GDPR, privacy notices - any action required for individual projects?

[Thomas Friedrichsmeier]

Hi!

A co-developer recently pointed out that EU General Data Protection
Regulation (GDPR) is going to come into effect, soon (May 25th). To my
_very_ limited understanding, this will require privacy notices on all
websites. I see some kde.org sites already have one (e.g.
https://community.kde.org/KDE_Community_Wiki:Privacy_policy), but I
wonder about sites "belonging" to individual projects (but managed
by our tireless sysadmins) such as https://kate.kde.org and
https://rkward.kde.org.

More specifically, am I, as a project maintainer, responsible for
adding a similar notice to https://rkward.kde.org, and if so, is there
a recommended common practice, such as copying or linking to some
KDE.org-global policy page?

Regards
Thomas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://mail.kde.org/pipermail/kde-core-devel/attachments/20180510/7ebdc18a/attachment.sig>