|
| 1 | +--- |
| 2 | +title: Privacy Policy |
| 3 | +layout: privacy |
| 4 | +--- |
| 5 | + |
| 6 | +### 1. General Information |
| 7 | + |
| 8 | +**We do not want to need your data.** We therefore want to be fully transparent about how we use it, and are always open to viable suggestions on how to reduce your data footprint on our infrastructure. We try to use privacy-friendly open source software and privacy-friendly third parties as much as possible. |
| 9 | + |
| 10 | +This document outlines our responsibilities and duties regarding the processing of your personal data, as defined by Art. 13 of the European Union's General Data Protection Regulation (GDPR), and provides information on the rights that you have as a data subject. |
| 11 | + |
| 12 | +### 2. Contact |
| 13 | + |
| 14 | +**Controller and Data Protection Officer:** |
| 15 | + |
| 16 | +Felicitas Pojtinger\ |
| 17 | +On behalf of the Vancouver Linux User Group (VanLUG)\ |
| 18 | +Email: [felicitas@pojtinger.com](mailto:felicitas@pojtinger.com) |
| 19 | + |
| 20 | +If you want to report a privacy concern, please contact the data protection officer at the address above. |
| 21 | + |
| 22 | +### 3. Data Processing Reasons & Legal Basis |
| 23 | + |
| 24 | +#### 3.1 Data of Website Visitors |
| 25 | + |
| 26 | +When accessing our website, the following information is processed for the reasons outlined below: |
| 27 | + |
| 28 | +1. Technical metadata for the purpose of providing the website and avoiding misuse of our resources. |
| 29 | + - Data is processed during regular use of our website and includes the IP address of the requesting computer, the browser and operating system you are using, the date and time of access, the URLs requested on our website, as well as the previously visited website where applicable (referrer URL). |
| 30 | + - Our website does NOT use cookies or other techniques for user-targeted analytics or advertisements. |
| 31 | + - Legal basis for processing this data is a legitimate interest of the website operator (Art. 6.1.f GDPR). |
| 32 | + |
| 33 | +#### 3.2 Luma Calendar Embed |
| 34 | + |
| 35 | +Our Events page offers an optional embed of the Luma event calendar. This embed is **not loaded by default**. It is only activated when you explicitly click "Load events from Luma". Loading it will connect your browser directly to Luma's servers. |
| 36 | + |
| 37 | +Our home page fetches the next upcoming event from Luma's API via our proxy on Railway to display the next meeting card. Your browser connects to our proxy, not directly to Luma. |
| 38 | + |
| 39 | +Luma, Inc.\ |
| 40 | +548 Market St PMB 36143\ |
| 41 | +San Francisco, CA 94104\ |
| 42 | +United States\ |
| 43 | +Privacy policy: [https://luma.com/privacy-policy](https://luma.com/privacy-policy) |
| 44 | + |
| 45 | +### 4. Data Handling by Third Parties |
| 46 | + |
| 47 | +Our website is hosted by: |
| 48 | + |
| 49 | +GitHub, Inc. (GitHub Pages)\ |
| 50 | +88 Colin P Kelly Jr St\ |
| 51 | +San Francisco, CA 94107\ |
| 52 | +United States\ |
| 53 | +Privacy policy: [GitHub Privacy Statement](https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement) |
| 54 | + |
| 55 | +Our Luma event API proxy for the home page is hosted by: |
| 56 | + |
| 57 | +Railway Corporation\ |
| 58 | +548 Market St PMB 68956\ |
| 59 | +San Francisco, CA 94104\ |
| 60 | +United States\ |
| 61 | +Privacy policy: [Railway Privacy Policy](https://railway.com/legal/privacy) |
| 62 | + |
| 63 | +These companies are based in the United States. Data transfers to the US are based on appropriate safeguards according to Art. 46 GDPR. |
| 64 | + |
| 65 | +### 5. Data Retention |
| 66 | + |
| 67 | +Technical metadata like IP addresses are processed, not stored or retained by us directly, but rather by the third parties specified in section 4. Please see each provider's privacy policy for details. |
| 68 | + |
| 69 | +### 6. Data Subject Rights |
| 70 | + |
| 71 | +As a subject of personal data processing, you have the following rights: |
| 72 | + |
| 73 | +1. **Right to access:** You can request copies of your personal data, as defined in Art. 15 GDPR. |
| 74 | +2. **Right to rectification:** You can request that we correct any information you believe is inaccurate, or complete any information you believe is incomplete, as defined in Art. 16 GDPR. |
| 75 | +3. **Right to erasure:** You can request that we erase your personal data, under the condition that the retention and processing of the information is not required by law and is not necessary due to the reasons outlined in Art. 17 (3) GDPR. |
| 76 | +4. **Right to restrict processing:** You can request that we restrict the processing of your personal data, as defined in Art. 18 GDPR. |
| 77 | +5. **Right to object to processing:** You can object to and withdraw consent to our processing of your personal data, as defined in Art. 21 GDPR. |
| 78 | +6. **Right to data portability:** You can request that we transfer the data that we have collected to another organization, or directly to you, as defined in Art. 20 GDPR. |
| 79 | +7. If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us using the information in section 2. |
| 80 | + |
| 81 | +### 7. Licence |
| 82 | + |
| 83 | +This privacy policy is inspired by the [Codeberg Privacy Policy](https://codeberg.org/Codeberg/org/src/branch/main/PrivacyPolicy.md). You can freely use and modify this text under the [CC BY-SA 4.0](https://creativecommons.org/licenses/by-sa/4.0/) licence. |
0 commit comments