rbowen / centos / centos.org

Forked from centos/centos.org 5 years ago
Clone

Blame legal/privacy.md

fd3c80
---
fd3c80
title: "CentOS Privacy Policy"
d66007
layout: aside
fd3c80
---
fd3c80
401d07
## Scope of this Notice
fd3c80
fd3c80
This Privacy Statement is intended to describe the CentOS Project's privacy
fd3c80
practices and to provide information about the choices you have regarding the
fd3c80
ways in which information is collected by the CentOS Project is used and
fd3c80
disclosed. For Convenience, the CentOS Project is referred to in this document
fd3c80
as "CentOS". 
fd3c80
fd3c80
401d07
## Our Commitment to Privacy
fd3c80
fd3c80
At CentOS, your privacy is important to us. To better protect your privacy, we have provided this Statement explaining our information practices and the choices you can make about the way your personal information is collected, used and disclosed. To make this Statement easy to find, we have made it available on our homepage and at every location where personally-identifiable information may be requested.
fd3c80
401d07
## The Information We Collect
fd3c80
5ff346
This Privacy Statement applies to all information collected by or submitted to CentOS, including personal data. "Personal data" is data that can be used to identify an individual.
fd3c80
5ff346
CentOS collects personal data when:
fd3c80
fd3c80
* you create an online account with CentOS. Examples include but are not
fd3c80
   limited to:
fd3c80
   * Forums
fd3c80
   * mailing lists
fd3c80
   * Bug tracking
fd3c80
   * Wiki
fd3c80
* you participate in surveys and evaluations
fd3c80
* you participate in promotions, contests or giveaways
fd3c80
* you submit questions or comments to us.
fd3c80
5ff346
CentOS may also collect personal data from individuals (with their
fd3c80
consent) at conventions, trade shows and expositions.  The types of personal
5ff346
data collected may include (but is not limited to):
fd3c80
fd3c80
* your first and last name
fd3c80
* your title and your company's name
fd3c80
* your address
fd3c80
* your country code
fd3c80
* your email address
fd3c80
* your telephone number
fd3c80
* any additional information that helps us make physical or online contact
fd3c80
  with you
fd3c80
* your GPG key ID
fd3c80
* your ssh public key
fd3c80
* your irc nickname
fd3c80
* your language preference
fd3c80
* your timezone
fd3c80
* your geographic coordinates
fd3c80
* your affiliation(s).
fd3c80
401d07
## Publicly Available Personal Data
fd3c80
fd3c80
In keeping with the open nature and spirit of CentOS, some personal
5ff346
data attached to CentOS accounts is made public by default.
fd3c80
Specifically:
fd3c80
fd3c80
* your first and last name
fd3c80
* your country code
fd3c80
* your email address
fd3c80
* your language preference
fd3c80
* your ssh public key
fd3c80
* your timezone
fd3c80
* your GPG key ID (if defined)
fd3c80
* your irc nickname (if defined)
fd3c80
* your geographic coordinates (if defined)
fd3c80
fd3c80
If you wish for this information to be kept private, you can opt-out of
fd3c80
displaying this information publicly in your account preferences. If you
fd3c80
choose to opt out, CentOS will still have access to this information, but it
fd3c80
will not be displayed to others, and will be considered private. The only
fd3c80
exceptions to this are for your name and email address, as these may still be
fd3c80
visible in some services such as our bug tracking system.
fd3c80
401d07
## Using your Personal Data
fd3c80
5ff346
CentOS uses the personal data you provide to:
fd3c80
fd3c80
* create and maintain your accounts
5ff346
* identify and authenticate you
5ff346
* attribute data and content you produce directly and indirectly in our
5ff346
  public-facing services
5ff346
* for research activities, including the production of statistical reports
5ff346
  (such aggregated information is not used to contact users)
fd3c80
* answer your questions
fd3c80
* send you information
fd3c80
5ff346
We also use this personal data to provide you with information related
fd3c80
to your account and the projects or services you acquire from us, to improve
5ff346
our service, and to personalize communications, and to comply with or fulfill
5ff346
any contractual obligations to you. It is in CentOS's legitimate business
5ff346
interests to provide you with the information, communications, and services
5ff346
you request; to create a public record of the data and content produced by
5ff346
CentOS's services, and to maintain the integrity of that data and content for
5ff346
historical, scientific, and research purposes.
fd3c80
fd3c80
401d07
## Sharing your Personal Information
fd3c80
5ff346
Unless you assent, CentOS will never share the personal data you
fd3c80
provide us except as described below:
fd3c80
5ff346
CentOS may share your data to third parties under any of the
fd3c80
following circumstances:
fd3c80
5ff346
* Your publicly available personal data is openly available unless you as the CentOS account holder opt-out (as already described in this Privacy Statement).
5ff346
* As may be required to provide service, and for e-mail housing (as a consequence of uses already described in this Privacy Statement).  It is in CentOS’s legitimate business interest to provide all users an accurate record of data and content provided by CentOS’s services, and to maintain the integrity of that data and content for historical, scientific, and research purposes. This data and content may include but is not limited to email, code changes, comments, and artifacts.
fd3c80
* As required by law (such as responding to a valid subpoena, warrant, audit, or agency action, or to prevent fraud)
fd3c80
* For research activities, including the production of statistical reports (such aggregated information is used to describe our services and is not used to contact the subjects of the report).
fd3c80
401d07
## Receiving E-mail
fd3c80
5ff346
CentOS may send you e-mail about your account, to inform you of important upcoming CentOS events (e.g. Dojo event changes), or in response to your questions. For your protection, CentOS may contact you in the event that we find an issue that requires your immediate attention. CentOS processes your personal data in these cases to fulfill and comply with its contractual obligations to you, to provide the services you have requested, and to ensure the security of your account.
fd3c80
401d07
## Cookies and other Browser Information
fd3c80
5ff346
CentOS's online services automatically capture IP addresses. We use IP addresses to help diagnose problems with our servers, to administer our website, and to help ensure the security of your interaction with our services. Your IP address is used to help identify you and your location.  in order to provide you data and content from our services as quickly as possible. It is in CentOS’s legitimate business interest to maximize the efficiency and effectiveness of its services for all users.
fd3c80
fd3c80
As part of offering and providing customizable and personalized services, CentOS uses cookies to store and sometimes track information about you. A cookie is a small amount of data that is sent to your browser from a Web server and stored on your computer's hard drive. All sections of centos.org where you are prompted to log in or that are customizable require your browser to accept cookies.
fd3c80
fd3c80
Generally, we use cookies to:
fd3c80
fd3c80
* Remind us of who you are and to access your account information (stored on our computers) in order to provide a better and more personalized service. This cookie is set when you register or "sign in" and is modified when you "sign out" of our services.
fd3c80
* Measure certain traffic patterns, which areas of CentOS's network of websites you have visited, and your visiting patterns in the aggregate. We use this research to understand how our user's habits are similar or different from one another so that we can make each new experience on centos.org a better one. We may use this information to better personalize the content, banners, and promotions you and other users will see on our sites.
fd3c80
5ff346
If you do not want your personal information to be stored by cookies, you can configure your browser so that it always rejects these cookies or asks you each time if you accept them or not. However, you must understand that the use of cookies may be necessary to provide certain services, and choosing to reject cookies will reduce the performance and functionality of the site. Your browser documentation includes instructions explaining how to enable, disable, or delete cookies at the browser level(usually located in the "Help", "Tools", or "Edit" facility).
fd3c80
401d07
## Our Commitment to Data Security
fd3c80
5ff346
CentOS trains its administrators on our privacy policy guidelines and makes our privacy policy available to our partners. Our website uses Secure Socket Layer (SSL) technology, which encrypts your personal data when you send your personal information on our website. In addition, CentOS and its partners enter into confidentiality agreements which require that care and precautions be taken to prevent loss, misuse, or disclosure of your personal data.
fd3c80
401d07
## Public Forums Reminder
fd3c80
5ff346
CentOS often makes chat rooms, forums, mailing lists, message boards, and/or news groups available to its users. Please remember that any information that is disclosed in these areas becomes public information. Exercise caution when deciding to disclose your personal data. Although we value individual ideas and encourage free expression, CentOS reserves the right to take necessary action to preserve the integrity of these areas, such as removing any posting that is vulgar or inappropriate.  It is in CentOS’s legitimate business interests to provide all users an accurate record of data and content provided in the public forums it maintains and uses; to maintain the integrity of that data and content for historical, scientific, and research purposes; and to provide an environment for the free exchange of ideas relevant and constructive to the development and propagation of open source software.
fd3c80
401d07
## Our commitment to Children's Online Privacy
fd3c80
fd3c80
Out of special concern for children's privacy, CentOS does not knowingly accept online personal information from children under the age of 13. CentOS does not knowingly allow children under the age of 13 to become registered members of our sites. CentOS does not knowingly collect or solicit personal information about children under 13.
fd3c80
fd3c80
In the event that CentOS ever decides to expand its intended site audience to include children under the age of 13, those specific web pages will, in accordance with the requirements of the Children's Online Privacy Protection Act (COPPA), be clearly identified and provide an explicit privacy notice addressed to children under 13. In addition, CentOS will provide an appropriate mechanism to obtain parental approval, allow parents to subsequently make changes to or request removal of their children's personal information, and provide access to any other information as required by law.
fd3c80
401d07
## About Links to other sites
fd3c80
fd3c80
This site contains links to other sites. CentOS does not control the information collection of sites that can be reached through links from the various CentOS websites. If you have questions about the data collection procedures of linked sites, please contact those sites directly.
fd3c80
5ff346
401d07
## Your Rights and Choices in the EEA
5ff346
Where the EU General Data Protection Regulation 2016/679 (“GDPR”) applies to
5ff346
the processing of your personal data, especially when you access the website
5ff346
from a country in the European Economic Area (“EEA”), you have the following
5ff346
rights, subject to some limitations, against CentOS:
5ff346
5ff346
* The right to access your personal data;
5ff346
* The right to rectify the personal data we hold about you;
5ff346
* The right to erase your personal data;
5ff346
* The right to restrict our use of your personal data;
5ff346
* The right to object to our use of your personal data;
5ff346
* The right to receive your personal data in a usable electronic format and transmit it to a third party (also known as the right of data portability); and
5ff346
* The right to lodge a complaint with your local data protection authority.
5ff346
4f0f2d
If you would like to exercise any of these rights, you may do so via email at [centos-pdr@centos.org](mailto:centos-pdr@centos.org). Please understand, however, the rights enumerated above are not absolute in all cases.
5ff346
4f0f2d
Where the GDPR applies, you also have the right to withdraw any consent you have given to uses of your personal data. If you wish to withdraw consent that you have previously provided to CentOS, you may do so via email at [centos-pdr@centos.org](mailto:centos-pdr@centos.org). However, the withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
5ff346
401d07
## How to Access, Modify, or Update your Information
5ff346
4f0f2d
CentOS gives you the ability to access, modify or update your personal data at any time. You may log in and make changes to your login information (change your password), your contact information, your general preferences and your personalization settings. If necessary, you may also contact us and describe the changes you want made to the personal data you have previously provided by emailing us at [centos-pdr@centos.org](mailto:centos-pdr@centos.org).
5ff346
4f0f2d
If you wish to remove your personal data from CentOS, you may contact us via email at [centos-pdr@centos.org](mailto:centos-pdr@centos.org) and request that we remove this information from the CentOS Account System. Other locations where you may have used your personal data as an identifier (e.g. Bug submissions or comments, list postings in the archives, wiki change history, and spec changelogs) will not be altered.
5ff346
401d07
## How to Contact Us
fd3c80
fd3c80
If you have any questions about any of these practices or CentOS's use of your
fd3c80
personal information, please feel free to contact us by email at
fd3c80
centos-tm@centos.org or by mail at:
fd3c80
fd3c80
    Assistant General Counsel
fd3c80
    Red Hat, Inc.
fd3c80
    100 East Davie Street
fd3c80
    Raleigh, NC 27601
fd3c80
    fax: +1 919-754-3704