How are we handling the data protection and GDPR issues of this
arrangement?

The individual data is not transferred if someone generates a
generalized report with the TSP application and shares it with the
community...

Henne

If the money is coming from the Geeko Foundations bank account there has to be a transfer of an individuals personal information from SUSE Group to the Geeko Foundation

Else the Geeko Foundation would have no payment details to send the money to someone

The terms and conditions of such transfer of sensitive personal info needs to be documented somewhere. I’d expect if not details about retention times at least documentation about how to request data removal under the GDPR.

I certainly wouldn’t be comfortable with the idea of sharing my bank details with SUSE just for them to give them to a UK registered company (not a charity yet..) without such documentation.

Especially when that UK company has apparently incomplete public filings suggesting a governance model which seems to be something between “the three trustees can do whatever they want with the Foundations money” and “Patrick has complete control” depending on which documentation is read.

All Not-for-profits and Charities the trustees control the money. that is why they are called trustees. What is your point?

And are you suggesting that the trustees, or myself ("depending on which documentation is read") are untrustworthy?

And BTW, I am meeting with my accountants for fix that documentation "error" - as to the control thing. Should be updated by Thursday morning.

I’m also not comfortable with technically contributing to any TSP tooling changes while the processes around the data is potentially unclear.

I wasn't aware that you were willing to contribute in any way.

Imagine for a moment what could have been achieved if you were however: we'd policies completed by now, and posted, and any this sniping never would have happened.

I repeat, help wanted. Apply here.

/p