search

molbiodiv / fennec

Functional Exploration of Natural Networks and Ecological Communities
MIT License
6 stars 3 forks source link

GDPR compliance #200

Open iimog opened 6 years ago

iimog commented 6 years ago

We need to comply with the new EU General Data Protection Regulations. This includes a statement explaining all storage and usage of user data.

iimog commented 6 years ago

I'm not a lawyer. My suggestion for a general explanation of our data usage in plain english looks like this:

This page uses cookies to uniquely identify users. If google analytics is activated on this page you see a separate notification in the navigation bar with more details and the possibility to opt-out. Except for google analytics (if activated) no user data is passed to any other entity. User data is only permanently stored on the server if you choose to login after registration or via OAuth. In case of login your projects and other uploaded data are stored in a database on the server. This data is only stored for your own usage and not analyzed in any way. We do not collect any data that you do not explicitly upload. We can not guarantee to store this data infinitely so please make backups using the export functionality. You can remove your data yourself by deleting it. It is possible for you to share data with other users specifically. In case of questions or requests please contact .

If someone is willing to help me we could start a document that we can edit together. This should probably go somewhere close to the impressum and should be editable for each specific instance.

iimog commented 6 years ago

This looks very promising as long as FENNEC is hosted on Uni Wü Servers: https://www.rz.uni-wuerzburg.de/dienste/it-recht/generatoren/

iimog commented 6 years ago

A draft notice has been added to the contact pages of both the public and the beta instance. I hope this is enough to properly inform our users and comply with GDPR.