Re: [Savannah-users] Savannah mailing-lists and GDPR

[Tim Landscheidt]

Bob Proulx <address@hidden> wrote:

>> First, let me emphasize that I am not a lawyer and I am not sure if
>> the Savannah organization falls under the GDPR regulations. But as the
>> servers store also data of European citizens, I am relatively sure that
>> this _is_ the case. Other thoughts are welcome. See below for my other
>> comments.

> I am not a lawyer either.  But I don't see how your questions about
> the mailing lists can apply to Savannah.  Mainly because the mailing
> lists are quite separate from Savannah.  The mailing lists are not
> operated on the Savannah servers.  Savannah is really only
> peripherally involved with mailing lists at all.  One can from the
> Savannah web administration panel for your project cause a mailing
> list on the mailing list servers to be created for your project.
> That's it.  And of course the Savannah project itself uses mailing
> lists itself for its own project discussion.  Like this one.

> […]

But Savannah's Git repositories & Co. would be affected by a
similar interpretation.

> […]

> My best advice is to let sleeping dogs lie and do nothing.

+1.  There is a legitimate case to be made for having mail
addresses in Git repositories, mailing list archives, etc.,
and this is certainly not being helped by discussing how to
accomodate John Q. Public's wish to remove his question
about /bin/true that he feels ashamed about now.

*If* the GDPR applies, undoubtedly the FSF is the "data con-
troller" and all inquiries should be directed to them (di-
rected as in "ask them", not "let me discuss this with them
for you").

Tim