GDPR Privacy Statement: Difference between revisions

 

==What data do we store and process?==

 

Besides the geographic data contributed (point, ways, areas with associated attributes and GPS trace data), and communications related data (diary posts and comments, the user page, changeset comments, messages) we store

===OSMF Membership Data===

 

The full personal name and residential address of members of the organisation according to the companies act are, by law, required to be added to the OSMF register of members. Terminating membership does not lead to the entry being deleted. Associate members are not required to provide their full details and the information can be deleted in membership is terminated. Payment details for both classes of members is retained for accounting purposes as long as required by law.

 

Some events organized by the OSMF require prior registration to be able to participate, most notably our annual State of the Map conference. This data is required to verify payment of entry fees, planning of venues, catering and scheduling of talks and presentations and is visible to the group organizing the event. The data will be retained from the time of registration till the end of the event and then deleted.

==Who has access to the data==

 

The other data is made available, depending on the use case, via the website, via the editing API and from our data dumps, to users with accounts and to the general public. Some of the non-geographic data may be available only by some methods however this is subject to change.

 

 

==Where do we store the data==