Responsibility for data

The VelonLabs domains are offerings of the same controller; shared sign-in, storage and credits do not create joint controllership between different companies behind these brands. Roles in customer projects, shared workspaces or external integrations depend on who determines purposes and means. People supplying other people’s data are responsible for lawful collection and disclosure and the necessary information. Where we process personal data solely on a customer’s documented instructions, an Art. 28 GDPR agreement is required before processing; the relevant document and information about technical and organisational measures may be requested. Where purposes and means are actually determined jointly, an Art. 26 GDPR arrangement is required. A connection alone does not replace this assessment. See responsibility and collaboration.

The project owner selects members and access roles. Sharing may include files and past/future chats of the selected source. Inform participants before sharing and avoid unnecessary personal data. Viewers read within their role; editors may perform authorised jobs and write actions. This does not share other workspaces, your personal account or balance. Revocation ends access through this share but does not remove previously lawfully copied data or independent GitHub permissions.

You may exercise privacy rights with the provider identified above, including for shared projects. Identify the account, workspace and relevant data without sending secrets. We verify identity and authority and consider other participants’ rights. Where required, we provide the Art. 28 or Art. 26 GDPR agreement and information on technical and organisational measures before the relevant processing. Contact: [email protected].