a_adli/colouring-montreal
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add draft privacy policy

Browse Source 
Closes #323 via #381
This commit is contained in:
mz8i 2019-08-13 21:20:20 +01:00 committed by Tom Russell
parent f359d1c2d9
commit 47f4cacb3f
3 changed files with 124 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/src/frontend/app.tsx
View File

@ -18,6 +18,7 @@ import MyAccountPage from './my-account';
import SignUp from './signup';
import Welcome from './welcome';
import { parseCategoryURL } from '../parse';
import PrivacyPolicyPage from './privacy-policy';
import ContributorAgreementPage from './contributor-agreement';
/**
@ -256,6 +257,7 @@ class App extends React.Component<any, any> { // TODO: add proper types
logout={this.logout}
/>
</Route>
<Route exact path="/privacy-policy.html" component={PrivacyPolicyPage} />
<Route exact path="/contributor-agreement.html" component={ContributorAgreementPage} />
<Route component={NotFound} />
</Switch>

121
app/src/frontend/privacy-policy.tsx Normal file
View File

@ -0,0 +1,121 @@
import React from 'react';
import { Link } from 'react-router-dom';
import InfoBox from './info-box';
const PrivacyPolicyPage: React.SFC<any> = () => (
<article>
<section className='main-col'>
<h1 className='h1'>Colouring London Privacy Policy </ h1>
<InfoBox msg="This is a draft privacy policy." />
<p>
This privacy policy explains how Colouring London uses the personal data we collect from you when you use our website. Colouring London is a research project developed by the Bartlett Centre for Advanced Spatial Analysis (CASA) at UCL. Colouring London is registered for data protection purposes with the UCL data protection office.
</p>
<h2 className='h2'>What data do we collect?</h2>
<p>
Colouring London collects the following personal data:
</p>
<p>
A username and email address. We recommend you do not use your actual name for your username. We also collect your password, which is stored as a cryptographic hash unique to Colouring London.
</p>
<h2 className='h2'>How do we collect your data?</h2>
<p>
You provide Colouring London with a minimal amount of personal data when you register with the website and accepts the terms and conditions including this privacy policy.
</p>
<h2 className='h2'>What purposes do we use your data?</h2>
<p>
Colouring London uses your personal data to enable you to login to access and contribute to the Colouring London project and to provide a personalised user experience when you are logged in. We will not share your personal data (such as your email address) with any other parties or use your personal data for any purposes other than the Colouring London project.
</p>
<h2 className='h2'>What is the legal basis for processing your data?</h2>
<p>
Data protection laws require us to meet certain conditions before we are allowed to use your data in the manner described in this notice, including having a ‘legal basis’ for the processing. Colouring London, as a research project, is processing your personal data in pursuance of performing a task in the public interest. For further details on the ‘public task’ legal basis for processing, please see UCL’s Statement of Tasks in the Public Interest, available <a href='https://www.ucl.ac.uk/legal-services/sites/legal-services/files/ucl_statement_of_tasks_in_the_public_interest_-_august_2018.pdf'>here</a>
</p>
<h2 className='h2'>How do we store your data?</h2>
<p>
Colouring London stores your data at UCL in London behind the organisation’s firewall in a secure database using industry standard practices.
</p>
<h2 className='h2'>How do we use cookies?</h2>
<p>
Colouring London only uses cookies to improve the user experience of users of the website, for example we use cookies to keep you signed in. We do not use cookies for marketing or advertising purposes.
</p>
<h2 className='h2'>What are your data protection rights?</h2>
<p>
Under the General Data Protection Regulation, you have certain individual rights in relation to the personal information we hold about you. For the purposes of research where such individual rights would seriously impair research outcomes, such rights are limited. However, subject to certain conditions, you have the following rights in relation to your personal data:
</p>
<ul>
<li>
A right to access personal data held by us about you.
</ li>
<li>
A right to require us to rectify any inaccurate personal data held by us about you.
</ li>
<li>
A right to require us to erase personal data held by us about you. This right will only apply where, for example, we no longer need to use the personal data to achieve the purpose we collected it for.
</ li>
<li>
A right to restrict our processing of personal data held by us about you. This right will only apply where, for example, you dispute the accuracy of the personal data held by us; or where you would have the right to require us to erase the personal data but would prefer that our processing is restricted instead; or where we no longer need to use the personal data to achieve the purpose we collected it for, but we require the data for the purposes of dealing with legal claims.
</ li>
<li>
A right to receive personal data, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to require us to transfer this personal data to another organisation.
</ li>
<li>
A right to object to our processing of personal data held by us about you.
</ li>
<li>
A right to withdraw your consent, where we are relying on it to use your personal data.
</ li>
<li>
A right to ask us not to use information about you in a way that allows computers to make decisions about you and ask us to stop.
</ li>
</ul>
<p>
It is important to understand that the extent to which these rights apply to research will vary and that in some circumstances your rights may be restricted. If you notify us (using the contact details set out below) that you wish to exercise any of the above rights and it is considered necessary to refuse to comply with any of your individual rights, you will be informed of the decision within one month and you also have the right to complain about our decision to the Information Commissioner’s Office.
</p>
<p>
Please also note that we can only comply with a request to exercise your rights during the period for which we hold personal information about you. If that information has been irreversibly anonymised and has become part of the research data set, it will no longer be possible for us to access your personal information.
</p>
<h2 className='h2'>Changes to this privacy policy</h2>
<p>
Changes to this privacy policy will be notified via the Colouring London website. This privacy policy was last updated on 13 August 2019.
</p>
<h2 className='h2'>Who do I contact with questions?</h2>
<p>
If you have any questions about your personal data and Colouring London that are not answered by this privacy notice then please consult UCL's data protection web pages here, where further guidance and relevant UCL policy documentation can be found.
</p>
<p>
If you need further assistance in the first instance, please email <a href='mailto:casa@ucl.ac.uk'>casa@ucl.ac.uk</a>. If you wish to complain about our use of your personal data or exercise any of your rights, please contact UCL's Data Protection Officer: <a href='mailto:data-protection@ucl.ac.uk'>data-protection@ucl.ac.uk</a> or Data Protection Officer, UCL Gower Street, London WC1E 6BT.
</p>
<p>
If we are unable to adequately address any concerns you may have about the way in which we use your data, you have the right to lodge a formal complaint with the UK Information Commissioner's Office. Full details may be accessed on the complaints section of the Information Commissioner's Office <a href='https://ico.org.uk'>website</a>.
</p>
<div className="buttons-container">
<Link to="sign-up.html" className="btn btn-outline-dark">Back to sign up</Link>
</div>
</section>
</article>
)
export default PrivacyPolicyPage;

2
app/src/frontend/signup.tsx
View File

@ -136,7 +136,7 @@ class SignUp extends Component<any, any> { // TODO: add proper types
required />
<label className="form-check-label" htmlFor="confirm_conditions">
I confirm that I have read and agree to the <Link
to="/privacy-policy">privacy policy</Link> and <Link
to="/privacy-policy.html">privacy policy</Link> and <Link
to="/contributor-agreement.html">contributor agreement</Link>.
</label>
</div>