Re: Question to all candidates: GDPR compliance review

[Ansgar <ansgar@43-1.org>]

Hi Adrian,

On Fri, 2022-04-01 at 23:48 +0300, Adrian Bunk wrote:
> Will this handwritten note be available through
> contributors.debian.org?
> 
> If the personal information in the handwritten note did not come 
> directly from the person, who at Debian is responsible to ensure that
> the person gets informed automatically about the existence of the
> note when it is written?
> 
> Same questions, with "local file" instead of "handwritten note".
> 
> Same questions, with "stored on a Debian machine".

I am fairly confident you store personal data about me. Could you
please provide some information about it?

Do you publish a privacy policy?
What data do you store? (Please don't send a copy to the list; private
mail is okay.)
On what legal basis is the data processed?
Where is the data physically stored?
Who besides you has access to the data?
For what purposes might the data be used?
What retention period is defined for the data?
Why was I not informed that data about me is being stored?

Ansgar