OSHWA Certification Privacy Policy

This policy was last updated on September 25, 2018.

The archive of any previous versions of this policy can be found here.

Introduction

The Open Source Hardware Association (OSHWA) processes limited amounts of personal data in order to operate and maintain the OSHWA open source hardware certification page and process. This privacy statement explains what personal data OSHWA processes and for what purpose. If you have any questions about this statement, please email info@oshwa.org.

Information We Collect

OSHWA collects two types of information in the process of operating the certification website.

The first type of information is the information that you provide to us when you submit an application to certify a specific piece of hardware. This information includes information about the hardware, the entity responsible for the hardware, and the contact information for the person submitting that information to OSHWA.

The second type is information we collect to analyze the performance and use of the website. This information is collected via Google Analytics tracking cookies.

How We Use This Information

OSHWA uses application information to create the certification directory, contact you about your application, and maintain a record of who has entered into licensing agreements regarding the certification logo.

OSHWA uses the tracking cookies to identify how often visitors come to the certification website, and to understand who those visitors are.

Legal Basis for Use

When you submit an application to certify hardware via the OSHWA process, you provide OSHWA consent to keep and use that information.

When you visit the certification website for the first time, you provide OSHWA consent to use tracking cookies via the cookie bar pop up.

Sharing Personal Data

OSHWA will publish standardized information about certified hardware projects in the certification directory. OSHWA does not generally share non-public information about applications. OSHWA may share non-public information about a specific application with a limited number of parties in order to evaluate the application or investigate complaints regarding certified hardware. This type of sharing is rare and done on a case-by-case basis. OSHWA may also share non-public information for other internal administrative reasons or of OSHWA believes that such sharing is necessary in order to comply with applicable legislation, statutory procedures or requests from government bodies.

Except in emergency situations, OSHWA requires valid and sufficient legal process to compel disclosure of records or information. This process may include a subpoena, warrant, or other valid court order. This process must contain enough information to minimize the likelihood of accidental disclosure of information from unrelated users. When OSHWA receives legal process form non-governmental third parties seeking records or information about a user, OSHWA may provide notice to the targeted user. Such notice may include a copy of the legal process. OSHWA may also provide the targeted user with enough time to appear and object to the legal process in court, if appropriate.

Transfer of Data

OSHWA used contentful to store and host certification information. The use of these services may result in certification data being transferred outside of your country. OSHWA relies on the terms and privacy policies of contentful to maintain the appropriate level of protection for this information.

Cookies

OSHWA uses functional cookies to allow the certification site to operate efficiently and reliably. To the extent that they process any personal data, these functional cookies process personal data only for the purpose for which the data is completed.

OSHWA uses Google Analytics tracking cookies to monitor the use of the certification site. These cookies are not required for the operation of the site. You can opt out of these cookies by using the “do not track” setting in your browser, and/or by using an ad blocker such as the EFF’s Privacy Badger.

Data Retention

OSHWA keeps all information about certification applications indefinitely.

Your Rights In Your Data

You may request a copy of your personal data from OSHWA by emailing info@oshwa.org. You have the right to correct that data, although that right does not allow you to modify information that is material to the certification agreement without the permission of OSHWA. You may also withdraw consent for OSHWA to retain your personal data for information connected to certification applications that have not been approved by OSHWA.