[Members] GDPR & XSF 10 - Minutes

Winfried Tilanus winfried at tilanus.com
Fri May 4 09:02:40 UTC 2018

On 30-04-18 13:52, Maxime Buquet wrote:

Thanks again, Maxime,

I updated the Wiki.

On the way, I came across this:

Legal grounds for processing

Processing is done for the performance of a contract with the data
subject (art. 6.1b). The contract (does not have to be an explicit
contract) would then be: "to take care of the communication"

Message Archive Management (MAM) is not obvious a service when signing
up with a jabber server. So it can not be covered by the same legal
ground for processing, it should be off by default and the user should
turn it on manually. The ground for processing is here article 9.1a.

Q. by Winfried: is this indeed 6.1a or a second 6.1b? By requesting the
archiving service, the user has second(ary) service he wants to perform.
Art. 6.1a is problematic, because it brings in the permission question
as described in art 7.

Think we should discuss this tomorrow.


More information about the Members mailing list