View Issue Details

IDProjectCategoryView StatusLast Update
0010785Talerdeployment and operationspublic2025-12-16 17:24
Reportervecirex Assigned ToStefan  
PrioritynoneSeverityfeatureReproducibilityalways
Status acknowledgedResolutionopen 
Target Versionpost-1.0 
Summary0010785: Privacy Statement (link) missing
DescriptionEven though the taler-merchant-httpd service warns for not having a privacy statement defined (as in: a folder location for files per language following a certain structure for naming and formats), @sebasjm could confirm we don't even have a link at the site.

Two things here:

(1) Define location where to put the Privacy Statement link(s); can also be global IMHO, at a footer location, e.g., as it's quite usual.
(2) Ship / Rephrase the texts to be used, at least in EN; if possible, also in DE. Some kind of Privacy Statements already exist, but perhaps not tailored to the self-provisioning system.
Additional InformationManpage docu on how the settings are supposed to be done, taler-merchant-wise; with support for I18N and also versioning:

https://docs.taler.net/manpages/taler-merchant.conf.5.html
TagsNo tags attached.

Relationships

parent of 0010630 assignedvecirex Set my.taler-ops.ch live [16.12.] 
related to 0010771 feedbackvecirex taler-merchant v1.2.4 comes up with new warnings: check which of them are good predictors for more config needed 
Not all the children of this issue are yet resolved or closed.

Activities

Stefan

2025-12-16 14:47

developer   ~0027014

The TOPS Privacy Policy is in the exchange.git (exchange/contrib/exchange-pp-v0.de.rst and exchange/contrib/exchange-pp-v0.en.rst ) - Let's take the German version which makes most sense in the presentation in front of German speaking customers.

https://git-www.taler.net/exchange.git/tree/contrib/exchange-tos-tops-v0.de.rst
https://git-www.taler.net/exchange.git/tree/contrib/exchange-tos-tops-v0.en.rst

vecirex

2025-12-16 14:50

manager   ~0027015

Are they applicable to the taler-merchant self-provisioning system without any change?

vecirex

2025-12-16 14:51

manager   ~0027016

In additional info field, add docu which florian linked; ty!

vecirex

2025-12-16 14:53

manager   ~0027017

Another point would be the documented support for versioning, see additions to this ticket: is this reflected in the text?

We can of course just go for "v0" for now, but then it would be good to just put this into the text already at the top inline; I suggest also: with a date; as "v0" alone is not very helpful.

Stefan

2025-12-16 14:55

developer   ~0027018

Last edited: 2025-12-16 15:01

These are Privacy policies, Datenschutzbestimmungen. The software and our server-sided processes are obliged to live up to these rules that we applied respectively that are supposed to have been made applicable to our services by Swiss law. But the PP has nothing do to with fee structures, costs, limits and so on, just with data and data management/forwarding.

So we are safely managing the privacy of merchant users with these PP for TOPS and it can be assumed that the Merchant Backend complies with these rules (as long as the DB is not set public or synchronized with an untrusted cloud provider in countries outside the EU and different from EFTA states).

Stefan

2025-12-16 14:59

developer   ~0027019

Versioning: The version number is mostly for our file sanity, but also from a legal point of view. User-sided, the date plays the major role here. Customers (here: merchant users of the Taler Merchant Backoffice) are not interested in the version number, but to get notified about new applicable updates of the TOPS Privacy Policy and the version of the Backend itself.

vecirex

2025-12-16 15:11

manager   ~0027023

I would still say, it makes sense (as others do), to just put version number and date into the document itself. Already for transparency reasons this makes sense.

Stefan

2025-12-16 15:13

developer   ~0027025

The date is already there in the second line. I do believe, to display a month suffices (as month == starting day 1)

vecirex

2025-12-16 17:17

manager   ~0027032

OK, as CG wants to have it, just changing blocking direction: first live, then solve this, making thus this ticket depending on 0010630. :)

(As long as we act quick enough, it's fine.)

Issue History

Date Modified Username Field Change
2025-12-16 14:39 vecirex New Issue
2025-12-16 14:39 vecirex Status new => assigned
2025-12-16 14:39 vecirex Assigned To => Stefan
2025-12-16 14:40 vecirex Relationship added child of 0010630
2025-12-16 14:47 Stefan Note Added: 0027014
2025-12-16 14:50 vecirex Note Added: 0027015
2025-12-16 14:51 vecirex Additional Information Updated
2025-12-16 14:51 vecirex Note Added: 0027016
2025-12-16 14:52 Christian Grothoff Priority urgent => none
2025-12-16 14:52 Christian Grothoff Severity major => feature
2025-12-16 14:52 Christian Grothoff Status assigned => acknowledged
2025-12-16 14:52 Christian Grothoff Target Version => post-1.0
2025-12-16 14:53 vecirex Note Added: 0027017
2025-12-16 14:55 Stefan Note Added: 0027018
2025-12-16 14:58 vecirex Additional Information Updated
2025-12-16 14:59 Stefan Note Added: 0027019
2025-12-16 15:01 Stefan Note Edited: 0027018
2025-12-16 15:11 vecirex Note Added: 0027023
2025-12-16 15:13 Stefan Note Added: 0027025
2025-12-16 17:17 vecirex Note Added: 0027032
2025-12-16 17:17 vecirex Relationship replaced parent of 0010630
2025-12-16 17:24 vecirex Relationship added related to 0010771