diff --git a/codeberg.md b/codeberg.md index 946bb4c..35f9830 100644 --- a/codeberg.md +++ b/codeberg.md @@ -186,9 +186,30 @@ project. > According to GDPR, we are obligued to remove sensitive user > information as soon as a concerned person demands us to do so. -CFT complied. Even though the sole complaint lead to an investigation -that found the data accurate, it was removed anyway and therefore CFT +The GDPR does not protect legal persons (i.e. organizations) and it +does not protect anonymous information. Specifically: + +``` +"The principles of data protection should therefore not apply to +anonymous information, namely information which does not relate to an +identified or identifiable natural person or to personal data rendered +anonymous in such a manner that the data subject is not or no longer +identifiable. This Regulation does not therefore concern the +processing of such anonymous information, including for statistical or +research purposes." +``` +CFT's Cloudflare supporter list did not contain real names; only +pseudoanonymous aliases. + +The listed alias of the subject who complained did not use an alias +formed like "firstname_lastname", or any form that could reasonably +identify a natural individual person. + +The sole complaint CFT received lead to an investigation that found +the data accurate. Even though the GDPR right to be forgotten does +not have force in that case, it was removed anyway and therefore CFT was (and remains) in compliance with the GDPR right to be forgotten. + Yet Codeberg still removed the project despite immediate compliance. > as well as Cloudflare employee data, that are considered as private @@ -204,7 +225,13 @@ their employees, so it's already public information. > thus could not even imagine a reason for being listed there. CFT only received one complaint regarding one individual. CFT -complied with the GDPR. +complied with the GDPR. Codeberg destroyed the repository anyway. + +"*Support*" comes in many forms. You can support Cloudflare by +praising it, or you can support Cloudflare through actions (which may +even be unwitting to the supporter). In the one case that CFT +investigated, the subject's understanding narrowly assumed "support" +was limited to philosophical praise. > We can not accept anyone attacking and threatening us and our users > (or anyone for that matter), or inciting others to do so.