ArchWiki talk:Privacy policy

Meaning of "Arch Linux"

In Arch Linux, we describe "Arch Linux" as a software distribution, but in this document it's more like the aggregate of the related web services. Should we say it explicitly? -- Kynikos (talk) 18:04, 3 March 2019 (UTC)

Should we list exactly and comprehensively which services this policy covers? -- Kynikos (talk) 18:04, 3 March 2019 (UTC)

Arch Linux is the non-profit incorporated under Software in the Public Interest. Any and all services we provide would be subject to the policy. Jasonwryan (talk) 00:57, 4 March 2019 (UTC)

Legal liability

Who is legally responsible in case of violations? -- Kynikos (talk) 18:04, 3 March 2019 (UTC)

Arch Linux :) (see above) Jasonwryan (talk) 00:58, 4 March 2019 (UTC)

Public information

From User:Jasonwryan/Privacy Policy#Public forums reminder, "Please remember that any information that is disclosed in these areas becomes public information". Should we define "public information" (also mentioned in User:Jasonwryan/Privacy Policy#Your rights under GDPR in the EEA) and clarify that the posting user is the sole responsible subject for any consequences derived from leaking personal information in those areas? ArchMap/List is a notable case. -- Kynikos (talk) 18:04, 3 March 2019 (UTC)

I was about to add that the wiki (or at least its talk pages) should be added to the first sentence which lists the forums providing public information, but on second thought, it might be easily confused with content released into the public domain. So I think that proper definition of "public information" is really needed. -- Lahwaacz (talk) 19:00, 3 March 2019 (UTC)

I don't see a need to: public information is the opposite of personal/private. Content posted to the boards, wiki, MLs etc., constitutes public information. Jasonwryan (talk) 19:50, 3 March 2019 (UTC)

Jurisdiction

From User:Jasonwryan/Privacy Policy#Sharing your personal data, "As required by law": law of what country or countries? -- Kynikos (talk) 18:04, 3 March 2019 (UTC)

The country where Arch can be served, ie., US. Jasonwryan (talk) 19:51, 3 March 2019 (UTC)

Rights under GDPR

From User:Jasonwryan/Privacy Policy#Your rights under GDPR in the EEA:

"especially when you access the website": we have several web services, see also #Meaning of "Arch Linux", I wouldn't call it a "website". -- Kynikos (talk) 18:04, 3 March 2019 (UTC)

"subject to some limitations": should we expand on the limitations? -- Kynikos (talk) 18:04, 3 March 2019 (UTC)

No - that would be too exhaustive. Jasonwryan (talk) 19:53, 3 March 2019 (UTC)

"Please understand, however, the rights enumerated above are not absolute in all cases": what does "not absolute in all cases" mean? -- Kynikos (talk) 18:04, 3 March 2019 (UTC)

See above :) Jasonwryan (talk) 19:53, 3 March 2019 (UTC)

Notice of changes

User:Jasonwryan/Privacy Policy#Changes to this Privacy Policy: should we include an effective date in the document? Should we define how much of a notice will we give before "material changes" take effect? -- Kynikos (talk) 18:04, 3 March 2019 (UTC)

I had one in originally, and then thought that the wiki will automagically capture this anyway. Perhaps we should include Last Formal Revision? Or Last Major? Jasonwryan (talk) 19:54, 3 March 2019 (UTC)

Storage security

User:Jasonwryan/Privacy Policy#Our commitment to data security: should we describe also where and how securely personal data is stored, not only transferred from the clients? -- Kynikos (talk) 18:04, 3 March 2019 (UTC)

Sharing your personal data

In User:Jasonwryan/Privacy Policy#Sharing your personal data, the third point on "research activities" should explicitly mention anonymization or pseudonymization (assuming that's true of course). -- Lahwaacz (talk) 18:54, 3 March 2019 (UTC)