71
edits
Difference between revisions of "GDPR"
Jump to navigation
Jump to search
→Q1.1d List legal grounds for the processing: add notes form meeting 6&7
(→Lawyer Questions: Updating with answers (see logs of meeting 6)) |
(→Q1.1d List legal grounds for the processing: add notes form meeting 6&7) |
||
| Line 100: | Line 100: | ||
==== Q1.1d List legal grounds for the processing ==== | ==== Q1.1d List legal grounds for the processing ==== | ||
===== C2S: ===== | ===== C2S: ===== | ||
Art. 6.1b can be used as ground for processing, so the permission is implicitly granted when signing up for the XMPP service. The EULA must then contain information about the information processed. | |||
Art. | |||
MAM and MUC MAM are covered by explicit consent (6.1a) | |||
===== S2S: ===== | ===== S2S: ===== | ||
| Line 117: | Line 112: | ||
** typically just inside of server logs. r49 probably applies | ** typically just inside of server logs. r49 probably applies | ||
* user meta-data: | * user meta-data: | ||
** all transfer requires (implicit) user consent - by joining a MUC or sending a messages to somebody or accepting a subscription | ** all transfer requires (implicit) user consent - by joining a MUC or sending a messages to somebody or accepting a subscription (art. 6.1b), outside the EU by 49.1b | ||
* user content (MAM, MUC MAM) (6. | * user content (MAM, MUC MAM) is legitimate interest of the other party (6.1f) | ||
S2S | Treat all S2S as outside the EU | ||
==== Q1.1e Analyse possible consequences ==== | ==== Q1.1e Analyse possible consequences ==== | ||