You are viewing a plain text version of this content. The canonical link for it is here.
Posted to legal-discuss@apache.org by Jim Jagielski <ji...@jaguNET.com> on 2015/06/30 13:03:32 UTC

Privacy policy

Please note:

	http://www.apache.org/foundation/policies/privacy.html


---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org


Re: Google Analytics at ASF

Posted by Richard Eckart de Castilho <re...@apache.org>.
On 23.08.2015, at 17:57, Bertrand Delacretaz <bd...@apache.org> wrote:

> On Fri, Aug 21, 2015 at 8:19 PM, Richard Eckart de Castilho
> <re...@apache.org> wrote:
>> ...Could anybody please briefly summarize or point out if there
>> are any specific things that a PMC that wants to use Google
>> Analytics has to observe - or can the PMC "just do it"?...
> 
> I'm not sure if we have foundation-wide guidelines about this but IMO
> http://jackrabbit.apache.org/jcr/privacy-policy.html is a good way of
> being clear with our website visitors.

My understanding is that the Google themselves require a privacy statement
on those pages that make use of GA - so that is mandatory. But the thread [1]
mentions other points:

- Is it required to make the collected statistics public?

  http://markmail.org/message/7oiekanas7jdzhc4

I understand that Jackrabbit set up a monthly publishing of the stats to the
dev list but is it mandatory to do that?


- Google's terms of services regarding the use of brand names / trademarks

http://markmail.org/message/36fczs4nrxfxldod

Nobody seems to have answered to this mail from Marshall. 


Independent from said thread, it appears that no obligation is felt to comply
with an European directive to allow users to opt-out (or rather opt-in) to cookie usage:

https://en.wikipedia.org/wiki/Directive_on_Privacy_and_Electronic_Communications

At least, I cannot remember having seen and kind of popup on Apache sites so far
asking me to accept the privacy guidelines and/or offering me to opt out of cookie
use (I regularly see such things on other sites).


Is there any stance towards anonymizing the data sent to Google? 

    ga('set', 'anonymizeIp', true);


My understanding from various sources in German is that German law requires that
the IP is anonymized. Here is one in English.

http://www.iubenda.com/blog/2013/11/13/ip-anonymization-google-analytics-privacy/

So being a German citizen, would I have to obey that when setting up a website for
an Apache project (I mean with the ASF being a Delaware corporation...)?


Cheers,

-- Richard


[1] http://markmail.org/message/36fczs4nrxfxldod
---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org


Re: Google Analytics at ASF

Posted by Luciano Resende <lu...@gmail.com>.
On Mon, Aug 24, 2015 at 5:21 AM, Richard Eckart de Castilho <re...@apache.org>
wrote:

> On 24.08.2015, at 14:15, Jim Jagielski <ji...@jaguNET.com> wrote:
>
> >> On Aug 23, 2015, at 11:57 AM, Bertrand Delacretaz <
> bdelacretaz@apache.org> wrote:
> >>
> >> On Fri, Aug 21, 2015 at 8:19 PM, Richard Eckart de Castilho
> >> <re...@apache.org> wrote:
> >>> ...Could anybody please briefly summarize or point out if there
> >>> are any specific things that a PMC that wants to use Google
> >>> Analytics has to observe - or can the PMC "just do it"?...
> >>
> >> I'm not sure if we have foundation-wide guidelines about this but IMO
> >> http://jackrabbit.apache.org/jcr/privacy-policy.html is a good way of
> >> being clear with our website visitors.
> >>
> >
> > The same exists at the foundation level at:
> >
> >       http://www.apache.org/foundation/policies/privacy.html
>
> We're running in circles...
>
> On 21.08.2015, at 20:19, Richard Eckart de Castilho <re...@apache.org>
> wrote:
>
> > On 30.06.2015, at 13:03, Jim Jagielski <ji...@jaguNET.com> wrote:
> >
> >> Please note:
> >>
> >>      http://www.apache.org/foundation/policies/privacy.html
>
> So I take it that there no guidelines with regards to the use of GA except
> the privacy statement and that if a PMC displays such a statement,
> everything
> is fine.
>
> I'll wait at least another few days before further action just in case...
>
> Cheers,
>
> -- Richard
> ---------------------------------------------------------------------
>

The guideline is to provide the privacy statement, and I would add to that
that you should be able to share the information with any interested
parties from the PMC.

-- 
Luciano Resende
http://people.apache.org/~lresende
http://twitter.com/lresende1975
http://lresende.blogspot.com/

Re: Google Analytics at ASF

Posted by Richard Eckart de Castilho <re...@apache.org>.
On 24.08.2015, at 14:15, Jim Jagielski <ji...@jaguNET.com> wrote:

>> On Aug 23, 2015, at 11:57 AM, Bertrand Delacretaz <bd...@apache.org> wrote:
>> 
>> On Fri, Aug 21, 2015 at 8:19 PM, Richard Eckart de Castilho
>> <re...@apache.org> wrote:
>>> ...Could anybody please briefly summarize or point out if there
>>> are any specific things that a PMC that wants to use Google
>>> Analytics has to observe - or can the PMC "just do it"?...
>> 
>> I'm not sure if we have foundation-wide guidelines about this but IMO
>> http://jackrabbit.apache.org/jcr/privacy-policy.html is a good way of
>> being clear with our website visitors.
>> 
> 
> The same exists at the foundation level at:
> 
> 	http://www.apache.org/foundation/policies/privacy.html

We're running in circles...

On 21.08.2015, at 20:19, Richard Eckart de Castilho <re...@apache.org> wrote:

> On 30.06.2015, at 13:03, Jim Jagielski <ji...@jaguNET.com> wrote:
> 
>> Please note:
>> 
>> 	http://www.apache.org/foundation/policies/privacy.html

So I take it that there no guidelines with regards to the use of GA except
the privacy statement and that if a PMC displays such a statement, everything
is fine.

I'll wait at least another few days before further action just in case...

Cheers,

-- Richard
---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org


Re: Google Analytics at ASF

Posted by Jim Jagielski <ji...@jaguNET.com>.
> On Aug 23, 2015, at 11:57 AM, Bertrand Delacretaz <bd...@apache.org> wrote:
> 
> On Fri, Aug 21, 2015 at 8:19 PM, Richard Eckart de Castilho
> <re...@apache.org> wrote:
>> ...Could anybody please briefly summarize or point out if there
>> are any specific things that a PMC that wants to use Google
>> Analytics has to observe - or can the PMC "just do it"?...
> 
> I'm not sure if we have foundation-wide guidelines about this but IMO
> http://jackrabbit.apache.org/jcr/privacy-policy.html is a good way of
> being clear with our website visitors.
> 

The same exists at the foundation level at:

	http://www.apache.org/foundation/policies/privacy.html




---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org


Re: Google Analytics at ASF

Posted by Bertrand Delacretaz <bd...@apache.org>.
On Fri, Aug 21, 2015 at 8:19 PM, Richard Eckart de Castilho
<re...@apache.org> wrote:
> ...Could anybody please briefly summarize or point out if there
> are any specific things that a PMC that wants to use Google
> Analytics has to observe - or can the PMC "just do it"?...

I'm not sure if we have foundation-wide guidelines about this but IMO
http://jackrabbit.apache.org/jcr/privacy-policy.html is a good way of
being clear with our website visitors.

-Bertrand

---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org


Google Analytics at ASF

Posted by Richard Eckart de Castilho <re...@apache.org>.
Hi all,

looks like the main ASF page is now using Google Analytics:

On 30.06.2015, at 13:03, Jim Jagielski <ji...@jaguNET.com> wrote:

> Please note:
> 
> 	http://www.apache.org/foundation/policies/privacy.html

Apparently there was a long thread back in 2008 discussing 
if and under which conditions GA can be used. But that may
be the past.

http://markmail.org/thread/q6wzbv7jx2zsvi64

Could anybody please briefly summarize or point out if there
are any specific things that a PMC that wants to use Google
Analytics has to observe - or can the PMC "just do it"?

Cheers,

-- Richard



---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org