Information we collect
When you interact with us through the Competition Site, we may collect Personal Data and other information from you, as further described below. We do this in order to be able to run the Competition Site, and to provide you with the best possible user experience. The lawful basis for doing so (in terms of the European GDPR) is Legitimate Interests. You do not need to explicitly give us consent to process this information; by providing your personal information on the Competition Site (for example by signing in with GitHub) we assume that you are happy for us to store that data. You will find more information about our Legitimate Interest for processing data below.
Personal Data that you provide through the Competition Site
When you interact with Semmle through the Competition Site, we receive and store certain personally non-identifiable information. Such information, which is collected passively using various technologies, cannot presently be used to specifically identify you. Semmle may store such information itself or such information may be included in databases owned and maintained by Semmle affiliates, agents or service providers. The Competition Site may use such information and pool it with other information to track, for example, the total number of visitors to our Site, the number of visitors to each page of our Site, and the domain names of our visitors' Internet service providers. It is important to note that no Personal Data is available or used in this process.
Aggregated Personal Data
In an ongoing effort to better understand and serve the users of the Competition Site, Semmle may conduct research on its user demographics, interests and behavior based on the Personal Data and other information provided to us. This research may be compiled and analyzed on an aggregate basis, and Semmle may share this aggregate data with its affiliates, agents and business partners. This aggregate information does not identify you personally. Semmle may also disclose aggregated user statistics in order to describe our services to current and prospective business partners, and to other third parties for other lawful purposes.
We may also permit Google Analytics to make use of a feature called User ID session stitching. This functionality allows for more accurate analytics by using the same user identifier over various sessions and devices. However, it is not intended to allow Google to personally identify an individual or permanently identify a particular device.
We store your Site account data (such as a user's name and email address) indefinitely. Access logs (which include information such as IP addresses) are stored for up to 3 months for debugging purposes. Site analytics data is stored for up to 26 months.
Our use of your Personal Data and other information: Why and How
Why (our Legitimate Interests)
At Semmle, we care about both your privacy and about helping people write better code. In order to do the best possible job we may use some of your information. We will never process more information than is strictly required in order to run the competitions site, unless you explicitly consent to additional processing.
To use some parts of the Competition Site, we need you to sign in using GitHub. For example, in order to enter a competition. We will store the information you provide us with (for example, your github username and email addresses) to make sure that you (and only you) have access to your account and to allow us to administer the competitions.
We are always working to improve the Competition Site; in order to know which areas are most heavily used, we store which pages are visited most.
Individuals whose data is processed on the lawful basis of Legitimate Interests automatically have the following rights.
Right to be informed
This document, as well as the overview "Your data and privacy" are designed to inform you exactly how Semmle processes your data. If you would like to know more about how exactly we balance both your and our interests, rights, and freedoms: please contact us and we will be happy to provide you with our Legitimate Interests Assessment.
Right of access to your Personal Data
The Competition Site allows you to provide us with a very limited amount of Personal Data regarding you, which we store to provide you with a good user experience. Please contact us if you would like us to provide you with this data. We may require you to provide evidence to verify your identity.
Right to rectification
The data held by us on The Competition Site is provided by yourself. You can update this data at any point by logging in to The Competition Site. Feel free to contact us if you require assistance.
Right to object, right to erasure, and right to restrict processing
If you would like to object to Personal Data regarding you being processed by The Competition Site, or would like to restrict the processing, then you can contact us to do so.
Rights in relation to automated decision making and profiling
The Competition Site does not perform any automated decision making or profiling.
Our disclosure of Personal Data regarding you and other information
Semmle is not in the business of selling your information. We consider this information to be a vital part of our relationship with you. There are, however, certain circumstances in which we may share Personal Data regarding you with certain third parties without further notice to you, as set forth below:
As we develop our business, we might sell or buy businesses or assets. In the event of a corporate sale, merger, reorganization, dissolution or similar event, Personal Data may be part of the transferred assets.
Agents, consultants and related third parties
Semmle, like many businesses, sometimes hires other companies to perform certain business-related functions. Examples of such functions include maintaining databases. When we employ another entity to perform a function of this nature, we only provide them with the information that they need to perform their specific function.
Semmle may disclose Personal Data regarding you if required to do so by law or in the good faith belief that such action is necessary to (i) comply with legal process, applicable laws or government requests; (ii) enforce our Terms of Service; or (iii) protect the rights, property, or personal safety of Semmle, its users or the public.
You can visit the Competition Site without providing any Personal Data (other than your IP address). If you choose not to provide any Personal Data, you may not be able to use certain components of the Competition Site.
Links to other websites
Semmle takes reasonable steps to protect the Personal Data provided via the Competition Site from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. In particular, email sent to or from the Competition Site may not be secure. Therefore, you should take special care in deciding what information you send to us via email. Please keep this in mind when disclosing any Personal Data to Semmle via the Internet.
Access to information and contacting Semmle
Filing a complaint
This policy was last modified on Sep 19th 2018.