[Kde-scm-interest] Meeting minutes

[Ian Monroe]

2009/11/12 Ingo Klöcker <kloecker at kde.org>:
> On Thursday 12 November 2009, Thomas Zander wrote:
>> >  user accounts (gitorous accounts need to have a realname)
>> >  ** get opt-in privacy agreement. TASK: eean. (coordinate with
>> > johann)
>>
>> Everyone that every has had an svn account has his info publicly
>> available (see accounts files), whats different on gitorious that
>> there is a privacy issue?
>
> The problem is not that the info is publicly available. The problem is
> the transfer of the private data to gitorious. German law (and probably
> also the data protection law in other countries) forbids the transfer
> of personal data unless the person has explicitly consented to this. It
> is irrelevant that the data is publicly available in the accounts file.
> In fact, I wonder whether all people listed in the accounts file are
> aware that their name and email address is publicly available. ...
> Okay, http://techbase.kde.org/Contribute/Get_a_SVN_Account explicitly
> states that the account list is public. So (hopefully) no problem with
> this. Nevertheless, that does not give us the legitimation to give this
> data to other entities like gitorious.

The issue isn't us giving gitorious info (people are probably going to
sign themselves up), its gitorious giving info to us.

Ian