This page supplements our Privacy Statement and provides additional information for residents in certain US States which have specific privacy laws, including the rights available to those residents. This page includes our NOTICE AT COLLECTION under California law.
Effective 1 January 2023
This Notice at Collection is provided under California law which requires us to provide California residents with additional information on how GitLab collects, uses, retains, and discloses Personal Information. California residents' additional rights are also summarized.
In the preceding twelve months, GitLab or our service providers may have collected the following categories of Personal Information for business or commercial purposes:
We collect Personal Information from the following categories of sources, which are described in more detail in our Privacy Statement:
We use the Personal Information we collect for the following Business or Commercial purposes, which are further described in our Privacy Statement or otherwise disclosed to you:
Purpose of Use | Categories of Personal Information |
---|---|
Auditing interactions with consumers. To understand how our services are used and to improve services, provide trainings and educational opportunities, to enforce legal terms that govern our services |
|
Detecting security incidents and debugging. To maintain the security of our services, detect and prevent fraud and abuse. |
|
Contextual customization of ads. To understand you and your preferences in order to display advertising to you and to send you marketing content, offers, and promotions. |
|
Internal Research. To improve and develop new services or features, diagnose issues, analyze use and measure effectiveness of our services to improve them in order to obtain and retain customers, and conduct research. |
|
Maintaining Quality and Safety. To understand how our services are used and improve the services, to provide a forum to discuss services, to protect the rights, safety and property of GitLab, you or any third-party |
|
Providing Customer Service, Maintaining/Servicing Customer Accounts, Verifying Customer Information. To create, identify and authenticate your access to the services, provide customer support and respond to your questions or feedback. |
|
Communication with Customers. To send you information, including confirmations, technical notices and releases, security alerts, schedule maintenance, and to support administrative messages such as password reset requests. |
|
Processing Payments. To perform business operations such as billing, renewals, and payment processing. |
|
We disclosed the following categories of Personal Information for a business purpose in the preceding 12-months: identifiers/contact information; Personal Information, as defined in the California customer records law section 1798.80; commercial information; internet or other electronic network activity information; geolocation data (such as device location); audio, electronic, visual or similar information (such as call or video recordings); professional or employment-related information; and inferred information (such as preferences, characteristics, and predispositions). We disclosed each category with our affiliated companies; order processing, and fulfillment vendors; payment processors and financial institutions; analytics and research vendors; information technology vendors; fraud prevention and security vendors; vendors supporting legal, compliance, accounting, audits and other internal functions; certain marketing and advertising vendors; and other third-parties as descibed in the "With Whom does GitLab Share my Personal data?" section of our Privacy Statement.
Under California law, the transmission of cookie identifiers and browsing behaviors to third-parties for interest-based advertising or cross-context behavioral advertising may be considered a sale of Personal Information. Subject to certain uses of the Services, we may share such Personal Information with third-parties, which may be considered a sale. We do not sell or share Sensitive Personal Information, nor do we sell or share any Personal Information about individuals who we know are under the age of 16. In the preceding 12-months, GitLab may have sold or shared the following categories of Personal Information to the following categories of third-party recipients for the purposes listed below.
Categories of Personal Information Sold or Shared | Categories of Third-Party Recipients | Purpose of Disclosure |
---|---|---|
Identifiers/Contact information Internet or other electronic network activity information Geolocation data Inferred information |
Data Analytics Providers, Advertising Networks, Social Networks | Interest based advertising, data enrichment |
Please review the Data Retention section of our Privacy Statement for more information about how long GitLab retains Personal Information.
You are entitled to certain rights as a California resident, which include:
You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under California law. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. To provide or delete specific pieces of Personal Information we will need to verify your identity to the degree of certainty required by law. We will verify your request by using one of the methods set forth here.
Effective 1 January 2023
This notice is provided under the Virginia Consumer Data Protection Act ("VCDPA") and explains the privacy rights of Virginia residents. It also provides certain mandated disclosures about our treatment of Virginia residents' Personal Data.
We collect the Personal Data detailed in the "What Personal Data does GitLab collect about me?" section of our Privacy Statement.
The purposes for processing your Personal Data are found in the "How Does GitLab use my Personal Data and our Legal Basis For Processing" section of our Privacy Statement.
We may share each of the categories of Personal Data listed in our Privacy Statement with those third-parties detailed in the section titled "With Whom does GitLab share my Personal Data?"
To make an access, correction, deletion or portability request, use the Personal Data Request Form. You may designate in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under VCDPA. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. To provide or delete specific pieces of Personal Data we will need to verify your identity to the degree of certainty required by law. We will verify your request by using one of the methods set for here. We do not sell your Personal Data, as the term "sale" is defined under the VCDPA.
We process and disclose the following categories of Personal Data for targeted advertising: device information and identifiers, website usage data, and other online activity data provided through cookies and similar tracking technologies. We share each category with advertising agencies, data anlytics providers, and social networks.
To opt out from targeted advertising, click on the Cookie Preferences link in the footer or header of each of our website pages. An opt-out request will be specific to the device and browser you are using. Therefore you will need to opt-out from each browser that you use to access GitLab websites and services.
See what your team can do with a single platform for software delivery.
Get free trialWhen you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.
Cookie Policy
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, enabling you to securely log into the site, filling in forms, or using the customer checkout. GitLab processes any personal data collected through these cookies on the basis of our legitimate interest.
These cookies enable helpful but non-essential website functions that improve your website experience. By recognizing you when you return to our website, they may, for example, allow us to personalize our content for you or remember your preferences. If you do not allow these cookies then some or all of these services may not function properly. GitLab processes any personal data collected through these cookies on the basis of your consent
These cookies allow us and our third-party service providers to recognize and count the number of visitors on our websites and to see how visitors move around our websites when they are using it. This helps us improve our products and ensures that users can easily find what they need on our websites. These cookies usually generate aggregate statistics that are not associated with an individual. To the extent any personal data is collected through these cookies, GitLab processes that data on the basis of your consent.
These cookies enable different advertising related functions. They may allow us to record information about your visit to our websites, such as pages visited, links followed, and videos viewed so we can make our websites and the advertising displayed on it more relevant to your interests. They may be set through our website by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant advertisements on other websites. GitLab processes any personal data collected through these cookies on the basis of your consent.