TOPIC:

Your website will continue to work. You may not be able to see somethings, external referenced scripts and pictures they you have added to pages that are not referenced by https test and images that are hosted in FTH should should with out any issues.

I am working on the code changes at this time. Brian and I have been discussing what is needed. We are still sorting some things out.

I am thinking maybe we should release some of the code updates in stages...

1. I have the cookie release update ready to go. However, the pop-up references a Privacy and Cookie Policy that will not become effective until May 25th (or whenever we set the official release date for that policy.)

2. I have some of the new member/non-member opt-in code done. There are some concerns about the potential of new members not responding to the opt-in email that would leave them in a sort of "new member limbo".

I am not a compliance guy, but I appreciate you starting this thread.
Many Thanks
TIM

This is quite cumbersome. The internet is such a blessing and a curse at the same time.

Is there a way to put some events on the calendar as private (e.g. member's anniversary, birthdays, officer meetings)?

Thank you for all that you do.

You will now need written on paper permission for everything you post about a member. So I personally would say no to birthdays, etc.

With respect to FTH websites, who is considered the controller and who is considered the processor?
Another GDPR resource to look at: www.eugdpr.org/

lovemoka wrote:

With respect to FTH websites, who is considered the controller and who is considered the processor?
Another GDPR resource to look at: www.eugdpr.org/

Short answer... I am not entirely sure. It seems to me like we may be both. I am wondering what Brian thinks...

The controller of your website would be the admin and I think the processor would be the members... If I understand your question correctly

LindaMann wrote:

The controller of your website would be the admin and I think the processor would be the members... If I understand your question correctly

No, I do not think that is correct in the context of GDPR... it has other implications. (read the cited references)

FTH is the data processor the the clubs.

The club is the data processor for the members.

See the definitions for controller and processor at the following link: www.gdpreu.org/the-regulation/key-concep...lers-and-processors/

I'm confused in terms of who would be considered the controller from the FTH website perspective? Also for clarification when you say FTH is the data processor for the clubs do you mean FTH ambassadors and developers? Also in some cases from my interpretation of data controller form GDPR "controller meas the natural or legal person, public authority, agency or other body alone or jointly with others, determines the purposes and means of the processing of personal data.... " could be in some cases FTH and/or club/administrator

GDPR defines data process as "the processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller"

From a compliance perspective it is important to distinguish between the two. GDPR treats the data controller as the principal party for responsibilities such as collecting consent,enabling right to access, and managing consent-revoking.

I found this introductory article in the iEEE Spectrum magazine.

www.spectrum.ieee.org/at-work/tech-caree...s-data-privacy-rules

Hope it is helpful.

A Quote from the above mentioned article.

"Small-website owners, with a few hundred users, may not attract the spontaneous scrutiny of regulators but could find themselves facing individuals demanding their GDPR rights. Such individuals could also file complaints with regulators. Enforcement authorities will be holding audits to ensure compliance with the GDPR, so start keeping detailed logs and reports"

I am fairly good a reading legalize, but I have Toastmasters asking me what these regulations all mean and am searching for a clear explanation that members can understand. Even if you are not a member of your club executive you whole club can be held responsible because a club is considered an independent organization by Toastmasters International.

Does the Clubs Liability Insuranse Cover and fines a club may suffer?

Please direct inquiries to Toastmasters International Legal Department they have prepared information and documentation for Toastmasters Clubs in the EU