Single user export for GDPR

[piperswe]

For GDPR compliance on a Gitea instance I host, the ability to export the data pertaining to a single user would be extremely useful so I don't have to resort to writing dodgy SQL queries.

[T100D]

To be compliant, GDPR is only in count for personal or profile info imho. So only the data in the Public Profile page is at stake here.

[tarelda]

T100D, you are actually wrong here. According to answer to question made by T-Mobile, all customer data, that was willingly uploaded into the service, can be requested for a review or deletion, but doesn't include data automatically generated due to user activity (for example activity logs etc.).

[T100D]

@tarelda GDPR only concerns personal and/or identity related data. It is not related to business like data that one personally owns, or has created and stored on-line, despite the splendid service by T-Mobile.

There is an exclusion in GDPR when it concerns business related data for example. Messages in issue's, and programs in Gitea could fall under the business exclusion, Gitea just has to mention that when people create online accounts on open internet Gitea services.

The Github privacy statement is highly usable imho: https://help.github.com/articles/github-privacy-statement/#githubs-global-privacy-practices

[tarelda]

@T100D, only exclusion I am aware of is that you don't have to delete or share information vital for your business operation. Otherwise you have to and even in this situation you have to provide user with reasoning for that (ATM I don't have access and time to GPDR source text to point paras and points, but I actually read it).
Github privacy statement claims that data is collected under US law instead of European and is compliant with GPDR as external entity, which falls under different category, than being European organization.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.

[stale]

This issue has been automatically closed because of inactivity. You can re-open it if needed.

[lesderid]

Was this added? Anyone publicly deploying Gitea for users in the EU needs this.

[i5heu]

#2012 is also important for EU users - a privacy and imprint section is legally required!