Contriboss (COSS) Initiative Privacy Policy

Effective Date: January 1, 2025

1. Introduction

Welcome to the Contriboss (COSS) initiative website (hereinafter “the Website”). This Privacy Policy explains how The COSS Stewardship Body (hereinafter “we,” “us,” or “our”) collects, uses, shares, and protects information obtained from visitors to this Website and users of our services.

We are committed to protecting your privacy and handling your data in an open and transparent manner. This Policy applies to information we collect through our Website and any other online services or communications that link to this Policy.

2. Information We Collect

We may collect the following types of information:

Information You Provide Directly:

Contact Information: When you contact us, subscribe to a newsletter, sign up for an event, or participate in community forums, you may provide us with personal information such as your name, email address, organization, and any other information you choose to share.
Project Information: If you submit a project for COSS branding verification, you may provide information about your project and its maintainers.
Communications: We may keep a record of your communications with us.

Information We Collect Automatically:

Log Data: Like most websites, our servers automatically record information (“Log Data”) created by your use of the Website. Log Data may include information such as your IP address, browser type, operating system, the referring web page, pages visited, location, your mobile carrier, device information, search terms, and cookie information.
Cookies and Similar Technologies: We may use cookies (small text files sent by your computer each time you visit our website) or similar technologies to log data. We may use session cookies (which expire when you close your browser) or persistent cookies (which stay on your device until you or your browser delete them). You can control the use of cookies at the individual browser level.

3. How We Use Your Information

We use the information we collect for various purposes, including:

To Provide and Improve Our Website and Services: To operate and maintain the Website, respond to your inquiries, provide information you request, and improve user experience.
Communication: To send you updates about the COSS initiative, newsletters (if you opt-in), information about events, and other communications related to our mission.
Community Engagement: To facilitate your participation in community forums, discussions, and contributions to the COSS standard.
COSS Branding Process: If you submit a project for verification, to process your submission and communicate with you about it.
Analytics and Performance: To monitor and analyze trends, usage, and activities in connection with our Website to understand how it is used and to improve its functionality and design.
Legal Compliance and Protection: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests, and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others.

We do not sell your personal information. We may share your information in the following circumstances:

With Your Consent: We may share your information with third parties if we have your consent to do so.
Service Providers: We may share your information with third-party vendors, consultants, and other service providers who perform services on our behalf (e.g., website hosting, email services, analytics providers). These service providers are authorized to use your personal information only as necessary to provide these services to us.
Publicly Available Information: Information you choose to make public through community forums or project submissions (e.g., project names, maintainer contact if provided for public display) may be accessible to others.
Legal Requirements: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, prevent fraud, act in urgent circumstances to protect the personal safety of users of the Website, or protect against legal liability.
Organizational Changes: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our organization by another company.

5. Data Retention

We will retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law.

6. Your Data Protection Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information, such as:

The right to access, correct, update, or request deletion of your personal information.
The right to object to processing of your personal information, ask us to restrict processing of your personal information, or request portability of your personal information.
The right to opt-out of marketing communications we send you at any time.
If we have collected and processed your personal information with your consent, then you can withdraw your consent at any time.

To exercise these rights, please contact us using the contact details provided below.

7. Data Security

We take reasonable measures to help protect information about you from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. However, no internet or email transmission is ever fully secure or error-free.

8. International Data Transfers

Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.

9. Children’s Privacy

Our Website is not directed to individuals under the age of 16 (or the relevant age of consent in your jurisdiction). We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information.

10. Links to Other Websites

Our Website may contain links to other websites not operated or controlled by us. This Privacy Policy does not apply to third-party websites. We encourage you to review the privacy policies of any third-party websites you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Effective Date” at the top. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy, please contact The COSS Stewardship Body:
Contact Us