GDPR standard platforms CommunityForge

GDPR Legal Regulation                          GDPR Specific non-standard CF platform managers

Standard  Processing CommunityForge platforms

This is the type of data storage

"in the case of CF it is the registration of sql databases, for exchange platforms"

Purpose of processing standard platforms

Data storage must be performed on servers corresponding to the GDPR Complain criteria and in a secure data centre based in Europe. (CommunityForge Guaranteed via Gandi the GDPR Complain)

Basis of standard platform processing

Management of exchange platforms and users thereof.

Functional data category on standard platforms

Variable depending on the CommunityForge platform

(Standard)

E-mail address

Name

First name

Address

Number

Postal code

City

Telephone number

Category of persons concerned standard platforms

CommunityForge Support Team

(Depending on the platform)

User one

Local Admin

Members Committees

Retention period

Until the platform is destroyed

Data category

Member cards and platform managers

Category(ies) of recipients third country/international organisation

Only in-house from the NGO CommunityForge and CommunityForge Support France.

Standard platform documents

Private secure space with the possibility of creating public documents if necessary under the responsibility of the administrators

Appropriate safeguards

Secure servers, secure database and guaranteed GDPR complain hosting

Description of security measures

DDOS protection cloudflare adjacent with 1024 bit SSL protection

Servers with 7 layers of 1024-bit protection

Linux script protections

Systemic backups 9 phases /24/9

Added backups security in GDPR Complain backup servers

Data extractions carried out for dissemination purposes, whatever the method, are the responsibility of the administrators who must make declarations to the members and to the authorities concerned.

Informations about the concerned persons

Support Members (security systems)

Meeus François

Matthieu Fémel

Procedure for exercising rights.

Systemic Generation by Cron Procedures

***********************************************************************************************************

For info:

For Google: Google drive assigned to an owner domiciled in Europe: GDPR Complain server storage.

For Google dropbox (pro) paid version assigned to an owner domiciled in Europe: GDPR Complain server storage.

For Google dropbox (free) free assigned to an owner domiciled in Europe: server storage not guaranteed GDPR.

For Google mail: assigned to an owner domiciled in Europe: GDPR Complain server storage.

For Microsoft all services except "cloud" services assigned to an owner domiciled in Europe:  storage server GDPR Complain.

Warning: if in your parameters you indicate to live in Australia, Switzerland or...you will be in violation of the rules of the GDPR because the services and tools which will be attached to it (dropbox pro,...) will not be in conformity with safety regulations GDPR.

For Yahoo all services assigned to an owner domiciled in Europe or not: server storage GDPR Complain not guaranteed.

Framasoft: GDPR service not guaranteed