| <!doctype html> |
| <html lang="en"> |
| <head> |
| <meta charset="utf-8"> |
| <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"> |
| |
| |
| <link rel="alternate" type="application/rss+xml" title="Apache Software Foundation - Data Privacy RSS" href="/rss.xml" /> |
| <link rel="stylesheet" href="/css/main.css"> |
| <title></title> |
| </head> |
| <body> |
| <header> |
| <div class="header-logo"><a href="/"><img src="/images/asf-logo.png"/></a> |
| <div class="header-text">ASF Data Privacy</div> |
| </div> |
| |
| <nav> |
| <label for="show-menu" class="show-menu">Show Menu</label> |
| <input type="checkbox" id="show-menu" role="button"> |
| <ul id="menu"> |
| <li><a href="/">Home</a></li> |
| <li><a href="/policies">Policies</a></li> |
| <li> |
| <a href="#">Privacy FAQ ▼</a> |
| <ul class="hidden"> |
| <li><a href="/faq/community.html">Community Privacy FAQ</a></li> |
| <li><a href="/faq/committers.html">Committers' Privacy FAQ</a></li> |
| <li><a href="/faq/infrastructure.html">Infrastructure Privacy FAQ</a></li> |
| <li><a href="/faq/software-users.html">Software Users FAQ</a></li> |
| </ul> |
| </li> |
| <li> |
| <a href="#">Guides</a> |
| <ul class="hidden"> |
| <li><a href="/guides/event-photography.html">Event Photos</a></li> |
| </ul> |
| <li><a href="/matomo">Matomo</a></li> |
| <li><a href="http://www.apache.org/foundation/">About the ASF</a></li> |
| </ul> |
| </nav> |
| </header> |
| |
| <main> |
| <h1 id="infrastructure-faq">Infrastructure FAQ</h1> |
| |
| <h2 id="when-should-i-notify-privacy">When should I notify privacy@?</h2> |
| |
| <p>All changes which may require an update in our terms or other privacy related |
| documentation need to be reported to privacy@apache.org. In best case, with some |
| time between announcement and change.</p> |
| |
| <p>Examples for changes which may require privacy policy updates:</p> |
| |
| <ul> |
| <li>adding a new service, like webhost server company</li> |
| <li>removing a service, which may not be any longer in the terms</li> |
| <li>changes to logfiles, in example when IP addresses are logged (which werent’t before)</li> |
| <li>moving data with PI to other services like a managed service</li> |
| <li>a new domain was registered, transferred or removed</li> |
| </ul> |
| |
| <p>Other notifications may be sent when:</p> |
| |
| <ul> |
| <li>another office or committee requests user data from infra, which they may not access (like running analytics on diversification with a 3rd party)</li> |
| <li>a security issue happened and user addresses and password have been stolen (data leaks in general)</li> |
| </ul> |
| |
| <p>No notification is required when:</p> |
| |
| <ul> |
| <li>new VMs are started or reorganized with companies which we already have an DPA for</li> |
| <li>data is migrated from an outdated database version to a new version</li> |
| <li>a CDN is setup with a company which we already have a DPA for and which is already mentioned in the terms</li> |
| <li>a new project subdomain was created or removed</li> |
| <li>a new user account was created or removed</li> |
| </ul> |
| |
| </main> |
| <footer> |
| © 2021-2023 The Apache Software Foundation under the terms of the Apache License 2.0. |
| |
| Apache, the Apache feather logo, and the Apache logo are either registered trademarks or |
| trademarks of The Apache Software Foundation in the United States and other countries. |
| </footer> |
| |
| </body> |
| </html> |
