Hubzilla

Stephan Maus

Tue, 22 May 2018 23:30:40 +0200

Zuckerberg-Hearing in Brussels: 15 minutes

Me, trying to understand #DSGVO and to update my website accordingly: 4 hours 45

show all 16 comments

Mike Macgirvin

Wed, 23 May 2018 01:33:12 +0200

Since everybody else seemed to go into paralysis about what to do, I added a privacy policy to the dev branch which covers the main points and should be a good start. You're welcome to improve on this (a French translation landed the next day), but at least it's *something* and that's so much better than *nothing*. To be fully compliant you may need to edit that document and add some contact information at the end. This will cause merge conflicts if somebody changes the source file (highly likely) so that will need to be addressed.

Carsten

Wed, 23 May 2018 07:34:24 +0200

Thank you!

Haakon Meland Eriksen (Parlementum)

Wed, 23 May 2018 07:51:48 +0200

Thank you, Mike - well done! I got this from Moodle this morning - https://moodle.com/privacy-policy/ and suggest people read both Mike's and that one to see how it can be done at your hub.

Stephan Maus

Wed, 23 May 2018 08:17:18 +0200 last edited: Wed, 23 May 2018 08:18:10 +0200

Isn't that crazy? We are writing stuff on the web. And have to copy & paste "Ulysses"-long legal Docs in our sites...

Carsten

Wed, 23 May 2018 09:04:58 +0200

Well, only if you're hosting a site yourself that is readable and also meant for others that don't belong to your family. That's not too crazy. If you're buying a bottle of water they have to write on the bottle that there's water in the bottle. They don't have to write there's air in the bottle.

Stephan Maus

Wed, 23 May 2018 09:26:36 +0200

It's like stickers on American toasters: "This toaster is dangerous. It can burn down your house, kill your dog and make you unhappy for the rest of your life. But anyway: Bon appétit !"

Martin G.

Wed, 23 May 2018 09:47:17 +0200

The problem currently is that we need something safe and watertight (preferably something that isn't a hack) within less than 48 hours. In the stable branch. And "we" means everyone who runs a hub anywhere in the EU, whether public or private.

Even if we implement it later, server owners may have to prove that they've been compliant with the new laws starting May 25h, midnight local time. Which they most likely can't because they haven't.

muppeth

Wed, 23 May 2018 11:20:27 +0200

Not sure we have to worry about GDPR. Hubzilla is perfect example of how internet public services should operate. If hubzilla is not GDPR complient starting already from the concept of what it is, then I dont know what is.

I wonder about embeded links and i f there would be a way for users to switch them off if they desire.
For example this is our privacy policy: https://disroot.org/en/privacy_policy and tos: https://disroot.org/en/tos
We've looked at it the last days but not sure there is anything we would need to add to be more gdpr complient. If anyone would like to give some feedback please do. Any changes I think of, such us information about embed links seem very comsmetic and not a reason to send out thousands of emails (like the rest of the internet does for the last week).

Mike Macgirvin

Wed, 23 May 2018 11:42:24 +0200

You can block all embeds and just present a link if you want. admin/security is the place to look

muppeth

Wed, 23 May 2018 12:02:48 +0200

@Nike yes, but thats not a per user option.

Carsten

Wed, 23 May 2018 16:03:32 +0200

Why should it? A user is not responsible as long as he's not officially nominated as the responsible person.

muppeth

Wed, 23 May 2018 16:27:22 +0200 last edited: Wed, 23 May 2018 16:27:58 +0200

Yes. but then user could decide whether he prefers to be monitored say by youtube or not. So instead of giving users choice (you want embeds or not), you as a user have none (either your hub does embeds or not).

Carsten

Wed, 23 May 2018 16:34:44 +0200

That's a point.

Carsten

Wed, 23 May 2018 16:38:27 +0200

On the other side people can do that with the µMatrix plugin.

Waitman Gobble

Wed, 23 May 2018 20:32:41 +0200

default contact info?

attn: Santa Claus
325 S. Santa Claus Lane
North Pole, Alaska 99705

by phone: Jenny 867-5309

muppeth

Thu, 24 May 2018 12:40:53 +0200

Did some additions to our privacy policy (mainly structure and adding the controller and rights details). Thanks Mike for posting the draft, as you can see it helped a lot :P
https://bin.disroot.org/?201eb2f917f54abe#BScQ3Z3I6brGOHQOOvYZzfLS65HC5DdWatgRnw8G+vw=

Feedback very much welcome and needed.