From 47d6d81b798ec3ed467e0f4339c98c8a6b80cecd Mon Sep 17 00:00:00 2001
From: Yassine Doghri <yassine@doghri.fr>
Date: Thu, 29 Sep 2022 14:08:58 +0000
Subject: [PATCH] feat(gdpr): add purpose for granting access to premium
content
---
GDPR.txt | 12 ++++++++++++
public/.well-known/GDPR.yml | 11 +++++++++++
2 files changed, 23 insertions(+)
diff --git a/GDPR.txt b/GDPR.txt
index f8f7f13c83..a7336bac57 100644
--- a/GDPR.txt
+++ b/GDPR.txt
@@ -69,3 +69,15 @@ description:
platforms (such as Apple Podcasts).
mitigation:
The e-mail can be generic.
+
+purpose: Grant access to premium content
+lawfulness: legitimate interest
+
+data: Subscriber's email address
+required: yes
+visibility: administrators
+description:
+ The subscriber's e-mail address is used to provide credentials for
+ listening to premium content.
+mitigation:
+ The e-mail can be generic.
diff --git a/public/.well-known/GDPR.yml b/public/.well-known/GDPR.yml
index 40c822bafb..dba6d271c3 100644
--- a/public/.well-known/GDPR.yml
+++ b/public/.well-known/GDPR.yml
@@ -73,3 +73,14 @@ purposes:
platforms (such as Apple Podcasts).
mitigation: The e-mail can be generic.
retention: forever
+ - description: Grant access to premium content
+ lawfulness: legitimate interest
+ data:
+ - field: Subscriber's email address
+ required: yes
+ visibility: administrators
+ description: |
+ The subscriber's e-mail address is used to provide credentials for
+ listening to premium content.
+ mitigation: The e-mail can be generic.
+ retention: until the subscription ends
--
GitLab