From f392e9013dd0da1fbcc40f34a6e6322db26f5d01 Mon Sep 17 00:00:00 2001 From: "Fede.-" Date: Thu, 24 Oct 2019 15:55:04 -0300 Subject: [PATCH 1/3] Info added --- privacy_policy.md | 39 ++++++++++++++++++++++++++++++++++++++- 1 file changed, 38 insertions(+), 1 deletion(-) diff --git a/privacy_policy.md b/privacy_policy.md index 9dac310..0d032ac 100644 --- a/privacy_policy.md +++ b/privacy_policy.md @@ -32,4 +32,41 @@ This privacy policy applies to all services hosted on **Disroot.org** and its su - **User** or **you**: any person or third party that access and uses the services provided by **Disroot.org**. - **Disroot, Disroot.org, we** or **us**: Stichting Disroot.org - **Platform**: is the set of services provided by **Disroot.org** and that are hosted on our servers. -- **Federated services**: Services that operates on the basis of so-called **Federation Protocols** which enables users signed up at different services providers to interact with each other. Examples of these services are **Nextcloud**, **Email**, **Hubzilla** and **XMPP**. \ No newline at end of file +- **Federated services**: Services that operates on the basis of so-called **Federation Protocols** which enables users signed up at different services providers to interact with each other. Examples of these services are **Nextcloud**, **Email**, **Hubzilla** and **XMPP**. + +--- + +# 1. What data do we collect? + +## What do we do with your data? + +# 2. What we do not do with your data + +## How do we store your data? + +# 3. Where the data is stored? + +# 4. Per service detailed privacy notices + +# 5. Your rights +Under the **GDPR** you have a number of rights with regard to your personal data: + +* a. **Right to access** - The right to request (I) copies of your personal Data or (II) access to the information you submited and we hold at any time. +* b. **Right to correct** - The right to have your Data rectified if it is inaccurate or incomplete. +* c. **Right to erase** - The right to request delete or remove your Data from our servers. +* d. **Right to restrict the use of your Data** - The right to restrict processing or limit the way we use your Data. +* e. **Right to Data portability** - The right to move, copy or transfer your Data. +* f. **Right to object** - The right to object to our use of your Data. + +To make enquires, excercise any of the rights described above or withdraw your consent to the processing of your Data (where consent is our legal basis for processing your Data), please contact us via email to: + +- **data.protection.officer@disroot.org** - Person responsible for Privacy Policy +- **info@disroot.org** - General contact information + +For the purposes of the **GDPR**, **Disroot.org** is the "data controller". This means that **Disroot** determines the purposes for which and the manner which your data is processed. + +If you are not satisfied with the way a compliant you make regarding to how your Data is handled by us, you have the right to send a complaint to the Information Commissioners’ Office. + +## Access to your information + +# 6. Changes on this Privacy Policy -- 2.30.2 From 93ec901c5b4b4cdd9c6079c41e8e6c140378c3f6 Mon Sep 17 00:00:00 2001 From: "Fede.-" Date: Fri, 25 Oct 2019 16:53:04 -0300 Subject: [PATCH 2/3] Fixed Right to correct text, added an exception note and Commisioners' Office info --- privacy_policy.md | 18 +++++++++++++++--- 1 file changed, 15 insertions(+), 3 deletions(-) diff --git a/privacy_policy.md b/privacy_policy.md index 0d032ac..201bc40 100644 --- a/privacy_policy.md +++ b/privacy_policy.md @@ -52,20 +52,32 @@ This privacy policy applies to all services hosted on **Disroot.org** and its su Under the **GDPR** you have a number of rights with regard to your personal data: * a. **Right to access** - The right to request (I) copies of your personal Data or (II) access to the information you submited and we hold at any time. -* b. **Right to correct** - The right to have your Data rectified if it is inaccurate or incomplete. +* b. **Right to correct** - The right to have your Data rectified if it is inaccurate or incomplete whenever it possible*. * c. **Right to erase** - The right to request delete or remove your Data from our servers. * d. **Right to restrict the use of your Data** - The right to restrict processing or limit the way we use your Data. * e. **Right to Data portability** - The right to move, copy or transfer your Data. * f. **Right to object** - The right to object to our use of your Data. +\* *This not applies to* **username** *and* **email address** *as they are integral part of your user account and cannot be modified*. + To make enquires, excercise any of the rights described above or withdraw your consent to the processing of your Data (where consent is our legal basis for processing your Data), please contact us via email to: -- **data.protection.officer@disroot.org** - Person responsible for Privacy Policy + - **info@disroot.org** - General contact information For the purposes of the **GDPR**, **Disroot.org** is the "data controller". This means that **Disroot** determines the purposes for which and the manner which your data is processed. -If you are not satisfied with the way a compliant you make regarding to how your Data is handled by us, you have the right to send a complaint to the Information Commissioners’ Office. +If you are not satisfied with the way a compliant you make regarding to how your Data is handled by us, you have the right to send a complaint to the **Information Commissioners’ Office**. + +**Dutch Data Protection Authority (Dutch DPA)** + +**Postal address**
+Autoriteit Persoonsgegevens
+PO Box 93374
+2509 AJ DEN HAAG
+
+**Phone:** (+31) - (0)70 - 888 85 00
+**Fax:** (+31) - (0)70 - 888 85 01
## Access to your information -- 2.30.2 From 8410b82ffde794a976a734cae9a799dd38bb2bd9 Mon Sep 17 00:00:00 2001 From: "Fede.-" Date: Sat, 26 Oct 2019 09:24:31 -0300 Subject: [PATCH 3/3] User rights + Access to information --- privacy_policy.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/privacy_policy.md b/privacy_policy.md index 201bc40..b9ad17b 100644 --- a/privacy_policy.md +++ b/privacy_policy.md @@ -62,7 +62,6 @@ Under the **GDPR** you have a number of rights with regard to your personal data To make enquires, excercise any of the rights described above or withdraw your consent to the processing of your Data (where consent is our legal basis for processing your Data), please contact us via email to: - - **info@disroot.org** - General contact information For the purposes of the **GDPR**, **Disroot.org** is the "data controller". This means that **Disroot** determines the purposes for which and the manner which your data is processed. @@ -80,5 +79,12 @@ PO Box 93374
**Fax:** (+31) - (0)70 - 888 85 01
## Access to your information +Access to your personal data, stored files and other information you provide to any of the services offered by **Disroot.org** is under your control. This means that all data stored on services that are bound to personal information (services that require logging in) are available for you to download either for archival purposes or to transfer to another compatible website. + +**How to access and self-export your personal data**
+https://howto.disroot.org/en/tutorials/user/gdpr + +**To modify your personal data or delete your account**
+https://user.disroot.org # 6. Changes on this Privacy Policy -- 2.30.2