GDPR Concerns

Hello,

Someone from our district who works in the field had raised some concerns that if we used a FreeToastHost website, we may not be fully GDPR compliant. One issue he raised was about the right to data portability and that FreeToastHost wasn't compliant since the agenda data was not fully exportable in a commonly used machine readable format (e.g. CSV/JSON). There were some others as well, but I don't recall.

Do you have some GDPR certification or do we need to stop using FreeToastHost?

Your information is incorrect. The agenda information for each person is available to them in a presentation format in the agenda role reports. This meets the GDPR requirements.

Simply showing the data does not make it comply with the GDPR. It's supposed to be "in a structured, commonly used and machine-readable format." It's so the user can easily port their data elsewhere "and have the right to transmit those data to another controller without hindrance."

You even reference the policy in the FreeToastHost Privacy and Cookie Policy support.toastmastersclubs.org/doc/item/f...cy-and-cookie-policy "Right to Access and/or Take Your Data: You can request a copy of your personal data and can ask for a copy of personal data you provided in machine readable form. Your website administrator can provide your information in a CSV file format, which is very portable and machine readable."

You mention on your page the website administrator can access it via CSV, however this is not available for the agendas (dates/times, role signups, speech titles, projects, etc.).