diff --git a/policies/index.md b/policies/index.md
index 4d93e14..6d82481 100644
--- a/policies/index.md
+++ b/policies/index.md
@@ -25,8 +25,12 @@
 
 ## Privacy Policies 
 
- - [Privacy Policy for public services](/policies/privacy-policy-public.html)
- - Privacy Policy for committers
+ - [Privacy Policy for public services](/policies/privacy-policy-public.html)  
+   *(no ASF account, generally using ASF services)*
+ - [Privacy Policy for contributors](/policies/privacy-policy-contributors.html)  
+   *(no ASF account, but signed an ICLA and/or send contributions to the ASF)*
+ - [Privacy Policy for committers](/policies/privacy-policy-committer.html)  
+   *(persons with ASF account and direct committer privileges)*
 
 ## Internal Policies
 
diff --git a/policies/privacy-policy-contributors.md b/policies/privacy-policy-contributors.md
new file mode 100644
index 0000000..fb82ce3
--- /dev/null
+++ b/policies/privacy-policy-contributors.md
@@ -0,0 +1,43 @@
+---
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+layout: default
+---
+
+**---> DRAFT VERSION**
+
+
+This Privacy Policy clarifies the nature, scope and purpose of the processing of personal data (hereinafter referred to as "Data") within our online offering and the related websites, features and content, as well as external online presence, e.g. our social media profiles on. (collectively referred to as "online offer"). With regard to the terminology used, e.g. "Processing" or "Responsible", we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
+
+## 1.  Name and contact details of the controller and the company data protection officer
+
+This privacy policy applies to data processing by:
+
+Responsible:    
+
+The Apache Software Foundation  
+V. P. Data Privacy  
+1000 N West Street, Suite 1200  
+Wilmington, DE  19801  
+U.S.A.  
+
+E-Mail: vp-privacy@apache.org
+
+##  2. Collection and storage of personal data and the nature and purpose of their use
+
+TODO