|
|
8.
|
|
|
This does mean though that the software can cover all areas of compliance. Each institution will still need to provide a number of extra information as well as infrastructure to adhere to the GDPR. These include, but may not be limited to the following, depending on your use of personal data of the people who use your site:
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../source/faq/privacy.rst:18
|
|
|
9.
|
|
|
Up-to-date privacy statement and terms and conditions;
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../source/faq/privacy.rst:20
|
|
|
10.
|
|
|
Data protection officer and work flow for responding to inquiries;
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../source/faq/privacy.rst:21
|
|
|
11.
|
|
|
Internal documentation around data protection.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../source/faq/privacy.rst:22
|
|
|
12.
|
|
|
Features in Mahara that cater to the GDPR compliance:
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../source/faq/privacy.rst:24
|
|
|
13.
|
|
|
Everyone can be required to consent to the terms and conditions and the privacy statement of the site: This is the :ref:`strict privacy mode <institution_settings>`.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../source/faq/privacy.rst:26
|
|
|
14.
|
|
|
Currently, the strict privacy mode requires that it is not possible for people to be in multiple institutions.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../source/faq/privacy.rst:29
|
|
|
15.
|
|
|
If an institution has additional terms and conditions or privacy regulations to which its members need to consent when using the site, they can be dealt with on the :ref:`institution level <institution_legal>` and members need to consent to them.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../source/faq/privacy.rst:31
|
|
|
16.
|
|
|
Whenever changes are made to the legal statements (terms and conditions and privacy statement), everyone affected by them needs to consent to the changed statement(s) when they log into the site the next time.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../source/faq/privacy.rst:32
|
|
|
17.
|
|
|
People can :ref:`revoke their consent to any legal statement <account_settings_legal>`. That will result in a notification to the site or institution administrator for further communication. Additionally, the account will be suspended automatically.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../source/faq/privacy.rst:33
|
