Issue 4474 - short version of Privacy Policy at eyeo.com

pages/privacy.html

 title=Privacy Policy

[saroyanm, 2016/12/13 15:09:54]

You converted the file from markdown to HTML I think it makes sense to change
the extension.

[juliandoucette, 2016/12/13 16:41:09]

I did change the extension?

[saroyanm, 2016/12/13 17:07:17]

Yes you did, sorry maybe I mixed some reviews, just ignore my comment.

[juliandoucette, 2016/12/19 14:36:31]

Done.

 
 <header class="page-title">
   <h1>Privacy Policy <small>(eyeo.com)</small></h1>
 </header>
 
 <div class="content-block">
   <h2 id="short-version">
     Privacy Notice <small>(short version)</small>
   </h2>
   <p>
     The following privacy notice shall provide you with a general overview about the collection, processing and use (hereinafter together referred to as "processing") of your personal data. For more information regarding our processing activities, please view our complete <a href="#long-version">privacy policy</a>.
   </p>
   </p>
   <h3 id="short-process-data">
     What kind of data do we process?
   </h3>
   <ol>
     <li>
-      While using the Eyeo.com website:

[saroyanm, 2016/12/13 15:09:54]

This list is almost same as the one below, maybe we can include them, otherwise
we have duplication here.

[j.nink, 2016/12/13 15:18:21]

Please do not change any content. I know that this is double, but this is
required according to the short form template.

[saroyanm, 2016/12/13 15:27:35]

Acknowledged.

[saroyanm, 2016/12/13 15:57:43]

Aligned with Judith and apparently there was misunderstanding and she agreed not
to have duplication in the code.

[j.nink, 2016/12/13 15:59:21]

agreed

[juliandoucette, 2016/12/13 16:41:09]

Will-do.

[juliandoucette, 2016/12/19 14:36:32]

Done.

-      <ul>
-        <li>
-          IP address (stored separately)
-        </li>
-        <li>
-          Date and time of access
-        </li>
-        <li>
-          Browser type / version
-        </li>
-        <li>
-          URL of previously visited webpage
-        </li>
-        <li>
-          Amount of data sent
-        </li>
-      </ul>
+      While using the eyeo.com website:
+      <? include privacy/data-collected ?>
     </li>
     <li>
       When applying for a job:

[saroyanm, 2016/12/13 15:09:54]

Detail: As mentioned above, I think we can also make this consistent ? I assume
the data collection is same on both places and we need not to duplicate them IMO

[j.nink, 2016/12/13 15:18:21]

Same here: Please do not change any content. I know that this is double, but
this is required according to the short form template.

[saroyanm, 2016/12/13 15:27:35]

Acknowledged.

[saroyanm, 2016/12/13 15:57:43]

We will keep code duplicated, because the full version is is more comples

[j.nink, 2016/12/13 15:59:21]

agreed

[juliandoucette, 2016/12/13 16:41:09]

Will-do.

[juliandoucette, 2016/12/19 14:36:32]

Done.

       <ul>
         <li>
           Name
         </li>
         <li>
           Email address
         </li>
         <li>
           CV and all other data voluntarily uploaded / shared by you
         </li>
       </ul>
     </li>
   </ol>
   <h3 id="short-collect-data">
     How do we collect data?
   </h4>
-  <p>
-    Log-files, data entered by user into the job application form and cookies.

[saroyanm, 2016/12/13 15:09:54]

Detail: Why not to make it list same as other comma separated text were done
above.

[j.nink, 2016/12/13 15:18:21]

both is fine for me. I just had the comma list, to have a real short form. But I
don't mind

[juliandoucette, 2016/12/13 16:41:09]

I didn't know that this was a two item list. I thought it was a sentence.

Will-do.

[juliandoucette, 2016/12/19 14:36:32]

Done.

-  </p>
+  <ul>
+    <li>Cookies</li>
+    <li>Log-files</li>
+    <li>Data entered by user into the job application form</li>
+  </ul>
   <h3 id="short-use-data">
     How do we use your data?
   </h3>
   <ul>
     <li>
       To improve our website and to ensure website security
     </li>
     <li>
       Evaluating your application
     </li>
@@ skipping 22 matching lines @@
     Questions?
   </h3>
   <p>
     Contact our <a href="mailto:privacy@eyeo.com">data protection officer</a>.
   </p>
   <hr>
   <h2 id="long-version">
     Privacy Policy <small>(long version)</small>
   </h2>
   <p>
-    Your protection and data confidentiality is of utmost importance to us ("Eyeo" "we" "our"). We take the protection of your personal data very serious and collect as less data as possible. Nevertheless, some personal data are necessary to provide our website and/or our application tools for candidates. This privacy policy shall inform you about the personal data we collect and how exactly that data is used. We gather and use personal data firmly within the provisions of the data protection laws of Germany. In the following text we will inform you about the specific data, the scope and purpose of the collection and use of personal data by us when using Eyeo.

[saroyanm, 2016/12/13 15:11:46]

Another one: AFAIK we decided to use lowercase eyeo.

[j.nink, 2016/12/13 15:18:21]

true, I can unfortunately not change it in the code review

[juliandoucette, 2016/12/13 16:41:09]

Will-do.

[juliandoucette, 2016/12/19 14:36:32]

Done.

+    Your protection and data confidentiality is of utmost importance to us ("eyeo" "we" "our"). We take the protection of your personal data very serious and collect as less data as possible. Nevertheless, some personal data are necessary to provide our website and/or our application tools for candidates. This privacy policy shall inform you about the personal data we collect and how exactly that data is used. We gather and use personal data firmly within the provisions of the data protection laws of Germany. In the following text we will inform you about the specific data, the scope and purpose of the collection and use of personal data by us when using eyeo.
   </p>
   <h3 id="processing-data">
     Who is responsible for the Data processing?
   </h3>
   <p>
-    The legal person responsible for the collection, processing and/or use of personal data in connection with Eyeo ("Controller") is:
+    The legal person responsible for the collection, processing and/or use of personal data in connection with eyeo ("Controller") is:
   </p>
-  <address>

[saroyanm, 2016/12/13 15:27:35]

@Judith: What about address block ? I assume at least we can not duplicate this.

[j.nink, 2016/12/13 15:29:59]

Why not? This is a different document. Long version as well as short version
require those information. If delete such information from one document it is
not in compliance any more

[saroyanm, 2016/12/13 15:57:43]

@Judith also agreed not to have duplication in the code for address.

[j.nink, 2016/12/13 15:59:21]

agreed

[juliandoucette, 2016/12/13 16:41:09]

Will-do.

[juliandoucette, 2016/12/19 14:36:31]

Done.

-    Eyeo GmbH<br>
-    Lichtstraße 25<br>
-    50825 Cologne<br>
-    Germany
-  </address>
+  <? include address ?>
   <p>
     If you have any queries relating your personal data, please do not hesitate to contact us: <a href="mailto:privacy@eyeo.com">privacy@eyeo.com</a>
   </p>
   <h3 id="what-is-personal-data">
     What are Personal Data?
   </h3>
   <p>
     The purpose of data protection is to protect personal data. Personal data means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This information includes, for example, details such as name, postal address, email address or telephone number but also nicknames, certificates and information about your interests.
   </p>
   <h3 id="collecting-data">
     What kind of Data do we collect and process and how?
   </h3>
   <h4 id="website-longs">
     Website logs
   </h4>
   <p>
-    While using Eyeo.com website, we are automatically recording website logs and thereby collecting the following data for technical and for security reasons:
+    While using eyeo.com website, we are automatically recording website logs and thereby collecting the following data for technical and for security reasons:
   </p>
-  <ul>
-    <li>
-      IP address
-    </li>
-    <li>
-      Date and time of access
-    </li>
-    <li>
-      Browser type / version
-    </li>
-    <li>
-      URL of previously visited Web page
-    </li>
-    <li>
-      Amount of data sent
-    </li>
-  </ul>
+  <? include privacy/data-collected ?>
   <p>
     This data is stored purely for technical reasons and cannot be linked to any individual person. We are not combining the website log data with any other information about you. Such website logs are retained for a period of 30 days after which only the aggregated usage statistics, which cannot be connected to a single user remain. Everything else will be deleted.
   </p>
   <h4 id="app-data">
     Application data
   </h4>
   <p>
-    If you are applying online for a job at Eyeo you need to fulfil our online application form. In order to evaluate your application properly we need ­ at least ­ your name, email address and a CV. On a voluntary basis you may further add a telephone number, a cover letter, additional documents, as but not limited to certificates, a website and additional information about you.
+    If you are applying online for a job at eyeo you need to fulfil our online application form. In order to evaluate your application properly we need ­ at least ­ your name, email address and a CV. On a voluntary basis you may further add a telephone number, a cover letter, additional documents, as but not limited to certificates, a website and additional information about you.
   </p>
   <p>
-    We are collecting and processing those data for the sole purpose of managing Eyeo’s recruitment related activities as well as for organizational planning purposes. Consequently, Eyeo may use your personal data in relation to the evaluation and selection of applicants including for example setting up and conducting interviews and tests, evaluating and assessing the results thereto and as is otherwise needed in the recruitment processes including the final recruitment.
+    We are collecting and processing those data for the sole purpose of managing eyeo’s recruitment related activities as well as for organizational planning purposes. Consequently, eyeo may use your personal data in relation to the evaluation and selection of applicants including for example setting up and conducting interviews and tests, evaluating and assessing the results thereto and as is otherwise needed in the recruitment processes including the final recruitment.
   </p>
   <h3 id="disclosure-of-personal-data">
     Do we disclose any Personal Data?
   </h3>
   <p>
     We will not transfer your personal data to third parties as a matter of course without letting you know in advance or asking for your prior permission. We may only transfer your personal data to third parties without informing you separately beforehand in the following exceptional cases as explained below:
   </p>
   <ul>
     <li>
       If required for legal proceedings/investigations, personal data will be transferred to the criminal investigation authorities and, if appropriate, to injured third parties. We will only do this if there are concrete indications of illegal and/or abusive behaviour. We are also legally obliged to give certain public authorities information. These are criminal investigation authorities, public authorities which prosecute administrative offences entailing fines and the German finance authorities.
     </li>
     <li>
       For job application we are using an external service provider to provide online application for you. Information is transferred to ENABLEAN Consulting GmbH & Co. KG, which provides the application tool TalentsTracker, in order to enable them to fulfil their contractual obligations. We have carefully selected this external service provider and review regularly to ensure that your privacy is preserved. ENABLEAN Consulting GmbH & Co. KG may only use the personal data for the purposes stipulated by us and in accordance with our instructions. We also contractually require ENABLEAN Consulting GmbH & Co. KG to treat your personal data solely in accordance with this Privacy Policy and the German data protection laws.
     </li>
     <li>
-      As part of the further development of our business it may happen that the structure of Eyeo GmbH changes. The legal structure may be adapted, subsidiaries, business units or components may be created, bought or sold. In such transactions customer information may be shared with the transmitted part of the company. In the event of a transfer of personal information softgarden will ensure that it is done in accordance to this Privacy Policy and the German data protection laws.
+      As part of the further development of our business it may happen that the structure of eyeo GmbH changes. The legal structure may be adapted, subsidiaries, business units or components may be created, bought or sold. In such transactions customer information may be shared with the transmitted part of the company. In the event of a transfer of personal information softgarden will ensure that it is done in accordance to this Privacy Policy and the German data protection laws.
     </li>
   </ul>
   <h3 id="cookies">
     Cookies
   </h3>
   <p>
-    Eyeo may store cookies in order to provide you with comprehensive features and improved ease of use when navigating our website. Cookies are small files that are stored on your computer with the help of your internet browser. If you do not want to enable cookies you can opt against using them by selecting the appropriate settings on your internet browser. Please note that the efficiency and range of our services may be restricted as a result.
+    eyeo may store cookies in order to provide you with comprehensive features and improved ease of use when navigating our website. Cookies are small files that are stored on your computer with the help of your internet browser. If you do not want to enable cookies you can opt against using them by selecting the appropriate settings on your internet browser. Please note that the efficiency and range of our services may be restricted as a result.
   </p>
   <h3 id="rights">
     What rights do you have?
   </h3>
   <p>
     Naturally you have the right to receive, upon request, information about the personal data stored by us about you. You also have the right to correct inaccurate personal data, to block and delete details. To do so, please contact us via <a href="mailto:privacy@eyeo.com">privacy@eyeo.com</a> or mail to:
   </p>
-  <address>
-    Eyeo GmbH<br>
-    Lichtstraße 25<br>
-    50825 Cologne<br>
-    Germany
-  </address>
+  <? include address ?>
   <h4 id="deletion">
     Deletion of your Data
   </h4>
   <p>
     If we don’t need your personal data any longer for the aforementioned purposes we will delete this data and it will be no longer available for further use. Please note, if data needs to be retained for legal purposes we will block the respective data
   </p>
   <h3 id="changes">
     Changes to this Privacy Policy
   </h3>
   <p>
     This Privacy Policy can be changed from time to time. The respective current version is available at: <a href="https://eyeo.com/privacy">https://eyeo.com/privacy</a>
   </p>
   <p>
-    <time datetime="2016-08">August 2016</time>

[saroyanm, 2016/12/13 15:09:54]

I think the date should be changed accordingly, also make sense to generate the
date according datetime, otherwise we need to update it separately each time we
change it.
Note: the date generation can be done separately, considering that the changes
are urgent.

[j.nink, 2016/12/13 15:18:21]

If this is easy to implement, this would be great

[juliandoucette, 2016/12/13 16:41:09]

- I'll remove the datetime property for now
- @Judith are you saying that we should change this to "December 2016"?

[j.nink, 2016/12/13 21:09:44]

Thanks, agreed 

[juliandoucette, 2016/12/19 14:36:32]

Done.

+    <time>December 2016</time>
   </p>
 </div>