Version 0.1, Last Update: June 24, 2019
Your privacy is important to the sosconf. To better protect your privacy and to comply with various laws and regulations, we have provided this policy explaining our information practices and the choices you can make about the way your personal information is collected, used and disclosed. To make this policy easy to find, we have made it available on our homepage and at many of the locations where personally-identifiable information may be requested.
Thesosconf collects personal data when:
This policy applies to the sosconf’s general operations, supporter program, websites and events.
The information you provide to us will include (depending on the circumstances):
In certain circumstances, we will receive information about you from other sources, including third parties. For example, we may receive personal information from any of the following, who may be based inside and/or outside the EU:
We might also receive information about you from other third parties if you have indicated to such third parties that you would like to hear from us.
Special categories of particularly sensitive personal information require higher levels of protection. These so-called “special categories of data” include details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. Depending on the circumstances, we will also collect information about criminal convictions and offenses.
We need to have further justification for collecting, storing and using this type of personal information. We process special categories of personal information in the following circumstances:
For example, we may collect special categories of information:
In limited circumstances, we may request your written consent to allow us to use certain particularly sensitive data. If we do so, we will provide you with full details of the information that we would like and the reason we need it, so that you can carefully consider whether you wish to consent.
The sosconf uses the personal data you provide to:
As outlined above, in certain circumstances we may use your personal information to pursue legitimate interests of our own or those of third parties. Where we refer to our “legitimate interests”, we mean our legitimate business interests in conducting and managing our business and our relationship with you, including the legitimate interests we have specified in the section above. Where we use your information for our legitimate interests, we make sure that we take into account any potential impact that such use may have on you. Our legitimate interests don’t automatically override yours and we won’t use your information if we believe your interests should override ours unless we have other grounds to do so (such as your consent or a legal obligation). If you have any concerns about our processing please refer to details of “Your Rights” below.
Unless you consent, the sosconf will never process or share the personal data you provide to us except as described below.
We receive personal information from third-party services when you donate to us via online payment mechanisms. We do not sell or distribute this information to third parties. The sosconf uses this information to acknowledge your donation and send you occasional solicitations and newsletters. Donors can opt out of all contact or specify only print or e-mail contact by emailing [email protected]. Donor names are posted on our Sponsors and Supporters page as a recognition of their support, as well as listed in our annual report. At the time of the donation, the donor can ask to be anonymous, so that their name will not be publicly recognized.
The sosconf may send you e-mail to authorize accounts you create on our sites, to inform you of important upcoming sosconf events, to send occasional solicitations in connection with our donor programs as described above or in response to your questions. For your protection, the sosconf may contact you in the event that we find an issue that requires your immediate attention. The sosconf processes your personal data in these cases to fulfill and comply with its contractual obligations to you, to provide the services you have requested, and to ensure the security of your account.
The sosconf’s online services automatically capture IP addresses. We use IP addresses to help diagnose problems with our servers, to administer our website, and to help ensure the security of your interaction with our services.
We will keep your information for as long as is necessary to provide you with the services that you have requested from us or for as long as we reasonably require to retain the information for our lawful business purposes, such as for the purposes of exercising our legal rights or where we are permitted to do. We operate a data retention policy and look to find ways to reduce the amount of information we hold about you and the length of time that we need to keep it. For information on the length of time that any particular piece of information may be kept, please contact [email protected].
The Foundation often makes mailing lists, source repositories, Etherpads, wikis, websites, forums and IRC logs available to the public. Please remember that any information that is disclosed in these areas becomes public information. Please think carefully about your desired level of anonymity before you disclose personal information. Although we value individual ideas and encourage free expression, the Foundation reserves the right to take necessary action to preserve the integrity of these areas, such as removing any posting that is vulgar or inappropriate. It is in the Foundation’s legitimate business interests to provide all users with an accurate record of data and content provided in the public forums it maintains and uses; to maintain the integrity of that data and content for historical, scientific, and research purposes; and to provide an environment for the free exchange of ideas relevant and constructive to the development and propagation of free software.
Out of special concern for children’s privacy, the Foundation does not knowingly accept online personal information from children under the age of 13. The Foundation does not knowingly allow children under the age of 13 to become registered members of our sites. The Foundation does not knowingly collect or solicit personal information about children under 13.
In the event that the Foundation ever decides to expand its intended site audience to include children under the age of 13, those specific web pages will, in accordance with the requirements of the Children’s Online Privacy Protection Act (COPPA), be clearly identified and provide an explicit privacy notice addressed to children under 13. In addition, the Foundation will provide an appropriate mechanism to obtain parental approval, allow parents to subsequently make changes to or request removal of their children’s personal information, and provide access to any other information as required by law.
Additionally, EU residents under the age of 16 should not submit their personal data for subscribing to our email solicitations and we will delete any such data if we become aware of it.
This site contains links to other sites. The Foundation does not control the information collection of sites that can be reached through links from sosconf.org, sosconf.com, sosconf.net, hexang.org, or its sub-domains. If you have questions about the data collection procedures of linked sites, please contact those sites directly.
The Foundation is based in the United States of America. We transact business throughout the world and have operations, processes and systems that cross borders.
We may transfer your personal information to countries in the following regions outside of the EEA: North America and Asia. Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.
Where the EU General Data Protection Regulation 2016/679 (“GDPR”) applies to the processing of your personal data, especially when you access the website from a country in the European Economic Area (“EEA”), you have the following rights, subject to some limitations, against the Foundation:
If you would like to exercise any of these rights, you may do so by emailing [email protected] Please understand, however, the rights enumerated above are not absolute in all cases.
Where the GDPR applies, you also have the right to withdraw any consent you have given to uses of your personal data. If you wish to withdraw consent that you have previously provided to the Foundation, you may do so emailing [email protected]. However, the withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
The Foundation will undertake best efforts to provide these rights to people outside of the EEA as well.
The Foundation gives you the ability to access, modify or update your personal data at any time. On sites where you can create accounts, you may log in and make changes to your login information (change your password), your contact information, your general preferences and your personalization settings. If necessary, you may also contact us and describe the changes you want to be made to the personal data you have previously provided by emailing [email protected].
If you wish to remove your personal data from the Foundation, you may contact us at [email protected] and request that we remove this information from the sosconf’s systems. Other locations where you may have used your personal data as an identifier (e.g. list postings in the archives, wiki change history, repository changelogs, and IRC logs) will not be altered.
If you have any questions about any of these practices or the sosconf’s use of your personal information, please feel free to contact us by email [email protected]
The Committee will work with you to resolve any concerns you may have about this policy.