—> DRAFT VERSION

This Privacy Policy clarifies the nature, scope and purpose of the processing of personal data (hereinafter referred to as “Data”) within the ASF’s online offerings and related websites, features and content, as well as our external online presence, e.g. our social media profiles on Facebook, Twitter, YouTube, and other services (collectively referred to as “online presence”). With regard to the terminology we use here, e.g. “Processing” or “Responsible”, we refer to the definitions in Article 4 of the European Union’s General Data Protection Regulation (GDPR).

1. Name and contact details of the controller and the company data protection officer

This privacy policy applies to data processing by:

The Apache Software Foundation
V. P. Data Privacy
1000 N West Street, Suite 1200
Wilmington, DE 19801
U.S.A.

E-Mail: vp-privacy@apache.org

2. Collection and storage of personal data and the nature and purpose of their use

We need to collect some of your information. This is necessary to make sure contributions to our codebases and other crucial parts of the ASF have well-documented Intellectual Property provenance.

1. Information submitted voluntarily on the ICLA form

NOTE: To protect your privacy, you should not copy anyone when submitting your document to the secretary.

Full name

This is your name that you use to sign legal documents. The name is visible to the secretary team, the system administrators, and you. It is not shared with others. It is used as the legal basis for the ICLA contract. The full name will be made known to the public unless you choose a public name.

Public name

This is your name as known to the public. If you are voted as a committer, this name will be shown along with your Apache id at Committer List.

The public name is also used for internal toolings without any restrictions.

Postal Address

This is your personal residence. It is used only to disambiguate your document from others which may have the same or similar name. It is visible to the secretary team and system administrators.

Country

This is the country of your personal residence. It is used only to disambiguate your document from others which may have the same or similar name. It is visible to the secretary team and system administrators.

Email

This is the forwarding address for mail received at your ASF email address. This E-Mail adress can be changed later as you wish. However, it will remain in our documents. It is visible to the secretary team and system administrators.

Preferred Apache ID

This may be used to create your Apache account. It is visible to the public once your account is created (see Public Name above). E-mail sent to @apache.org will be forwarded to your current E-Mail address.

Please note: it is very difficult, if not impossible, to change the Apache ID. If you need privacy, please don’t use your real name or any other personal data for your ID.

Notify project

This may be used to create your Apache account. The project you list first will be notified that your document was accepted or rejected but not its contents.

2. Information submitted voluntarily by sending email to a public Apache email list

The entire email, including your “from” address, the subject, and body of the email are archived and are publicly visible and searchable. Additionally, copies of your email are made available to a number of publicly archived and publicly searchable internet sites. This makes it impossible to delete emails even if they contain sensitive information. You should never include any personal information in emails sent to public Apache email lists.

Please also see: Mailing List Policy

3. The ASF does not ever sell any personal information.

The Apache Software Foundation does not sell any personal information.