add privacy policy

app.ts

@@ -202,6 +202,58 @@ document.addEventListener('DOMContentLoaded', () => {
     <a href="mailto:[email protected]">[email protected]</a>
     </p>
     `
+    const privacyContent: string = `
+    <h3>Privacy policy</h3>
+    <p>We are delighted that you have chosen to visit our website or take part at one of our events. We take our data protection responsibilities with the utmost seriousness and we have designed our website so that you may navigate and use our website without having to provide any data.</p>
+    <p>This policy sets out what data we collect (if any), how we process it, and how long we retain it. This policy is applying to all of our processing activities where we act as a data controller.</p>
+    <h3>How we use data</h3>
+    <p>We may collect and process data that you provide to us for the purpose of onboarding you as an attendee. This data may include:</p>
+    <ol>
+    <li>Your email address; that's all we need.</li>
+    </ol>
+    <p>This data is collected in order to communicate with you. The legal basis for this processing is that it is necessary to fulfill a contract with you and your consent given in the attendee application.</p>
+    <h3>Use of third-party applications</h3>
+    <p>We use the following third party applications:</p>
+    <ul>
+    <li>GitHub: used to host our websites through GitHub pages. GitHub might see your IP address if you read this.
+    <a href="https://docs.github.com/en/site-policy/privacy-policies/github-privacy-statement" target="_blank">
+    GitHub Privacy Statement</a>.
+    </li>
+    </ul>
+    <h3>Sharing your data</h3>
+    <p>We don't pass on your information to anyone.</p>
+    <h3>Transferring your data outside of the EU</h3>
+    <p>Goerli Dezentral gGmbH is based in Germany. Your data, will be processed and collected in Europe by our organizing committee in Berlin. Also will the information be stored in Germany-based servers. </p>
+    <h3>Existence of automated decision-making</h3>
+    <p>We do not use automatic decision-making or profiling when processing data.</p>
+    <h3>Data security</h3>
+    <p>We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in any unauthorized way, altered or disclosed. In addition, we limit access to your personal data to our core team only.</p>
+    <p>We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.</p>
+    <h3>Your rights as a subject</h3>
+    <p>You have certain rights under applicable legislation, and in particular under Regulation EU 2016/679 (General Data Protection Regulation or 'GDPR'). We explain these below. You can find out more about the GDPR and your rights by accessing the <a href="https://ec.europa.eu/info/law/law-topic/data-protection_en">European Commission's website</a>.</p>
+    <p>You have a right to be informed about the processing of your personal data (and if you did not give it to us, information as to the source) and this policy intends to provide the information. Of course, if you have any further questions you can contact us on the above details.</p>
+    <p>You have the right to have any inaccurate personal information about you rectified and to have any incomplete personal information about you completed. You may also request that we restrict the processing of that information.</p>
+    <p>The accuracy of your information is not important to us. If you do not want us to use your data in the manner set out in this policy, or need to advise us of any changes to your personal information, or would like any more information about the way in which we collect and use your data, please contact us at the above details.</p>
+    <p>You have the general right to request the erasure of your personal information at any time. We will proceed to comply with an erasure request without delay.</p>
+    <p>You have a right to restrict processing of your personal information.</p>
+    <p>You also have the right to object to processing of your personal information under certain circumstances, such as where the processing is based on your consent and you withdraw that consent. This may impact the services we can provide and we will explain this to you if you decide to exercise this right.</p>
+    <p>Where the legal basis for our processing is your consent or the processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract, you have a right to receive the personal information you provided to us in a structured, commonly used and machine-readable format, or ask us to send it to another person.</p>
+    <p>You have a choice about whether or not you wish to receive information from us. We will not contact you for marketing purposes.</p>
+    <p>Please note that any administrative or service-related communications (to offer our services, or notify you of an update to this policy or applicable terms of business, etc.) will solely be directed at our attendees, and such communications generally do not offer an option to unsubscribe as they are necessary to provide the services requested.</p>
+    <p>You also have a right to access information we hold about you.</p>
+    <p>You have the right to withdraw consent at any time by contacting us on the above details.</p>
+    <p>If you wish to raise a complaint on how we have handled your personal data, you can contact us as set out above and we will then investigate the matter.</p>
+    <p>If we have not responded to you within a reasonable time or if you feel that your complaint has not been resolved to your satisfaction, you are entitled to make a complaint to the Data Protection Commissioner under the Data Protection Act which is <em>Berliner Beauftragte für Datenschutz und Informationsfreiheit</em>: Friedrichstr. 219, Guest entrance: Puttkamerstr. 16 – 18 (5th floor), Phone: 030 13889-0, Fax: 030 2155050, Email: [email protected]</p>
+    <p>You also have the right to lodge a complaint with the supervisory authority in the country of your habitual residence, place of work, or the place where you allege an infringement of one or more of our rights has taken place.</p>
+    <h3>Storing data</h3>
+    <p>We retain your information only for as long as is necessary for the purposes for which we process the information as set out in this policy.</p>
+    <h3>Changes to this policy</h3>
+    <p>We may make changes to this policy from time to time. We encourage you to review the policy whenever you access or use our website to stay informed about our information practices and the choices available to you. If you do not agree to the revised policy, you should discontinue your use of this website.</p>
+    <h3>Our details</h3>
+    <p>This website is owned and operated by Goerli Dezentral gGmbH.</p>
+    <p>We are registered in Germany under registration number Company Nr. HRB 207663 B, and our registered office is located at: Mariannenstraße 9-10, 10999 Berlin. </p>
+    <p>If you have any queries concerning your rights under this policy, please contact us via: <a href="mailto:[email protected]">[email protected]</a></p>
+    `
     const contactContent: string = `
     <h3>Contact</h3>
     <p>
@@ -268,6 +320,7 @@ document.addEventListener('DOMContentLoaded', () => {
         'home': homeContent,
         'about': aboutContent,
         'conduct': conductContent,
+        'privacy': privacyContent,
         'contact': contactContent
     };
     function render(route: string) {
@@ -276,6 +329,7 @@ document.addEventListener('DOMContentLoaded', () => {
     document.getElementById('home')!.addEventListener('click', () => render('home'));
     document.getElementById('about')!.addEventListener('click', () => render('about'));
     document.getElementById('conduct')!.addEventListener('click', () => render('conduct'));
+    document.getElementById('privacy')!.addEventListener('click', () => render('privacy'));
     document.getElementById('contact')!.addEventListener('click', () => render('contact'));
     render('home');
 });

index.html

@@ -14,6 +14,7 @@
         <button id="home">Huge Logo</button>
         <button id="about">Our Events</button>
         <button id="conduct">Code of Conduct</button>
+        <button id="privacy">Privacy Policy</button>
         <button id="contact">Contact &amp; Impressum</button>
     </nav>
     <div id="content"></div>