Privacy Policy
The OpenAtom Foundation (hereinafter referred to as "we," "us," or "foundation") understands the importance of your privacy and fully respects it. Please read this Privacy Policy (hereinafter referred to as "this policy") carefully before you submit your personal data to us. If you have any questions about how we process your personal data, please feel free to contact us.
Version Change Notes
Please carefully review the following updates to this privacy policy:
- Updated the description of third-party login for account services in the "How We Collect and Process Your Personal Data" section.
- Revised the data correction description in the How We Access or Control Your Personal Data" section.
- Optimized the bold formatting style for personal data.
1. How We Collect and Process Your Personal Data
We generally do not require your personal data if you only browse the general content of the openEuler Community ("Community"). We will collect your personal data accordingly in the following circumstances. You may also obtain a quick understanding of how we collect and use personal data by reviewing the Personal Data Collection Overview:
a) Account Service
- When you register for an openEuler community account, we will collect your user name, email address, phone number, password, and email/phone verification code. A unique account identifier will be automatically generated. Refusal to provide this information will prevent account creation.
- When you log in to the openEuler community using your user name, email address, or phone number, we will collect your user name, email address, phone number, password and verification code for authentication. Refusal to provide this information will prevent login.
- When you log in using a third-party account (Gitee, GitHub, or OpenAtom), we will collect your Gitee UUID、Gitee ID、Gitee nickname、Gitee email address、Gitee avatar、Github UUID、Github ID、Github nickname、Github email address、Github avatar、OpenAtom UUID、OpenAtom username、OpenAtom nickname、OpenAtom email address、OpenAtom avatar from that platform for authentication and code repository access management. If you use Gitee or GitHub without an existing bound openEuler account, a new openEuler account with a unique identifier will be automatically generated, deriving from your Gitee ID or GitHub ID. Refusal to provide this information will prevent login via third-party accounts.
- After logging in, you can optionally provide your avatar, nickname, and company. This information is not required for using openEuler community features.
- After logging in, you can modify your email address, phone number, and password, we will collect email address, phone number, password and verification code for authentication.
- After logging in, you can bind your openEuler account to a third-party account (GitHub, Gitee, or OpenAtom). We will collect your Gitee UUID、Gitee ID、Gitee nickname、Gitee email address、Gitee avatar、Github UUID、Github ID、Github nickname、Github email address、Github avatar、OpenAtom UUID、OpenAtom username、OpenAtom nickname、OpenAtom email address、OpenAtom avatar from the bound platform. Refusal to provide this information will prevent third-party account binding for login purposes.
b) Forum Service
- When you sign up or log in to the forum service, we will collect your user name, email address, phone number, password, nickname, avatar, Gitee ID and GitHub ID from your unified account, and assign permissions and roles to your account. In addition, we will collect IP address, region, device information, login time, and preference settings to provide you with more secure services;
- When you use the forum service, we collect your like information, follow information, favorite content, post count, reply count, follow count, fan count, personal profile, badge acquisition, sidebar settings, follow list, fan list, email summary, time zone, post and reply content, images, audio, video, documents, and comments to understand your personal preferences and better serve you;
- When you report a concern about a forum post or reply, we will collect your report type, description, user name, IP address, region, organization, and host name to verify and confirm the content of the report.
c) Mail List Service. When you use our mail list service, we will collect your email address and name (optional). We will provide you with the email subscription service to facilitate your participation in discussions in the community.
d) Service Optimization. To ensure service quality and operations, we automatically collect and store necessary log data, including access timestamps, IP address, region, request details, access status, resource size, access origin, and user agent information. In addition, we will collect your device information (device name, device type, device vendor, operating system, operating system version, screen width, screen height), application information (application ID, SDK version , browser, browser version, browser viewport width, browser viewport height), application usage information (event name, event attributes, reporting time, client anonymous ID, username (if you have logged into community account)). This data is collected for the purposes of community operations and O&M security.
e) Contributor License Agreement ("CLA") Signing. When you participate in code contribution through the Contributor License Agreement ("CLA") signing system (click here to learn more), you need to submit your relevant personal data to the CLA signing system. We will obtain such personal data to verify whether you have signed the CLA, and to conduct relevant statistical analysis to understand how the community is operating.
f) Content Release. When you participate in Community meetings, Community activities, contribution in the open source Community, blogs, newsgroups, or Community organization, you may submit your photo, name, email address, company name, position, school, profile, region and Gitee ID for posting on our website so that developers can better understand the community, quickly make contact, and participate in the community.
g) Meetup. When you apply organize an openEuler meetup, the community will collect your name, phone number, email address, company, and meetup details (including organization, agenda, date, duration, city, event scale, event form, event support, and topics) from the application form you fill in. The collected data will be used to contact you for the purpose of confirming your application and related matters, as well as arranging for relevant affairs, including sign-ins and nameplates.
h) Quick Issue Creation. When you submit an issue through the community's QuickIssue service, if you submit the issue using your Gitee account, we will collect your Gitee ID; if you submit the issue using your email, we will collect your email address and email verification code. In addition, we will collect issue related information (title, SIG name, scenario, repository name, and issue description). The above information is used for quick issue submission. After your issue is successfully created, we will display your Gitee ID or anonymous email in the description information of the issue page and the submitter field of the issue board to facilitate your search for your issue information.
i) Compatibility Certification. When you use the compatibility certification service, we will collect your UUID, user name, phone number and email address from your openEuler account for identity verification purposes. Your user name and phone number will be used to notify you of the enterprise certification results, while your user name and email address will be used to inform you of the progress of the compatibility certification. Upon successful completion of the openEuler compatibility certification, the compatibility certification service will collect your enterprise information (including the enterprise name, business license, unified social credit code/organization code, business address, legal representative, registered capital, date of establishment, business term, applicant's name, applicant's phone number, applicant's email address, business registration country/region, and enterprise email address) for the purpose of enterprise certification. The compatibility certification service will also collect the project leader's signature via the certificate confirmation page for the purpose of generating your compatibility certificate.
j) EulerMaker. When you use the EulerMaker service, we will collect your user name, email address from your openEuler account for identity verification purposes.
We may also supplement the personal data we collect from you with additional personal data we receive from third parties, including other platforms, communities, or legal and public channels within the scope of your authorization and consent. We promise to process your personal data in strict accordance with applicable laws and regulations. Please read the privacy policy and user agreements of the third parties carefully. If your personal data provided by a third party is required for using related services of the community, but you refuse to allow the third party to collect, use, transfer, or share your personal data when the third party provides services, you may not be able to use related services of the community. For example, when you use an authorized third-party account to log in to the community, we will obtain your personal data from the third party with your consent.
2. How We Use Cookies and Similar Technologies
To ensure our website works properly, we may at times place cookies on your computers or mobile devices. Please refer to About Cookies for details about how we use cookies and similar technologies and how they process your personal data.
3. How We Share Your Personal Data
Sharing means providing third parties with your personal data. The third parties and we would handle the personal data independently. We do not share your personal data with third parties without your consent, except in the following circumstances or as described in this policy:
a) Sharing under your instruction. We may share your personal data with your consent and under your instruction to the third parties indicated by you.
b) Sharing your personal data as necessary for protecting national security, public security, and your and other individuals' crucial legitimate rights and interests.
c) Affiliates. We may share your personal data with our affiliates, for the purposes of transaction support, service support, or security support.
d) Partners. We may share your personal data with our partners. However, we will share your personal data only for legitimate, justified, necessary, specified, and explicit purposes, and share only the personal data necessary for providing our services.
For more details, please refer to the Data Sharing with Third Parties. If you refuse to allow our partners to collect personal data necessary to provide services, you may be unable to use the services provided through those partners.
When we share your personal data with affiliates or partners, their responsibilities and obligations will be governed by contracts and we will require them to take appropriate measures to ensure the safety of the personal data processed.
4. How Long We Retain Your Personal Data For
We will retain your personal data for no longer than is necessary for the purposes set out in this policy, unless otherwise required by laws or requested by you.
Generally, we will store or retain your personal data within the retention period according to applicable laws or service agreements from the date when we obtain your personal data in the community. If your personal data has exceeded the retention period and no law requires us to continue processing your specific personal data, we will delete your personal data or anonymize it according to applicable laws and regulations.
Upon your active request for the deletion of personal data, the retention period for the relevant data will be one month. We will respond to your request and delete all personal data within this period.
For service optimization, the access timestamp, IP address, region, request details, access status, accessed resource size, access source, and request user agent information collected based on the access quantity statistics will be automatically deleted after 10 days.
5. How We Protect Your Personal Data
We take the security of your personal data seriously. We take appropriate physical, organizational, and technical measures to protect your personal data. For example, we use encryption technologies to ensure the confidentiality of data; we implement protection mechanisms to protect data from attacks. We deploy access control mechanisms to ensure that only authorized personnel can access your personal data. In addition, we hold security and privacy protection training. In a word, we are committed to protecting your personal data. Nevertheless, no security measure is perfect and no product, service, website, data transfer, computing system, or network connection is absolutely secure.
6. How We Access or Control Your Personal Data
In accordance with applicable laws and regulations, you may have the following rights regarding your personal data:
a) Access the personal data we hold about you and obtain copies thereof;
b) Request us to update or correct your personal data;
c) Request us to erase your personal data;
d) Object to our processing of your personal data;
e) Restrict our processing of your personal data;
f) Lodge a complaint with the competent data protection authority.
Please note that these rights are not absolute and may be restricted in accordance with applicable laws. If you need our assistance in exercising the requests or rights above, please contact us as set out in the "How to Contact Us" section below.
- To provide you with the CLA Sign service, we will retain your personal data. The retention period of such data will depend on the specific purpose for which it is used, as well as the requirements of applicable laws and regulations. You acknowledge and understand that the CLA is a legally binding document signed by you or the corporation you represent, serving as evidence of the permanent rights granted over your contributions. Therefore, if you request the deletion of the data collected for the purpose of executing the CLA (including, but not limited to, your name and email address), we may not be able to comply with such a request, unless the deletion of such data does not affect the legal validity of the CLA you have signed.
- Any personal data you publicly display on the community website will be stored in the relevant code repository, and historical records will persist even after deletion.
Generally, we will respond to you within one month, unless otherwise required by applicable laws. Please note that under some circumstances, for example where we cannot verify your identity, or your claim exceeds your rights under applicable laws, we may refuse your request. In this case, we will inform you in written form that your request is refused together with the reasons for our refusal.
You can change the scope of your authorization for us to collect your personal data or withdraw your authorization. However, your decision to withdraw your consent or authorization does not affect any previous processing of personal data based on your authorization.
6.1 Data Access
You can log in to the user center using an openEuler community account using the browser on your local PC or mobile device to access your personal data.
6.2 Data Correction
You can log in using an openEuler community account and perform the following operations in User Center:
- Change your avatar.
- Choose Info to view and correct your basic information(nickname, company).
- Choose Identity to check and correct you email address, phone number, and Gitee/Github/OpenAtom account.
- Choose Security to reset your login password.
You have the right to update or modify your personal data processed by us when you need to or find any errors with it.
6.3 Data Deletion
You can log in using an openEuler community account and perform the following operations in User Center:
- Choose User Center -> Info to delete basic informatio(nickname, company) about your openEuler community account,
- Choose User Center -> Identity to unbind your phone number and Gitee/GitHub/OpenAtom account.
6.4 Revocation of Consent
- You can contact us via email to object to the processing of your personal information.
- You can contact us via email to restrict the processing of your personal information.
- You can choose to unsubscribe from emails in the mailing list service: enter the email you want to unsubscribe from, enter your email in the unsubscribe area, and that email will receive a unsubscribe notification email. Click the corresponding confirmation link to complete the unsubscribe process
- You can choose User Center -> Security -> Cancel signature to withdraw consent to the policy. Please note that if you withdraw your consent to the policy, we will be unable to continue providing services to you, but your account will remain active.
6.5 Deletion
You can log in to the openEuler community and choose User Center -> Security -> Delete to delete your openEuler community account. This action will also delete your personal information in the openEuler community. Exercise caution when performing this operation.
7. Where Your Personal Data Is Stored
To enable our affiliates and partners to provide better support, some of your personal data will be transferred from the Hong Kong Special Administrative Region of the People's Republic of China to the Chinese mainland. In such cases, we will fulfill our compliance obligations in accordance with applicable laws and regulations and this policy to ensure that your personal data is protected as required by applicable laws and regulations and in line with the terms set forth in this policy. We will also implement appropriate safeguards during the transfer of your personal data. For example, when transferring your personal data over public networks, we will encrypt the data to prevent unauthorized access.
8. How This Policy Is Updated
We may update or modify this policy from time to time according to changes of our services or data processing. If we update this policy, we will publish the latest version of the policy on the website, and it will take effect immediately upon its release. You are advised to review this policy periodically for any changes. If we make changes to this policy, we will notify you through appropriate channels (bulletins and pop-ups) and obtain your consent.
9. How We Protect Children's Online Privacy
This website and its contents and services are mainly intended for individuals over the age of 14. Individuals under the age of 14 are not allowed to use the services we provide without the consent of their parents or guardians. If we accidentally collect personal data of an individual under the age of 14 without verifiable prior consent from the individual's parents or guardians, we will attempt to delete the data as soon as possible.
10. Third-Party SDK Privacy and Security Policy
In the course of your use of our services, certain services may be provided to you through our collaboration with third-party partners, such as statistical analysis tools. To facilitate this, we have integrated third-party software development kits (SDKs) or similar applications. For details, see the Third-Party SDKs.
We have no control over the privacy and data protection policies of third parties, and such third parties are not bound by this policy. Before submitting any personal data to third parties, please review their respective privacy protection policies.
11. How to Contact Us
If you want to contact us or exercise your rights, please contact us at:
Email: contact@openeuler.io
Hotline: +86 15311871505
Last updated: March 11, 2025
Privacy policy version: v20250311