...

☐ We have checked that legitimate interest is the most appropriate basis.

...

☐ We have informed the community about the analysis and its purpose

☐ We understand our responsibility to protect the individual’s interests.

Yes. We do, and therefore we are announcing the launch of the survey in a blog so people are aware of our intentions. We are also informing our community members that we are analyzing public repositories and providing them a way to opt-out from this analysis. (is this something we can do Katia Rojas ?)

☐ We have conducted a legitimate interests assessment (LIA) and kept a record of it, to ensure that we can justify our decision.

Yes. After the first survey, the community identified multiple improvements points and the need to rerun the survey in order to keep track of this development. 

☐ We have identified the relevant legitimate interests.

Yes. It is to follow up on the efforts done in 2020, understand the current composition of the ASF community, and measuring the impact of the improvements applied to the identified barriers. 

☐ We have checked that the processing is necessary and there is no less intrusive way to achieve the same result.

Yes. There is no other way to analyze the impact of the improvements.

☐ We have done a balancing test, and are confident that the individual’s interests do not override those legitimate interests.

...

.

☐ We are not using people’s data in ways they would find intrusive or which could cause them harm, unless we have a very good reason.

...

☐ We have considered whether we can offer an opt-out.

...

an opt-out.

...

☐ If our LIA identifies a significant privacy impact, we have considered whether we also need to conduct a DPIA.

N/A. TBD. Is this going to be done Katia Rojas ?

☐ We keep the considerations that have gone into this LIA on file.

Yes. TBD. Is this going to be done Katia Rojas ?

☐ We include information about our legitimate interests assessment in our privacy information.

...

There is a mechanism to either destroy or return all Personal Data once the processing services by Bitergia have been completed

FAQs

Will there be a message to committer@ explaining that they will receive a subsequent message?

...