Privacy

Controller

bavetic
c/o COCENTER
Koppoldstr. 1
86551 Aichach
Germany
Email: contact@bavetic.com

Part A — This website

Hosting

This website is hosted by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Serving a page necessarily involves processing your IP address, the requested URL, the time of the request, and the user agent your browser sends. This happens in server logs and is used to deliver the site and keep it secure.

Legal basis: Art. 6 (1)(f) GDPR — our legitimate interest in operating a functioning, secure website.

Cloudflare acts as our processor under Art. 28 GDPR. Cloudflare’s data processing agreement forms part of its self-serve subscription agreement and applies to this processing; its sub-processors are listed publicly.

Because Cloudflare is based in the United States, personal data may be transferred there. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, so transfers are covered by the European Commission’s adequacy decision under Art. 45 GDPR; its data processing agreement additionally incorporates the EU Standard Contractual Clauses (Implementing Decision (EU) 2021/914) under Art. 46 GDPR.

Cookies and analytics

This website sets no tracking cookies and runs no analytics or advertising scripts. There is therefore no consent banner, because there is nothing to consent to. If that changes, this page will change first.

Fonts

Web fonts are served from this website’s own domain. Your browser makes no request to a third-party font provider.

Contact by email

If you write to us, your message and address are processed to answer you, on the basis of Art. 6 (1)(b) or (f) GDPR. Correspondence is retained for as long as needed to handle the matter and to meet statutory retention periods.

Part B — Storage Optimizer for Confluence

This section is the app privacy policy referenced from the Atlassian Marketplace listing. It describes what the app does with data in your Confluence site.

Where the app runs

The app is built on Atlassian Forge and runs on infrastructure operated by Atlassian. It declares no outbound network access. Your Confluence content is not transmitted to any system operated by us, and we have no ability to read it.

What the app accesses

To calculate what your storage quota is spent on, the app reads attachment metadata — file names, sizes, version numbers, and the page and space an attachment belongs to — together with page bodies, in order to determine whether an attachment is still referenced. Attachment metadata can include the name of the user who uploaded a file, which is personal data.

This data is read and totalled while you have the app open. The full list of permissions the app requests, and the reason for each, is in the installation docs.

What the app stores

The app stores no data on any server. It has no database, no Forge storage entities and no backend function. Attachment metadata is read, totalled for the view you have open, and discarded when you close it. Nothing is retained between sessions, and there is no copy of your content anywhere outside your own Confluence site.

One exception, for completeness: the app writes a single interface preference to your browser’s local storage under the key so.hide-scan-summary, recording whether you chose to hide the scan summary. Its value is 1 or nothing at all. It contains no personal data, never leaves your browser, and is set only because you toggled that setting. Clearing your browser’s site data removes it.

What the app deletes

Deletion happens only for objects you explicitly select. The app does not delete anything on a schedule or without a confirmed action.

Sub-processors

Atlassian Pty Ltd, as the operator of the Forge platform and of your Confluence site. There are no others.

Your rights

Under the GDPR you have the right to access your data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interest (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future.

To exercise any of these, write to contact@bavetic.com.

You also have the right to lodge a complaint with a supervisory authority, Art. 77 GDPR. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Postfach 1349, 91504 Ansbach, Germany.

Data processing agreement

Where we act as a processor for you under Art. 28 GDPR, our data processing agreement applies.