Changes to the website according to the new GDPR legislation

Changes to the website according to the new GDPR legislation

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 1351 bytes --]

Hello guys,

I guess you have seen it by now that there is a lot of fuzz and panic about the
new GDPR. We are slightly affected by this as well and therefore I have been
investigating what we need to do to be compliant.

The website needs the following things changed:

  https://git.ipfire.org/?p=ipfire.org.git;a=commitdiff;h=77a085ed3f2e0444ba6f7d292ee039cc021664a9

This just updates the disclaimer and adds a few clauses about data protection
and what we are doing with the data. This applies mainly to the support forums.

This also needs to be ported to the new website design, which I can do shortly.
Sven's development branch unfortunately has a few merge issues with the master
branch and I need a little time to sort this out.

The other thing that we probably do not need to change because of legal
restrictions, but is a good idea anyways is to serve *all* additional JS, CSS
and fonts locally. That reduces the amount of data that is being collected by
Google Fonts and other CDNs so that we protect our users from that. The
additional time the website needs to load is not too bad and should be
acceptable over privacy.

Just wanted to keep you folks updated about this.

If anybody else knows anything that we are not doing right about GDPR yet and we
need to change, please let me know.

Best,
-Michael

Re: Changes to the website according to the new GDPR legislation

[Horace Michael]

[-- Attachment #1: Type: text/plain, Size: 1847 bytes --]

If anybody needs an opensource tool for doing PIA (personal imformation  assesment), here is one from French authorities (French DPIA)

https://www.cnil.fr/en/open-source-pia-software-helps-carry-out-data-protection-impact-assesment


Hope it helps,
Horace

On April 25, 2018 10:03:47 AM UTC, Michael Tremer <michael.tremer(a)ipfire.org> wrote:
>Hello guys,
>
>I guess you have seen it by now that there is a lot of fuzz and panic
>about the
>new GDPR. We are slightly affected by this as well and therefore I have
>been
>investigating what we need to do to be compliant.
>
>The website needs the following things changed:
>
>https://git.ipfire.org/?p=ipfire.org.git;a=commitdiff;h=77a085ed3f2e0444ba6f7d292ee039cc021664a9
>
>This just updates the disclaimer and adds a few clauses about data
>protection
>and what we are doing with the data. This applies mainly to the support
>forums.
>
>This also needs to be ported to the new website design, which I can do
>shortly.
>Sven's development branch unfortunately has a few merge issues with the
>master
>branch and I need a little time to sort this out.
>
>The other thing that we probably do not need to change because of legal
>restrictions, but is a good idea anyways is to serve *all* additional
>JS, CSS
>and fonts locally. That reduces the amount of data that is being
>collected by
>Google Fonts and other CDNs so that we protect our users from that. The
>additional time the website needs to load is not too bad and should be
>acceptable over privacy.
>
>Just wanted to keep you folks updated about this.
>
>If anybody else knows anything that we are not doing right about GDPR
>yet and we
>need to change, please let me know.
>
>Best,
>-Michael

--
Horace Michael (aka H&M)
 Please excuse my typos and brevity. Sent from a Smartphone. 

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 858 bytes --]

Re: Changes to the website according to the new GDPR legislation

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 3021 bytes --]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Thanks for the reference. I will have a look...

On Wed, 2018-04-25 at 11:07 +0000, Horace Michael wrote:
> If anybody needs an opensource tool for doing PIA (personal
> imformation  assesment), here is one from French authorities (French DPIA)
> 
> https://www.cnil.fr/en/open-source-pia-software-helps-carry-out-data-protectio
> n-impact-assesment
> 
> 
> Hope it helps,
> Horace
> 
> On April 25, 2018 10:03:47 AM UTC, Michael Tremer <michael.tremer(a)ipfire.org>
> wrote:
> > Hello guys,
> > 
> > I guess you have seen it by now that there is a lot of fuzz and panic
> > about the
> > new GDPR. We are slightly affected by this as well and therefore I have
> > been
> > investigating what we need to do to be compliant.
> > 
> > The website needs the following things changed:
> > 
> > https://git.ipfire.org/?p=ipfire.org.git;a=commitdiff;h=77a085ed3f2e0444ba6f
> > 7d292ee039cc021664a9
> > 
> > This just updates the disclaimer and adds a few clauses about data
> > protection
> > and what we are doing with the data. This applies mainly to the support
> > forums.
> > 
> > This also needs to be ported to the new website design, which I can do
> > shortly.
> > Sven's development branch unfortunately has a few merge issues with the
> > master
> > branch and I need a little time to sort this out.
> > 
> > The other thing that we probably do not need to change because of legal
> > restrictions, but is a good idea anyways is to serve *all* additional
> > JS, CSS
> > and fonts locally. That reduces the amount of data that is being
> > collected by
> > Google Fonts and other CDNs so that we protect our users from that. The
> > additional time the website needs to load is not too bad and should be
> > acceptable over privacy.
> > 
> > Just wanted to keep you folks updated about this.
> > 
> > If anybody else knows anything that we are not doing right about GDPR
> > yet and we
> > need to change, please let me know.
> > 
> > Best,
> > -Michael
> 
> --
> Horace Michael (aka H&M)
>  Please excuse my typos and brevity. Sent from a Smartphone. 
-----BEGIN PGP SIGNATURE-----
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=hRQ/
-----END PGP SIGNATURE-----