1. The purpose of this Privacy Notice is to inform you about the collection, processing, and use of personal information related to your report.
Atlassian will make every reasonable effort to keep information reported confidential and communicated on a need-to-know basis only to those with a legitimate, business need.
2. Atlassian will only collect and issue any personal information submitted by you for the purpose of assessing and addressing reports of potential ethics-related issues, violations of Atlassian's Code of Business Conduct and Ethics, and violations of the law. We limit our collection to personal information necessary to process your report (such as your name, contact details, role, and the equivalent information of other individuals you mention in your report). For details of how Atlassian treats your personal information (including how long we keep it, what your rights are, and what our legal bases are) see our Global Workplace Privacy Notice.
3. We have instructed Convercent, an independent service provider, to manage the Portal. Your information will be stored on servers hosted by Convercent as a data processor of Atlassian. We have strict contractual controls in place with Convercent, who must follow our instructions regarding your personal information. Using an external provider ensures confidentiality to anyone filing a report and anonymity to those who choose to remain anonymous.
In addition to the receipt and processing of such personal information by Convercent, personal information may be transferred to relevant departments (such as the Audit Committee), subsidiaries, affiliates, outside law firms, consultants of Atlassian, or law enforcement agencies if required for the investigation.
Your personal information will be transferred to the United States. Details regarding Atlassian's EU-US Privacy Shield certification can be found here.
4. If you are not satisfied with the processing of your personal data as described herein, please contact us by using the information below. You can still use one of the other internal reporting channels to report the suspected misconduct, such as reporting to your manager or to a representative of the HR or Legal Teams.
5. The information that you submit will be treated confidentially except in cases where that is not possible because of legal requirements or in order to conduct a proper investigation, in which case the information will be handled sensitively and only provided to those that “need to know”. Where permitted under the law, you may
remain anonymous; however, we encourage you to identify yourself to enable us to most effectively investigate reports.
6. If you have any concerns or questions about the privacy of your personal information, please contact the Atlassian Privacy Team at dataprotection@atlassian.com.