https://docs.gitlab.com/ee/user/project/merge_requests/reviews/index.html#suggested-reviewers">Suggested Reviewers</a>, and <a href="https://docs.gitlab.com/ee/user/ai_features.html">other AI/ML</a> features, your Personal Data will be processed in accordance with this Privacy Statement.</p> <p>To provide these features, GitLab may transmit your code, supporting contextual information, and other prompts you submit to the Services to third-parties, such as private code modeling service providers. Further, GitLab may collect AI prompts and output to debug and troubleshoot the services and enforce our <a href="https://handbook.gitlab.com/handbook/legal/policies/website-terms-of-use/">Website Terms of Use</a>. We may also collect <a href="https://docs.gitlab.com/ee/user/gitlab_duo/data_usage.html#telemetry">first-party usage data</a> related to Duo features for the purposes of identifying and developing product improvements and assessing features engagement. However, we will not use your AI-inputs to train any language models without your instruction or prior consent. This data may be collected in both the SaaS and Self-managed products where AI-features are enabled.</p> </span></div></section><section id="what-personal-data-is-not-collected-by-gitlab" class="body-copy" data-v-495d6e81 data-v-bc187d08><h2 class="slp-my-32 slp-text-heading4-bold" data-v-19cf63b5 data-v-bc187d08> What Personal Data is Not Collected by GitLab? </h2> <div class="slp-text-body2" data-v-19cf63b5 data-v-bc187d08><span data-v-19cf63b5 data-v-bc187d08><p>GitLab does not intentionally collect sensitive Personal Data, such as social security numbers, genetic data, health information, or religious information. Although GitLab does not request or intentionally collect any sensitive Personal Data, we realize that users might store this kind of information in a GitLab repository.</p> <p>GitLab does not intentionally collect the Personal Data of individuals that are stored in users' repositories or other free-form content inputs. If Personal Data is stored in a user repository then the repository owner is responsible for its processing.</p> <p>If you are a child under the age of 13, you may not have an account. With the exception of Educational Licenses, GitLab does not knowingly collect information from, or direct any of our Services to, children under 13. If we learn or have reason to suspect that a user is under the age of 13, we will close the child's account.</p> </span></div></section><section id="how-does-gitlab-use-my-personal-data-and-our-legal-basis-for-processing" class="body-copy" data-v-495d6e81 data-v-bc187d08><h2 class="slp-my-32 slp-text-heading4-bold" data-v-19cf63b5 data-v-bc187d08> How does GitLab Use My Personal Data and Our Legal Basis for Processing? </h2> <div class="slp-text-body2" data-v-19cf63b5 data-v-bc187d08><span data-v-19cf63b5 data-v-bc187d08><p>GitLab collects and processes each category of Personal Data for the purposes listed in the tables below.</p> <p>When our processing is subject to international laws, including but not limited to the General Data Protection Regulation ("GDPR") that governs individuals located in the European Economic Area ("EEA"), we have attributed one of the legal bases enumerated under the GDPR to the “Purpose of Processing” activity. To the extent a jurisdiction allows for different legal bases than those enumerated under GDPR, we will apply only those appropriate legal bases to the purposes of processing as required under applicable law.</p> <h3 id="performance-of-a-contract">Performance of a Contract: <a class="header-anchor" href="#performance-of-a-contract" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>We use your Personal Data to provide the Services you have subscribed to, and to complete and administer the contract you have entered into with GitLab, which includes the <a href="https://handbook.gitlab.com/handbook/legal/subscription-agreement/">Subscription Agreement</a>, the <a href="https://handbook.gitlab.com/handbook/legal/policies/website-terms-of-use/">Website Terms of Use</a>, event and training agreements, and any agreement to process payment information. The purposes of processing and the categories of information used under this lawful basis are described below:</p> <table> <thead> <tr> <th>Purpose of Processing</th> <th>Personal Data Category</th> </tr> </thead> <tbody> <tr> <td>To create your account, identify and authenticate your access to the Services and provide you with the Services you have requested</td> <td><ul><li>Account Information</li><li>Profile Information</li><li>Payment and Identity Verification Information</li><li>Content you provide through the use of the Services</li></ul></td> </tr> <tr> <td>To process your payment for the Services you have purchased</td> <td><ul><li>Payment and Identity Verification Information</li><li>Licensee Information</li><li>Subscription Data</li></ul></td> </tr> <tr> <td>To provide <a href="https://about.gitlab.com/services/customer-success-services/">Customer Success Services</a> for the successful adoption of the Services</td> <td><ul><li>Account Information</li><li>Licensee Information</li><li>Content you provide through the use of the Services</li><li>Subscription Data</li><li>Customer Product Usage Information</li></ul></td> </tr> <tr> <td>To conduct user research and development</td> <td><ul><li>Contact Information</li></ul></td> </tr> <tr> <td>To send you important information, such as notifications about changes to the Services</td> <td><ul><li>Account Information</li><li>Profile Information</li><li>Contact Information</li><li>Content you provide through the use of the Services</li></ul></td> </tr> <tr> <td>To provide you a forum to comment on or discuss the Services</td> <td><ul><li>Account Information</li><li>Profile Information</li><li>Customer Support and Professional Services Information</li></ul></td> </tr> <tr> <td>To create digital productions and to manage online or in-person events</td> <td><ul><li>Contact Information</li><li>Other Content You Submit</li></ul></td> </tr> <tr> <td>To provide trainings and learning opportunities</td> <td><ul><li>Contact Information</li><li>Other Content You Submit</li></ul></td> </tr> <tr> <td>To enable partners to register, track deals and provide support, or to share information with our partners when you attend a joint event</td> <td><ul><li>Account Information</li><li>Subscription Information</li></ul></td> </tr> <tr> <td>To provide code workload and code review recommendations and other automated analysis of your contributions through AI and machine-learning</td> <td><ul><li>Content you provide through the use of the Services</li></ul></td> </tr> <tr> <td>To respond to your requests for customer support</td> <td><ul><li>Content you provide through the use of the Services</li><li>Customer Support and Professional Services Information</li></ul></td> </tr> <tr> <td>To improve the security of and troubleshoot our Services, as necessary to perform the contract governing your use of our applications or to communicate with you</td> <td><ul><li>Account Information</li><li>Profile Information</li><li>Content you provide through the use of the Services</li><li>Customer Support and Professional Services Information</li></ul></td> </tr> <tr> <td>To enforce the Terms of Use, Acceptable Use Policy and other legal terms that govern our Services</td> <td><ul><li>Account Information</li><li>Profile Information</li><li>Content you provide through the use of the Services</li></ul></td> </tr> </tbody> </table> <h3 id="consent">Consent: <a class="header-anchor" href="#consent" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>We may use your Personal Data, with your consent, for specific purposes such as marketing, surveys, call recordings, and research. You may withdraw your consent for the specific purpose or object to the processing of your Personal Data at any time. The purposes of processing and the categories of information used under this lawful basis are described below:</p> <table> <thead> <tr> <th>Purpose of Processing</th> <th>Personal Data Category</th> </tr> </thead> <tbody> <tr> <td>To understand how our Services are used and to improve our Services</td> <td><ul><li>Other Content You Submit</li></ul></td> </tr> <tr> <td>To provide <a href="https://about.gitlab.com/services/customer-success-services/">Customer Success Services</a> for the successful adoption of the Services</td> <td><ul><li>Profile Information</li></ul></td> </tr> <tr> <td>To provide personalized experiences through the Websites and Services and manage our use of tracking technologies</td> <td><ul><li>Cookies and Similar Tracking Technologies</li></ul></td> </tr> <tr> <td>To conduct user research and development</td> <td><ul><li>Account Information</li><li>Content you provide through the use of the Services</li></ul></td> </tr> <tr> <td>To send you information you have requested, such as information requested through our live-chat function</td> <td><ul><li>Contact Information</li><li>Device Information and Identifiers</li><li>Cookies and Similar Tracking Technologies</li></ul></td> </tr> <tr> <td>To send you advertising, marketing content, offers, promotions, newsletters, surveys or other information through email, phone call, and third-party messenger applications</td> <td><ul><li>Contact Information</li></ul></td> </tr> <tr> <td>To create digital productions and to manage online or in-person events</td> <td><ul><li>Call Recordings</li></ul></td> </tr> <tr> <td>To provide trainings and learning opportunities</td> <td><ul><li>Call Recordings</li></ul></td> </tr> <tr> <td>To enable partners to register, track deals and provide support, or to share information with our partners when you attend a joint event</td> <td><ul><li>Contact Information</li><li>Customer Support and Professional Services Information</li></ul></td> </tr> </tbody> </table> <h3 id="compliance-with-a-legal-obligation">Compliance with a Legal Obligation: <a class="header-anchor" href="#compliance-with-a-legal-obligation" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>We may use your Personal Data in connection with legal claims, regulatory compliance, and audits. The purposes of processing and the categories of information used under this lawful basis are described below:</p> <table> <thead> <tr> <th>Purpose of Processing</th> <th>Personal Data Category</th> </tr> </thead> <tbody> <tr> <td>To create your account, identify and authenticate your access to the Services and provide you with the Services you have requested</td> <td><ul><li>Device Information and Identifiers</li></ul></td> </tr> <tr> <td>To process your payment for the Services you have purchased</td> <td><ul><li>Device Information and Identifiers</li></ul></td> </tr> <tr> <td>To detect, prevent, or otherwise address fraud and abuse to protect you, GitLab, and third-parties</td> <td><ul><li>Account Information</li><li>Profile Information</li><li>Payment and Identity Verification Information</li><li>Content you provide through the use of the Services</li><li>Device Information and Identifiers</li></ul></td> </tr> <tr> <td>To comply with our legal obligations, including export, privacy and security regulations</td> <td><ul><li>Account Information</li><li>Profile Information</li><li>Payment and Identity Verification Information</li><li>Content you provide through the use of the Services</li><li>Device Information and Identifiers</li></ul></td> </tr> <tr> <td>To protect the rights, safety and property of GitLab, you, or any third-party</td> <td><ul><li>Account Information</li><li>Profile Information</li><li>Payment and Identity Verification Information</li><li>Content you provide through the use of the Services</li><li>Device Information and Identifiers</li></ul></td> </tr> </tbody> </table> <h3 id="legitimate-interests">Legitimate Interests: <a class="header-anchor" href="#legitimate-interests" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>We rely on our legitimate interests or the legitimate interests of a third-party, such as our users, where they are not outweighed by your interests or fundamental rights and freedoms. You may object to the processing of your Personal Data for these purposes at any time. The purposes of processing and the categories of information used under this lawful basis are described below:</p> <table> <thead> <tr> <th>Purpose of Processing</th> <th>Personal Data Category</th> </tr> </thead> <tbody> <tr> <td>To understand how our Services are used and to improve our Services</td> <td><ul><li>Customer Product Usage Information</li></ul></td> </tr> <tr> <td>To provide <a href="https://about.gitlab.com/services/customer-success-services/">Customer Success Services</a> for the successful adoption of the Services</td> <td><ul><li>Email Engagement Information</li></ul></td> </tr> <tr> <td>To administer and maintain our Websites</td> <td><ul><li>Website Usage Data</li><li>Cookies and Similar Tracking Technologies (strictly necessary)</li></ul></td> </tr> <tr> <td>To send you important information, such as notification about changes to the Services</td> <td><ul><li>Email Engagement Information</li></ul></td> </tr> <tr> <td>To send you information you have requested, such as information requested through our live-chat function</td> <td><ul><li>Email Engagement Information</li><li>Website Usage Data</li></ul></td> </tr> <tr> <td>To send you advertising, marketing content, offers, promotions, newsletters, surveys or other information through email, phone call, and third-party messenger applications</td> <td><ul><li>Email Engagement Information</li></ul></td> </tr> <tr> <td>To provide you a forum to comment on or discuss the Services</td> <td><ul><li>Other Content You Submit</li><li>Website Usage Data</li></ul></td> </tr> <tr> <td>To provide search indexing of user profiles and contributions</td> <td><ul><li>Account Information</li><li>Profile Information</li></ul></td> </tr> <tr> <td>To create digital productions and to manage online or in-person events</td> <td><ul><li>Device Information and Identifiers</li><li>Website Usage Data</li></ul></td> </tr> <tr> <td>To provide trainings and learning opportunities</td> <td><ul><li>Device Information and Identifiers</li><li>Website Usage Data</li></ul></td> </tr> <tr> <td>To provide code workload and code review recommendations and other automated analysis of your contributions through AI and machine-learning</td> <td><ul><li>Customer Product Usage Information</li></ul></td> </tr> </tbody> </table> </span></div></section><section id="with-whom-does-gitlab-share-my-personal-data" class="body-copy" data-v-495d6e81 data-v-bc187d08><h2 class="slp-my-32 slp-text-heading4-bold" data-v-19cf63b5 data-v-bc187d08> With Whom does GitLab Share My Personal Data? </h2> <div class="slp-text-body2" data-v-19cf63b5 data-v-bc187d08><span data-v-19cf63b5 data-v-bc187d08><p>We may share each of the categories of Personal Data we collect with the types of third-parties described below, for the following business purposes:</p> <p><em>Sharing with Users and the Public:</em> We may share your Personal Data with other users of the Services and with the public if you choose to make your SaaS Profile public. You have control over what information is public; however, your name and username will always be displayed. If you do not want to disclose your real name, please use a pseudonym or other alias in your profile and username. To change your settings, go to <a href="https://gitlab.com/-/profile">User Settings</a> in your profile. You should also be aware that any information you share as part of a project, blog, website etc. may be publicly available and you should consider this carefully when interacting with the Services. Also, we may collect and share public community contribution metrics as part of our <a href="https://handbook.gitlab.com/handbook/marketing/developer-relations/evangelist-program/">Evangelist Program</a>.</p> <p><em>Sharing with Managed Accounts and Administrators:</em> If you have created a GitLab account with your corporate email address, we may share your Personal Data with your Company if your Company enters into a commercial relationship with GitLab. If this happens, then your use of the software and your account is subject to the terms and any data protection agreement between your Company and GitLab.</p> <p>In the event you change the email address on your account from a corporate email address to a personal email address and, thereafter, your Company enters into a commercial relationship with GitLab, your Personal Data related to that account will not be shared with your Company. GitLab will not link an account to a Company based on retroactive use of a corporate email.</p> <p>In addition, if you choose to become a member of a group, your username, email address, IP address, the date when access was granted, the date when access expires, your access role, and audit logs containing information related to your actions in the group will be shared with the owners of that group.</p> <p><em>Sharing with Service Providers:</em> We share your Personal Data with our service providers. These are companies who provide services on our behalf, including in the areas of cloud hosting, marketing, advertising, ad measurement, social engagement, analytics, support ticketing, credit card processing, AI and ML, security, and other such similar services. These companies are subject to contractual requirements that govern the security and confidentiality of your information.</p> <p>For example, we use analytics providers, such as Google Analytics and Google Signals, to help us understand the operation and performance of our Services and Stripe for payment, analytics, and other business services.. To learn about how Google uses and shares data it collects through its services, please visit <a href="https://www.google.com/policies/privacy/partners/">https://www.google.com/policies/privacy/partners/</a>. You can learn more about Stripe and its processing activities via their privacy policy at stripe.com/privacy. In addition, please visit our <a href="https://about.gitlab.com/privacy/subprocessors/#third-party-sub-processors">Sub-Processors page</a> to see the list of our Sub-Processors that we use in order to provide customer support, host the Services, and provide key product features.</p> <p><em>Sharing with Partners and Resellers:</em> GitLab works with third-parties who provide sales, consulting, support and technical services for our Services. Where permitted and with your consent (if required), we may share your data with these partners and resellers.</p> <p><em>Sharing with Affiliated Companies:</em> GitLab will share information collected with <a href="https://about.gitlab.com/company/visiting/">companies owned and operated by us</a>.</p> <p><em>Sharing for Fraud and Prevention Abuse:</em> We may share your information when we have a good faith belief that the disclosure is necessary to prevent fraud, abuse of our services, defend against attacks, and to protect the safety of GitLab and our users. For example, we may share your name and phone number with service providers to facilitate an identity verification call or SMS text for fraud prevention.</p> <p><em>Law Enforcement:</em> GitLab may disclose Personal Data or other information we collect about you to law enforcement if required in response to a valid subpoena, court order, search warrant, a similar government order, or when we believe in good faith that disclosure is necessary to comply with our legal obligations, to protect our property or rights, or those of third-parties or the public at large.</p> <p><em>Merger or Acquisition:</em> We may share your Personal Data if we are involved in a merger, sale, or acquisition of corporate entities or business units. If any such change of ownership happens, we will ensure that it is under terms that preserve the confidentiality of your Personal Data, and we will notify you on our website or by email before any transfer of your Personal Data.</p> <h3 id="sharing-personal-data-across-national-borders">Sharing Personal Data Across National Borders <a class="header-anchor" href="#sharing-personal-data-across-national-borders" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>Our Services are hosted in the United States and information we collect will be stored and processed on our servers in the United States. Our employees, contractors, affiliated organizations, service providers, and sub-processors that process Personal Data may be located in the United States or other countries outside of your home country. If you reside in the EEA, United Kingdom, or Switzerland, and we transfer information about you to a jurisdiction that has not been found by the European Commission to have adequate data protections, we will use available safeguards and legal mechanisms to help ensure your rights and protections, including using Standard Contractual Clauses or obtaining your consent.</p> <p>For our customers whose use of the GitLab Websites and Services involves the processing of Personal Data from Japan, GitLab will transfer Personal Data originating in Japan to both its EEA and non-EEA affiliates, such as GitLab, Inc. in the United States. To make this transfer, GitLab relies on the Japan Personal Information Protection Commision’s adequacy decisions about the Personal Data protection system of the EEA and the United Kingdom, or the transfer will be made in accordance with our intra-company data transfer agreements that provide for obligations equivalent to those as stated under the APPIJ.</p> </span></div></section><section id="how-does-gitLab-secure-my-personal-data" class="body-copy" data-v-495d6e81 data-v-bc187d08><h2 class="slp-my-32 slp-text-heading4-bold" data-v-19cf63b5 data-v-bc187d08> How does GitLab Secure My Personal Data? </h2> <div class="slp-text-body2" data-v-19cf63b5 data-v-bc187d08><span data-v-19cf63b5 data-v-bc187d08><p>We work hard to protect your Personal Data. We employ administrative, technical, and physical security controls where appropriate, to protect your information from unauthorized access or destruction. For more information on our security practices please see: <a href="https://handbook.gitlab.com/handbook/security/security-assurance/technical-and-organizational-measures/">Technical and Organizational Security Measures for GitLab.com</a>.</p> <p>Except to host the Services, GitLab does not process Personal Data in private groups or projects unless the following situations arise: to maintain security or to remediate a security incident; to scan for malware and vulnerabilities that violate the <a href="https://handbook.gitlab.com/handbook/legal/policies/website-terms-of-use/">Website Terms of Use</a>; to comply with our legal obligations; to ensure the availability of the Services; to provide support to a repository owner upon request; or on the basis of your consent.</p> <h3 id="data-retention">Data Retention <a class="header-anchor" href="#data-retention" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>In order to protect your Personal Data, GitLab will only retain your Personal Data for as long as your account is active or as needed to perform our contractual obligations, provide you the Services, comply with legal obligations, resolve disputes, preserve legal rights, or enforce our agreements.</p> <p>GitLab reserves the right to delete inactive accounts, projects, namespaces, and associated content. GitLab may deem an account, project, or namespace inactive based on various criteria, including, but not limited to, the account creation date, the last time there was a valid log-in, and the date of the last contribution. If we plan to delete your account or projects, we will provide advance notice by sending a message to the email address registered to your account. GitLab encourages you to utilize your account on occasion to avoid the risk of being deemed inactive. GitLab may also delete inactive or weak SSH keys to help keep your account safe. If you use GitLab’s chatbot feature on our Websites, a transcript of your live chat will be retained for 12-months.</p> </span></div></section><section id="what-are-my-rights-and-choices-regarding-personal-data" class="body-copy" data-v-495d6e81 data-v-bc187d08><h2 class="slp-my-32 slp-text-heading4-bold" data-v-19cf63b5 data-v-bc187d08> What are My Rights and Choices Regarding Personal Data? </h2> <div class="slp-text-body2" data-v-19cf63b5 data-v-bc187d08><span data-v-19cf63b5 data-v-bc187d08><p>You have the right to access, correct, restrict or delete your Personal Data, and to port your Personal Data to another company. While these rights may vary by jurisdiction, GitLab provides you with the same rights and choices, no matter where you live. We provide these rights free of charge unless your requests are manifestly unfounded and excessive.</p> <p>You may exercise your choices and rights as follows:</p> <p><em>To opt out of marketing communications:</em> You may opt-out of email marketing by clicking the “unsubscribe” link located at the bottom of any marketing email you receive or by visiting our <a href="https://about.gitlab.com/company/preference-center/">preference center</a> and unsubscribing. You may opt-out of telemarketing by asking our call agent to place you on our Do-Not-Call list or by visiting our <a href="https://about.gitlab.com/company/preference-center/">preference center</a> and unsubscribing. You may opt-out of messenger application communications, such as WhatsApp, by making a request through an in-app message or visiting our <a href="https://about.gitlab.com/company/preference-center/">preference center</a> and unsubscribing from telemarketing. You may continue to receive transactional email messages about your account and the Service after you have unsubscribed.</p> <p><em>To opt-out of Interest-based advertising:</em> If you wish to opt-out of interest-based advertising, please visit the <a href="https://about.gitlab.com/privacy/cookies/">Cookies Policy</a> to see your options.</p> <p><em>Request a copy of your information:</em> You may <a href="https://handbook.gitlab.com/handbook/gdpr/">request a copy of the Personal Data</a> that GitLab has about you.</p> <p><em>Update your information:</em> If you already have an account, you may access, update, or alter your user profile information by logging into your account and updating profile settings.</p> <p><em>To delete your account:</em> If you only want to delete your SaaS account, you may do so by logging into your account and going to the “Delete Account” option in your User Settings. If your intention is to delete your Personal Data across all systems, including your account, you need to fill out a <a href="https://support.gitlab.io/account-deletion/">Personal Data Request</a> Form and select "Account Deletion (full)" in the "Request Type" dropdown menu. If your account is tied to a Company that has entered into a commercial relationship with GitLab, you will have to ask your Company administrator to remove your account from that corporate namespace before we can delete it. Once your account is no longer associated with that corporate namespace, GitLab will process your deletion request according to the process stated herein.</p> <p>Be advised that if you allow your repository to be forked or cloned by making it public or by providing specific authorization, such repositories will fall outside the scope of your request for deletion. GitLab does not have the visibility into or the ability to delete your Personal Data across all forked or cloned repositories nor can we make such a communication to all third-parties on your behalf. As such, you must make your request to delete such repositories directly to those third-parties that you allowed to fork or clone your data.</p> <p>Please note that due to the open source nature of our Services, we may retain limited Personal Data indefinitely in order to provide a transactional history. For example, if you provide your information in connection with a blog post or comment, we may display that information even if you have deleted your account as we do not automatically delete community posts. Also, if you contribute to a public project (not owned by GitLab), and you provide your Personal Data in connection with that contribution, your Personal Data will be embedded and publicly displayed with your contribution, and we will not be able to delete or erase it because doing so would break the project.</p> <p>One exception to embedded information in a public project occurs when your Personal Data is added by you or someone else to the comments section of a public project. In such a case, your Personal Data will be redacted since removing this information from only the comments section will not break the project.</p> <p>If you contribute to a GitLab owned project by commenting in, or creating an issue or merge request and you provide your Personal Data in connection with that contribution, your Personal Data associated with your contribution will be deleted and attributed to a ghost user. However, please note that if the content of the contribution contains Personal Data, this information would remain and you will need to submit a specific request to have this information deleted.</p> <p><em>To port your projects:</em> You may port your projects by either using the <a href="https://docs.gitlab.com/ee/user/project/settings/import_export.html">Export functionality</a> provided within the SaaS product which will also include all metadata, or by cloning your repositories. To port your profile information, you may use the <a href="https://docs.gitlab.com/ee/api/users.html#for-user">API</a>.</p> <p><em>To inform your Supervisory Authority:</em> In the unlikely event you disagree with our handling of your request, you have the right to file a complaint with the competent supervisory authority in your jurisdiction, such as the Autoriteit Persoonsgegevens (+31)-(0)70 - 8888 500 in the Netherlands.</p> <p><em>Appeals:</em> If you are located in a state or country where you are granted the right to appeal GitLab's resolution of a data subject rights request, we will provide the specific information on how to appeal in our initial resolution letter to your request.</p> </span></div></section><section id="u.s.-state-privacy-rights" class="body-copy" data-v-495d6e81 data-v-bc187d08><h2 class="slp-my-32 slp-text-heading4-bold" data-v-19cf63b5 data-v-bc187d08> U.S. State Privacy Rights </h2> <div class="slp-text-body2" data-v-19cf63b5 data-v-bc187d08><span data-v-19cf63b5 data-v-bc187d08><p>If you are a California resident or reside in a US-state that requires statutory privacy disclosures, please visit the <a href="https://about.gitlab.com/privacy/us-state-privacy-rights-and-disclosures/">U.S. State Privacy Rights Disclosures</a> for a specific description of your privacy rights and collection practices.</p> </span></div></section><section id="other-important-privacy-information" class="body-copy" data-v-495d6e81 data-v-bc187d08><h2 class="slp-my-32 slp-text-heading4-bold" data-v-19cf63b5 data-v-bc187d08> Other Important Privacy Information </h2> <div class="slp-text-body2" data-v-19cf63b5 data-v-bc187d08><span data-v-19cf63b5 data-v-bc187d08><h3 id="statement-changes">Statement Changes <a class="header-anchor" href="#statement-changes" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>GitLab may change its Privacy Statement from time to time. When we do, we will update the date at the top of this Statement. If we decide to make a significant change to our Privacy Statement, we will post a notice of the update on the homepage of our Website. We may also provide notification via email of any material changes to our Privacy Statement.</p> <h3 id="contact-us">Contact Us <a class="header-anchor" href="#contact-us" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>Your information is controlled by GitLab B.V. and GitLab Inc. If you have questions or concerns about the way we are handling your Personal Data, please email our privacy office with the subject line "Privacy Concern" at <a href="/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="cf8b9f808fa8a6bba3aeade1aca0a2">[email protected]</a>.</p> </span></div></section></div><section id="collapsible-sidebar" data-v-495d6e81><div class="anchors" data-v-495d6e81><div class="nav-heading slp-text-body3-bold" data-v-19cf63b5 data-v-495d6e81>On this page</div><div class="depth-0" data-v-2c4a6705 data-v-495d6e81><div class="depth-1" data-v-2c4a6705 data-v-2c4a6705><a href="#what-personal-data-does-gitlab-collect-about-me" data-ga-name="" data-ga-location="" class="anchor" data-v-2c4a6705>What Personal Data does GitLab Collect about Me?</a></div><div class="depth-1" data-v-2c4a6705 data-v-2c4a6705><a href="#what-personal-data-is-not-collected-by-gitlab" data-ga-name="" data-ga-location="" class="anchor" data-v-2c4a6705>What Personal Data is Not Collected by GitLab?</a></div><div class="depth-1" data-v-2c4a6705 data-v-2c4a6705><a href="#how-does-gitlab-use-my-personal-data-and-our-legal-basis-for-processing" data-ga-name="" data-ga-location="" class="anchor" data-v-2c4a6705>How does GitLab Use My Personal Data and Our Legal Basis for Processing?</a></div><div class="depth-1" data-v-2c4a6705 data-v-2c4a6705><a href="#with-whom-does-gitlab-share-my-personal-data" data-ga-name="" data-ga-location="" class="anchor" data-v-2c4a6705>With Whom does GitLab Share My Personal Data?</a></div><div class="depth-1" data-v-2c4a6705 data-v-2c4a6705><a href="#how-does-gitLab-secure-my-personal-data" data-ga-name="" data-ga-location="" class="anchor" data-v-2c4a6705>How does GitLab Secure My Personal Data?</a></div><div class="depth-1" data-v-2c4a6705 data-v-2c4a6705><a href="#what-are-my-rights-and-choices-regarding-personal-data" data-ga-name="" data-ga-location="" class="anchor" data-v-2c4a6705>What are My Rights and Choices Regarding Personal Data?</a></div><div class="depth-1" data-v-2c4a6705 data-v-2c4a6705><a href="#u.s.-state-privacy-rights" data-ga-name="" data-ga-location="" class="anchor" data-v-2c4a6705>U.S. State Privacy Rights</a></div><div class="depth-1" data-v-2c4a6705 data-v-2c4a6705><a href="#other-important-privacy-information" data-ga-name="" data-ga-location="" class="anchor" data-v-2c4a6705>Other Important Privacy Information</a></div></div></div></section></div></div></div> </div></section> <section data-fetch-key="SlpFooterHOC:0" data-v-a2f714dc></section></div></div></div><script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script><script defer src="/_nuxt/static/1732377904/privacy/state.js"></script><script src="/_nuxt/a5e5ed7.js" defer></script><script src="/_nuxt/434c7f0.js" defer></script><script src="/_nuxt/41dd6a4.js" defer></script><script src="/_nuxt/5a8cdbe.js" defer></script><script src="/_nuxt/52a471a.js" defer></script> </body> </html>