From e1b8fdb3abe6fd1b037874f7554c28cf2b9312e0 Mon Sep 17 00:00:00 2001 From: Henrik Levkowetz Date: Thu, 26 Apr 2018 12:16:20 +0000 Subject: [PATCH] Added a page with GDPR-related information on handling of personal information within the datatracker. - Legacy-Id: 15090 --- ietf/help/urls.py | 4 + ietf/templates/base/menu_user.html | 1 + ietf/templates/help/personal-information.html | 83 +++++++++++++++++++ 3 files changed, 88 insertions(+) create mode 100644 ietf/templates/help/personal-information.html diff --git a/ietf/help/urls.py b/ietf/help/urls.py index 26b65528d..9c0bfb157 100644 --- a/ietf/help/urls.py +++ b/ietf/help/urls.py @@ -1,3 +1,6 @@ +# Copyright The IETF Trust 2013-2018, All Rights Reserved + +from django.views.generic import TemplateView from ietf.help import views from ietf.utils.urls import url @@ -6,5 +9,6 @@ urlpatterns = [ url(r'^state/(?P[-\w]+)/(?P[-\w]+)/?$', views.state), url(r'^state/(?P[-\w]+)/?$', views.state), url(r'^state/?$', views.state_index), + url(r'^personal-information/?$', TemplateView.as_view(template_name='help/personal-information.html'), name='personal-information'), ] diff --git a/ietf/templates/base/menu_user.html b/ietf/templates/base/menu_user.html index 10fbcd5e1..cde9e31cd 100644 --- a/ietf/templates/base/menu_user.html +++ b/ietf/templates/base/menu_user.html @@ -26,6 +26,7 @@
  • Password reset
  • Preferences
    • {% endif %} +
  • Handling of personal information
    • {% endif %} {% if not request.user.is_authenticated %} diff --git a/ietf/templates/help/personal-information.html b/ietf/templates/help/personal-information.html new file mode 100644 index 000000000..582b59124 --- /dev/null +++ b/ietf/templates/help/personal-information.html @@ -0,0 +1,83 @@ +{% extends "base.html" %} +{# Copyright The IETF Trust 2018-2018, All Rights Reserved #} +{% load origin %} + +{% block title %}Personal Information in the Datatracker{% endblock %} + +{% block content %} + {% origin %} +
    +

    Personal Information in the Datatracker

    +

    + + RFC 3935, "A Mission Statement for the IETF" lays out + the goal and the mission of the IETF as follows: +

    + + The goal of the IETF is to make the Internet work better. + + The mission of the IETF is to produce high quality, relevant + technical and engineering documents that influence the way people + design, use, and manage the Internet in such a way as to make the + Internet work better. These documents include protocol standards, + best current practices, and informational documents of various kinds. + + +

    + + In order to fulfil its mission, the IETF provides ways to distribute + drafts, discuss them, ballot them, and otherwise process them to the + point where they are considered ready for publication. + +

    +

    + + This makes the information in the draft documents, as well as + contributions related to the draft documents and their processing, as + laid out in the "Note + Well" statement, of legitimate interest to the IETF when it pursues + its mission; not only in general terms, but specifically under Article + 6(1) f) of + EU's General Data Protection Regulation . + +

    +

    + + The datatracker treats all personal information derived from draft documents and + documents published as RFC accordingly, as well as personal information derived from + processing draft documents through the IETF process. This includes author names, + email addresses and other address information provided in draft documents or as + contact information for IETF roles such as Working Group chairs, secretaries, + Area Directors and other roles. + +

    +

    + + There is however personal information held in the datatracker which + is not considered covered by Legitimate Interest. This information + requires Consent for its storage and processing, and the person it + relates to may at any time request its removal. This includes: + +

    + +
      +
    • Personal photo
      • +
    • Personal biography
      • +
    • Personal email addresses not derived from IETF contributions
      • +
    • Personal account login information
      • +
    + +

    + + Most of this information can be edited on their Account Info page by anybody with an + account. If the datatracker holds such information about a person, and + they don't have an account, a request to the IETF secretariat to change or + remove the information will be honoured. + +

    + + +
    +{% endblock %}