Update privacy policy with a lot more details

In particular, details about what we store, how long we store it, and
why. It's always nice to have, and extra important in light of new
regulations coming up.

diff --git a/template/pages/about/privacypolicy.html b/template/pages/about/privacypolicy.html
index 31dcacb034e6e8471e12c8ac05c6f246df1fc9f1..88154df993d7cfeeb7330d337c1d84f89fd179e6 100644 (file)
--- a/template/pages/about/privacypolicy.html
+++ b/template/pages/about/privacypolicy.html
@@ -4,25 +4,64 @@
 <h1>Privacy policy</h1>
 
 <p>
-When you visit our website, our servers automatically log your IP address and/or host name.
+We store information such as your email address, name and locality only if you decide
+to send us such information by using one of our systems. In particular, we collect
+and store the following data, based on which parts of our site you use:
 </p>
 
+<h2>Membership</h2>
 <p>
-We store information such as your email address, name and locality only if you decide
-to send us such information by completing a survey, or registering as a user on one
-of our sites. We collect this information to help us improve the content of our
-sites, customize the layout of our web pages and to contact people for technical
-and support purposes. We will not share your email address with other organizations
-unless required by law.
+  When signing up as a member, we will store your email address, full name and country.
+  If you choose to have your membership listed publicly, this information is listed
+  on our website. If not, the data is never shared with anybody, except if required
+  by law. We store this information permanently so that we can communicate with members
+  regarding association events such as elections, and send reminders about membership
+  expiry etc.
+</p>
+<p>
+  If you have voted in our elections, we store your vote so that you can review it
+  in the future, and for auditing purposes.
+</p>
+
+<h2>Event registrations</h2>
+<p>
+  If you have registered for an event (including conferences) managed
+  by PostgreSQL Europe, we will collect and store the personal data
+  required to perform this. This includes your name, email, address,
+  country, company association and may include things like selected
+  tshirt size and dietary requirements.
+</p>
+<p>
+  Unless you explicitly requested to, this data is not shared with any other organizations
+  except as required to perform the event (for example, we must give the catering
+  venue information about dietary requirements) or as required by law.
+</p>
+<p>
+  Once an event has completed, sensitive personal data such as dietary requirements,
+  phone numbers and addresses are purged. We retain your email address and name so that
+  we are able to communicate with you about future events. At any time you can opt out
+  of such communications using our <a href="/events/optout/">opt-out</a> interface.
+</p>
+
+<h2>Invoices and payments</h2>
+<p>
+  If you have performed a payment of one of our invoices, we will keep a copy of this
+  invoice as well as the related accounting records for accounting and compliance reasons.
+  Your name and address as entered on the invoice will be part of this, as well as your
+  email address. We will also permanently store a record of the payment transaction in
+  the form of a payment reference, but we never store (short or long term) a
+  creditcard number, bank account number, or other payment related personal data.
+</p>
+<p>
+  This data is shared with our accountants as required for them to review our finances,
+  and to process our taxes.
 </p>
 
+<h2>Logs</h2>
 <p>
-We may collect demographic and interest category information from people via surveys,
-volunteered information, suggestions from members, and other means. Our members may
-voluntarily provide information, including that regarding personal, interests,
-geography, and demographics. The purpose of this data collection is to ensure
-we continue to understand the needs and wants of the PostgreSQL community, and
-therefore can provide the most relevant information, guides, and content.
+  Our systems will store logs for each web request that happens, in order to facilitate
+  tracking down issues. These logs are automatically deleted after a maximum of 12 weeks.
+  Personal data other than IP addresses is never stored in these logs.
 </p>
 
 {%endblock%}