Overview
The General Data Protection Regulation (GDPR) gives individuals in the European Economic Area (EEA), United Kingdom, and Switzerland specific rights over their personal data. DevPass is committed to full compliance with GDPR.
This page explains how we process personal data under GDPR, what rights you have, and how to exercise them.
Legal Basis for Processing
Under GDPR, we process your personal data based on the following legal bases:
| Processing Activity | Legal Basis |
|---|---|
| Account creation and management | Contract performance (Art. 6(1)(b)) |
| Providing the DevPass service | Contract performance (Art. 6(1)(b)) |
| GitHub and LinkedIn integration | Consent (Art. 6(1)(a)) |
| Analytics and product improvement | Legitimate interest (Art. 6(1)(f)) |
| Security monitoring | Legitimate interest (Art. 6(1)(f)) |
| Marketing communications | Consent (Art. 6(1)(a)) |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
Your Rights Under GDPR
As a data subject under GDPR, you have the following rights:
Right of access (Art. 15)
You have the right to request a copy of the personal data we hold about you. We will provide this within 30 days in a structured, commonly used, machine-readable format.
Right to rectification (Art. 16)
You have the right to request correction of inaccurate or incomplete personal data. You can update most information directly through your DevPass account settings.
Right to erasure (Art. 17)
You have the right to request deletion of your personal data ("right to be forgotten"). We will comply unless we have a legitimate legal basis for retaining the data (e.g., legal compliance, dispute resolution).
Right to restriction (Art. 18)
You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
Right to data portability (Art. 20)
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to object (Art. 21)
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds.
Right to withdraw consent (Art. 7)
Where processing is based on consent, you have the right to withdraw consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.
Automated decision-making (Art. 22)
DevPass does not make automated decisions with legal or similarly significant effects. Our matching algorithms provide recommendations, not binding decisions. A human always reviews and makes the final decision.
Data Controller
The data controller responsible for your personal data is:
DevPass
Email: devpassofficial@gmail.com
Online: devpass.com/contact
If your entity or organization is using DevPass, that organization may also be a data controller for certain data. In such cases, we act as a data processor on their behalf.
Data Processors
We use the following categories of data processors to provide our service:
- Cloud infrastructure: Hosting, compute, and storage services.
- Analytics: Anonymized usage analytics to improve the product.
- Communication: Email delivery for account notifications and updates.
- Authentication: OAuth providers (GitHub, LinkedIn) for secure sign-in.
All data processors are bound by Data Processing Agreements (DPAs) that ensure GDPR compliance. A list of sub-processors is available upon request.
International Transfers
Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses (SCCs): We use EU-approved SCCs with all processors outside the EEA.
- Adequacy decisions: Where the European Commission has determined a country provides adequate protection.
- Supplementary measures: Additional technical and organizational measures where required by law.
Data Protection Officer
You can reach our Data Protection Officer at:
Email: devpassofficial@gmail.com
Our DPO is responsible for monitoring compliance with GDPR, advising on data protection impact assessments, and serving as your point of contact for data protection inquiries.
Filing a Complaint
If you believe your GDPR rights have been violated, you have the right to file a complaint with your local supervisory authority. A list of EU data protection authorities is available at:
https://edpb.europa.eu/about-edpb/about-edpb/members_en
We encourage you to contact us first at devpassofficial@gmail.com so we can address your concerns directly.
Contact
For GDPR-related inquiries:
- Data Protection Officer: devpassofficial@gmail.com
- Privacy team: devpassofficial@gmail.com
- General inquiries: devpassofficial@gmail.com