From cc19ffa69bcf978fc33ae2e080f0022738b9c63b Mon Sep 17 00:00:00 2001 From: Neil Brown Date: Fri, 1 Aug 2025 14:20:41 +0100 Subject: [PATCH] Amend README to mention data processing terms --- README.md | 5 +++++ sample_terms_for_registered_users.md | 10 ++++++++++ 2 files changed, 15 insertions(+) diff --git a/README.md b/README.md index abcff70..891eac3 100644 --- a/README.md +++ b/README.md @@ -36,6 +36,11 @@ The main reason is that, IMHO, trying to impose terms of people who merely inter By the same token, I can understand why an instance admin might want to prohibit certain bots, scraping, abusive/expensive behaviour, and so on. Perhaps I should think about a separate, limited, set of terms to deal with this. +## Data processing terms + +I have included some sample/template data processing terms. + +I have prepared these from the perspective of the UK GDPR; they could be amended quite easily to cover the EU GDPR. ## Feedback is welcome! diff --git a/sample_terms_for_registered_users.md b/sample_terms_for_registered_users.md index 361c0b7..c5e9e58 100644 --- a/sample_terms_for_registered_users.md +++ b/sample_terms_for_registered_users.md @@ -28,6 +28,8 @@ These words and phrases have the following meanings in these terms: "Service Address": [insert the address which a registered user must use to commence legal proceedings] +“Data Protection Legislation”: all applicable data protection and privacy legislation in force from time to time in the UK including Regulation (EU) 2016/679 as defined in section 3(10) (as supplemented by section 205(4)) of the Data Protection Act 2018 ("UK GDPR") and the Data Protection Act 2018. + ## These terms apply to registered users These terms apply to registered users of the Service. They apply when you register an account to use the Service, and continue until you, or we, delete your account. @@ -107,6 +109,14 @@ To bring a Claim, you must first attempt to resolve the Claim with us in good fa If the Claim remains unresolved, to bring legal proceedings, you must serve us with a claim form issued by the Courts relating to the Claim within 12 months of the date on which the cause of action for the Claim accrued, to the Service Address. +## Data processing + +If, under Data Protection Legislation, you are the controller of the processing of personal data and we are carry out one or more processing activities on your behalf as your processor, our [data processing terms] apply in respect of those processing activities. + +The data processing terms do not apply when we are a controller in respect of a processing activity. In respect of *those* processing activities, please see our privacy notice. + +(Note: for the vast majority of our users and processing activities, we will be a controller, not a processor, and our data processing terms will not apply. We have produced these data processing terms for the unlikely but possible situation in which we are someone's processor.) + ## General terms We may update these terms from time to time. If we do, we will [notify you by email / post one or more announcements], and the updates will take effect on the date or dates set out in that notification. If you do not agree to the updated terms, you must delete your account before the updated terms take effect.