Last updated: 6 November 2026

This Data Processing Addendum (“DPA”) forms part of the Terms of use between the customer installing Asset Labels – Bulk QR Labels for Jira Assets (“Customer”, controller) and Bc. Tomáš Buchta, sole trader, IČO 21540951, 30. dubna 2307/12, 702 00 Ostrava, Czech Republic (“Vendor”, processor), and applies to personal data processed by the App under Article 28 of the GDPR.

  1. Subject matter and duration. Storing the Customer’s label templates; Assets data is processed only in the user’s browser, for as long as the App is installed.
  2. Nature and purpose. Storage and display of label templates (name, size, attribute ids, footer), solely to provide the App’s functionality.
  3. Types of personal data. The App stores no account IDs or other user data. Personal data is processed only if the Customer’s users type it into the label templates (e.g. a name in a footer).
  4. Data subjects. Persons mentioned in the Customer’s label templates.
  5. Instructions. The Vendor processes personal data only to operate the App as used by the Customer and on documented instructions sent to support@tsutsei-support.atlassian.net.
  6. Where data is processed. Exclusively within Atlassian’s Forge platform (Key-Value Store) for the Customer’s site, inheriting Atlassian’s data residency. The App sends no data outside Atlassian. The Vendor has no access to the stored data.
  7. Sub-processor. Atlassian (provider of the Forge platform), under Atlassian’s own terms and data processing addendum. The Vendor will announce any new sub-processor on this page in advance.
  8. Security. Data is protected by the security measures of the Atlassian Forge platform (encryption at rest and in transit, tenant isolation). Assets data is read with the user’s own permissions in the browser and never stored by the App.
  9. Confidentiality. Only the Vendor works on the App and is bound by confidentiality.
  10. Assistance. The Vendor assists the Customer with data subject requests and data protection obligations as far as the App’s design allows (users can edit or delete templates or uninstall the App).
  11. Personal data breaches. The Vendor notifies the Customer without undue delay after becoming aware of a breach affecting the App.
  12. Deletion. Deleted templates are removed immediately. On uninstallation, Atlassian deletes the App’s data according to the Forge data retention policy.
  13. Audits. The Vendor makes available the information necessary to demonstrate compliance with this DPA on request.
  14. Governing law. As in the Terms of use.