DSGVO and adjusted bootstrap URL: https://datastore.swift-project.net

This commit is contained in:
Klaus Basan
2018-04-11 02:17:31 +02:00
committed by Roland Winklmeier
parent 6061a61d50
commit 4423f8503f
11 changed files with 253 additions and 64 deletions

View File

@@ -12,7 +12,7 @@
<ul>
<li>swift <a href="./software.html">software license</a>
<li>swift website <a href="./impressum.html">impressum</a>
<li>swift <a href="./cla.html">contributor license agreement</a>
<li>swift <a href="./copyright.html">contributor license agreement</a>
<li>swift <a href="./dataprotection.html">data protection policy</a>
<li>swift <a href="./privacy.html">privacy and cookie policy</a>
<li>We use Google Analytics, see the <a href="./privacy.html">privacy and cookie policy</a> for details.
@@ -20,7 +20,7 @@
</ul>
<h1>Data copyright (swift data)</h1>
<ul>
<li>swift <a href="./swiftdata.html">data copyright</a>
<li>swift <a href="./copyright.html">data copyright</a>
</ul>
<h1>Other swift resources</h1>
<ul>

View File

@@ -1,16 +0,0 @@
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<link rel="stylesheet" type="text/css" href="style.css">
<title>swift CLA</title>
</head>
<body>
<h1>swift CLA</h1>
<ul>
<li>Read on <a href="https://en.wikipedia.org/wiki/Contributor_License_Agreement" target="_blank">Wikipedia</a> what a CLA is and why it is needed.
<li>You need to register with our <a href="https://dev.swift-project.org/" target="_blank">development site</a>
<li>Then you need to sign the CLA <a href="https://dev.swift-project.org/L1" target="_blank">here</a>
</ul>
</body>
</html>

View File

@@ -0,0 +1,29 @@
<!DOCTYPE html>
<html>
<head>
<meta name="generator"
content="HTML Tidy for HTML5 (experimental) for Windows https://github.com/w3c/tidy-html5/tree/c63cc39" />
<meta charset="UTF-8" />
<link rel="stylesheet" type="text/css" href="style.css" />
<title>swift CLA/copyright</title>
</head>
<body>
<h1>swift CLA</h1>
<ul>
<li>Read on
<a href="https://en.wikipedia.org/wiki/Contributor_License_Agreement" target="_blank">Wikipedia</a> what a CLA is and why it
is needed.</li>
<li>You need to register with our
<a href="https://dev.swift-project.org/" target="_blank">development site</a></li>
<li>Then you need to sign the CLA
<a href="https://dev.swift-project.org/L1" target="_blank">here</a></li>
</ul>
<h1>Data copyright</h1>
<ul>
<li>All data stored in the database are legal property of swift.</li>
<li>No unauthorized usage or copying allowed.</li>
<li>Usage is only allowed within swift software components.</li>
<li>When you (&quot;the user&quot;) enter/upload data to this DB, swift can use them now and forever.</li>
</ul>
</body>
</html>

View File

@@ -3,9 +3,118 @@
<head>
<meta charset="UTF-8">
<link rel="stylesheet" type="text/css" href="style.css">
<title>Datenspeicherung</title>
<title>Stored data/Datenspeicherung</title>
</head>
<body>
<h1>Stored data</h1>
<table>
<tr>
<th colspan="2">Which private data do we store at "swift" and why?</th>
</tr>
<tr>
<th>What do we save?</th>
<th>Why?</th>
</tr>
<tr>
<td>
User accounts: The user accounts contain the real name (z.B. Joe Doe),
email, the Id number of the associated network (e.g. VATSIM), country of the user,
user name (user account).
With each login we log date and time, origin of login (e.g. via browser, the swift client),
furthermore creation time of the user account.
Hint: User account in swift are normally subject of self administation, so the user can
change the profile.
</td>
<td>
The Email address is required for notifcation such as forgotten password.
The unique id is used for SSO (single sign on) with third party authentication systems (e.g. VATSIM)
</td>
</tr>
<tr>
<td>
Change history: We store a change history who and when change something.
Overall picture: We deal with flight simulation data,
no high security or critical data.
</td>
<td>
We store the change history in case we need to crosscheck and verify information.
</td>
</tr>
<tr>
<th colspan="2">What data are stored in the developer area of phabricator?</th>
</tr>
<tr>
<th>What do we save?</th>
<th>Why?</th>
</tr>
<tr>
<td>
User accounts consists of real name (e.g. Joe Doe), email, the id number of the associated
network (e.g. VATSIM), user name (user account). Passwords are not saved in clear text
and admistered by the user himself.
Hint: Users can change their profile (see below)
</td>
<td>
Needed for user administration and change history.
</td>
</tr>
<tr>
<td>
Change history: All changes of tasks, bug reports, software artifacts are logged.
(who and when was the changed applied?).
</td>
<td>
In a software project we need to know, who and why a software omponent has been changed.
</td>
</tr>
<tr>
<td>
Version control: We use <a href="https://de.wikipedia.org/wiki/Git">git</a> as version control system.
The commit history shows who has changed which part in swift and when this has happened.
</td>
<td>
Further details can be found in the git doscumentation.
</td>
<tr>
<tr>
<th colspan="2">Where can I see/verify my data?</th>
</tr>
<tr>
<th>Self administration</th>
<th>Why?</th>
</tr>
<tr>
<td>
Your master data (profile) in <a href="https://datastore.swift-project.org">datastore</a> and in <a href="https://dev.swift-project.org/">Phabricator</a>
can be self administered. For VATSIM a simplified Single-Sign-On has been established,
sharring the VATSIM data with swift (the password is NOT transferred).
</td>
<td>
</td>
</tr>
<tr>
<th colspan="2">Recommendations</th>
</tr>
<tr>
<th>email and passwords</th>
<th>Why?</th>
</tr>
<tr>
<td>
If possible use an individual email address for swift only.
Please use safe passwords, but none you use otherwise.
</td>
<td>
In case of any security breach you can lock/dismiss this individual email
and password and no other accounts/systems can be compromissed.
</td>
</tr>
</table>
<h1>Datenspeicherung</h1>
<table>
<tr>
@@ -109,7 +218,7 @@
</td>
<td>
Im Fall eines Datenlecks bei swift können sie Ihre email löschen/sperren und
aus das Passwort kann nicht bei einem anderen Ihrer Konten verwendet werden.
das Passwort kann nicht bei einem anderen Ihrer Konten verwendet werden.
</td>
</tr>
</table>

View File

@@ -22,6 +22,26 @@
<li>
swift empfängt Benutzerdaten von VATSIM zur Anmeldung ("Single Sign On").
Diese Anmeldedaten werden aus der VATSIM Infrastruktur übermittelt.
VATSIM ist ein weltweites Netzwerk, d.h. EU/außerhalb EU.
</li>
</ul>
<h1>Data exchange</h1>
<ul>
<li>
swift shares data among its own ecosystem, i.e. the various applications like
<a href="https://dev.swift-project.org/">dev.swift-project.org</a> and
<a href="https://datastore.swift-project.org/">datastore.swift-project.org</a> .
</li>
<li>
swift data for flight simulation ("mappings, "aircraft data") are provided worldwide.
</li>
<li>
swift software can be downloaded worldwide.
</li>
<li>
swift receives and uses user data/credentials for authentication ("Single Sign On").
Those data are transferred from the VATSIM network, which operates worldwide
(i.e. EU/non EU).
</li>
</ul>
</body>

View File

@@ -9,15 +9,12 @@
<h1>Data protection</h1>
The following data protection information can be found here:
<ol>
<li>data protection info / Datenschutzinfo</li>
<li><a href="impressum.html">contact data</a> / <a href="impressum.html">Kontaktdaten</a></li>
<li>storage duration / Speicherdauer</li>
<li>user rights / Betroffenenrechte</li>
<li>reasons for data storage / <a href="data.de.html">Zwecke der Datenerfassung</a></li>
<li>3rd party data receivers / <a href="datamisc.de.html">Dritte Datenempfänger</a></li>
<li>data receivers outside the EU / <a href="datamisc.de.html">Drittempfänger außerhalb EU</a></li>
<li>export of stored data / Bereitstellung der Daten</li>
<li>Bestehen automatisierte Entscheidungsfindung
<li><a href="userrights.html">user rights</a> / <a href="userrights.html">Betroffenenrechte</a></li>
<li><a href="data.html">reasons for data storage</a> / <a href="data.html">Zwecke der Datenerfassung</a></li>
<li><a href="datamisc.html">3rd party data receivers</a> / <a href="datamisc.html">Dritte Datenempfänger</a></li>
<li><a href="datamisc.html">data receivers outside the EU</a> / <a href="datamisc.html">Drittempfänger außerhalb EU</a></li>
<li><a href="userrights.html">export of stored data</a> / <a href="userrights.html">Bereitstellung der Daten</a></li>
</ol>
</body>
</html>

View File

@@ -99,5 +99,32 @@
<br /><br />
Die Nutzungsbedingungen von Google Maps finden sie unter "Nutzungsbedingungen von Google Maps".
</p>
<p>
<strong>Kommentare und Beiträge</strong>
<br /><br />
Wenn Nutzer Kommentare im Blog oder sonstige Beiträge hinterlassen, werden ihre IP-Adressen gespeichert.
Das erfolgt zur Sicherheit des Anbieters, falls jemand in Kommentaren und Beiträgen widerrechtliche Inhalte schreibt (Beleidigungen, verbotene politische Propaganda, etc.).
In diesem Fall kann der Anbieter selbst für den Kommentar oder Beitrag belangt werden und ist daher an der Identität des Verfassers interessiert.
</p>
<p>
<strong>Zugriffsdaten/ Server-Logfiles</strong>
<br /><br />
Der Anbieter (beziehungsweise sein Webspace-Provider) erhebt Daten über jeden Zugriff auf das Angebot
(so genannte Serverlogfiles). Zu den Zugriffsdaten gehören:
Name der abgerufenen Webseite, Datei, Datum und Uhrzeit des Abrufs, übertragene Datenmenge,
Meldung über erfolgreichen Abruf, Browsertyp nebst Version, das Betriebssystem des Nutzers,
Referrer URL (die zuvor besuchte Seite), IP-Adresse und der anfragende Provider.
Der Anbieter verwendet die Protokolldaten nur für statistische Auswertungen zum Zweck des Betriebs,
der Sicherheit und der Optimierung des Angebotes. Der Anbieterbehält sich jedoch vor,
die Protokolldaten nachträglich zu überprüfen, wenn aufgrund konkreter Anhaltspunkte der berechtigte Verdacht
einer rechtswidrigen Nutzung besteht.
</p>
<p>
<strong>Kommentarabonnements</strong>
<br /><br />
Die Nachfolgekommentare können durch Nutzer abonniert werden.
Die Nutzer erhalten eine Bestätigungsemail, um zu überprüfen, ob sie der Inhaber der eingegebenen Emailadresse sind. Nutzer können laufende Kommentarabonnements jederzeit abbestellen.
Die Bestätigungsemail wird Hinweise dazu enthalten.
</p>
</body>
</html>

View File

@@ -1,20 +1,29 @@
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<link rel="stylesheet" type="text/css" href="style.css">
<meta name="generator"
content="HTML Tidy for HTML5 (experimental) for Windows https://github.com/w3c/tidy-html5/tree/c63cc39" />
<meta charset="UTF-8" />
<link rel="stylesheet" type="text/css" href="style.css" />
<title>swift privacy and cookie policy</title>
</head>
<body>
<h1>Privacy and Cookies</h1>
<h2>Cookies</h2>
<p>Cookies are small text files that are stored on your computer when you visit some websites. We use cookies created by ourselves and by third parties on <i>swift</i> websites and in <i>swift</i> applications to help identify your computer so we can tailor your user experience and remember your preferences. You may disable cookies in you browser settings, but some functions may not work correctly.</p>
<p>Cookies are small text files that are stored on your computer when you visit some websites. We use cookies created by
ourselves and by third parties on
<i>swift</i> websites and in
<i>swift</i> applications to help identify your computer so we can tailor your user experience and remember your preferences.
You may disable cookies in you browser settings, but some functions may not work correctly.</p>
<h2>Privacy Statement</h2>
<p>For the purposes of enabling online flight simulation, virtual aviation, and related services, and improving these services, we may collect information about your use of <i>swift</i>. Except where expressly noted, we will not share any personally identifying information with third parties.</p>
<p>For the purposes of enabling online flight simulation, virtual aviation, and related services, and improving these services,
we may collect information about your use of
<i>swift</i>. Except where expressly noted, we will not share any personally identifying information
with third parties. See the data <a href="datamisc.html">exchange page</a> for details.</p>
<h2>Google Analytics</h2>
<p>We use Google Analytics to track usage statistics for our websites. For this to work, we must share with Google some cookies that we store on your computer. These cookies will not give Google any personally identifying information or information that could be correlated with any other data held by Google. The information will be subject to Googles <a href="https://www.google.com/policies/privacy/">privacy policy</a>.</p>
<p>We use Google Analytics to track usage statistics for our websites. For this to work, we must share with Google some cookies
that we store on your computer. These cookies will not give Google any personally identifying information or information that
could be correlated with any other data held by Google. The information will be subject to Googles
<a href="https://www.google.com/policies/privacy/">privacy policy</a>.</p>
</body>
</html>

View File

@@ -1,17 +0,0 @@
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<link rel="stylesheet" type="text/css" href="style.css">
<title>swift data copyright</title>
</head>
<body>
<h1>Data copyright</h1>
<ul>
<li>All data stored in the database are legal property of swift.
<li>No unauthorized usage or copying allowed.
<li>Usage is only allowed within swift software components.
<li>When you ("the user") enter/upload data to this DB, swift can use them now and forever.
</ul>
</body>
</html>

View File

@@ -0,0 +1,27 @@
<!DOCTYPE html>
<html>
<head>
<meta name="generator"
content="HTML Tidy for HTML5 (experimental) for Windows https://github.com/w3c/tidy-html5/tree/c63cc39" />
<meta charset="UTF-8" />
<link rel="stylesheet" type="text/css" href="style.css" />
<title>User rights/Benutzerrechte</title>
</head>
<body>
<h1>Benutzerrechte</h1>
<h2>Löschung der Daten</h2>
<p>In den meisten swift Anwendungen können Sie Ihr Benuzerprodil selbst editieren. Dort können Sie Ihre Daten ggf. auch
selbst löschen. Falls dies nicht möglich ist, kontakieren sie uns bezüglich der Löschung Ihrer Daten.
Bezüglich der Daten in den Flugnetzwerken wenden Sie sich direkt an diese Netzwerke.</p>
<h2>Export der Daten</h2>
<p>In den Profilen der Anwendungen können Sie Ihre Daten auch exportieren.</p>
<h1>User rights</h1>
<h2>Data deletion</h2>
<p>Most swift applications allow to edit the user profiles. This allows to edit and delete the user data. In case
this is not possible please contact us in order to have your data deleted.
For any aspects regarding the data of the flight networks please contact them directly.
<h2>Data export</h2>
<p>Use your profiles to export your data if required.</p>
</body>
</html>

View File

@@ -29,7 +29,11 @@
}]
},
"sharedUrls": {
"containerbase": [{
"containerbase": [
{
"url": "https://datastore.swift-project.net/shared"
},
{
"url": "https://datastore.swift-project.org/shared"
},
{