Energy-Visualizer / mexer

Energy Visualizer (Summer 2024)
MIT License
0 stars 0 forks source link

GDPR Requirements #38

Closed kenny5033 closed 1 month ago

kenny5033 commented 3 months ago

We have to ensure that we are within GDPR requirements for announcing user data that we track.

kenny5033 commented 2 months ago

“‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.” Article 4(1)

We ask for email, which is a possible identifier. More importantly, searching shows we have to ask for permission before sending any email communications -- I'm still looking for a quote from the GDPR page to back this.

We also ask for country and institutions would could be used to geographically identify someone.

kenny5033 commented 1 month ago

GDPR (in terms and conditions) document was revised to the best of our information.