From mboxrd@z Thu Jan  1 00:00:00 1970
From: Michael Tremer <michael.tremer@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: Changes to the website according to the new GDPR legislation
Date: Wed, 25 Apr 2018 13:04:08 +0100
Message-ID: <1524657848.2479471.22.camel@ipfire.org>
In-Reply-To: <35FC3977-AC07-4EE4-B4CF-794AAD3193EF@gmx.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============8450262270266902335=="
List-Id: <development.lists.ipfire.org>

--===============8450262270266902335==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Thanks for the reference. I will have a look...

On Wed, 2018-04-25 at 11:07 +0000, Horace Michael wrote:
> If anybody needs an opensource tool for doing PIA (personal
> imformation  assesment), here is one from French authorities (French DPIA)
>=20
> https://www.cnil.fr/en/open-source-pia-software-helps-carry-out-data-protec=
tio
> n-impact-assesment
>=20
>=20
> Hope it helps,
> Horace
>=20
> On April 25, 2018 10:03:47 AM UTC, Michael Tremer <michael.tremer(a)ipfire.=
org>
> wrote:
> > Hello guys,
> >=20
> > I guess you have seen it by now that there is a lot of fuzz and panic
> > about the
> > new GDPR. We are slightly affected by this as well and therefore I have
> > been
> > investigating what we need to do to be compliant.
> >=20
> > The website needs the following things changed:
> >=20
> > https://git.ipfire.org/?p=3Dipfire.org.git;a=3Dcommitdiff;h=3D77a085ed3f2=
e0444ba6f
> > 7d292ee039cc021664a9
> >=20
> > This just updates the disclaimer and adds a few clauses about data
> > protection
> > and what we are doing with the data. This applies mainly to the support
> > forums.
> >=20
> > This also needs to be ported to the new website design, which I can do
> > shortly.
> > Sven's development branch unfortunately has a few merge issues with the
> > master
> > branch and I need a little time to sort this out.
> >=20
> > The other thing that we probably do not need to change because of legal
> > restrictions, but is a good idea anyways is to serve *all* additional
> > JS, CSS
> > and fonts locally. That reduces the amount of data that is being
> > collected by
> > Google Fonts and other CDNs so that we protect our users from that. The
> > additional time the website needs to load is not too bad and should be
> > acceptable over privacy.
> >=20
> > Just wanted to keep you folks updated about this.
> >=20
> > If anybody else knows anything that we are not doing right about GDPR
> > yet and we
> > need to change, please let me know.
> >=20
> > Best,
> > -Michael
>=20
> --
> Horace Michael (aka H&M)
>  Please excuse my typos and brevity. Sent from a Smartphone.=20
-----BEGIN PGP SIGNATURE-----
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3D
=3DhRQ/
-----END PGP SIGNATURE-----


--===============8450262270266902335==--