.. /*  
    * This file is part of the SavaPage project <https://www.savapage.org>.
    * Copyright (c) 2026 Datraverse B.V.
    * Author: Rijk Ravestein.
    *
    * SPDX-FileCopyrightText: (c) 2020 Datraverse B.V. <info@datraverse.com>
    * SPDX-License-Identifier: CC-BY-SA-4.0
    *
    * For more information, please contact Datraverse B.V. at this
    * address: info@datraverse.com
    */

.. _ch-freepriv-gdpr:

General Data Protection Regulation
----------------------------------

.. contents:: |RST_TABLE_OF_CONTENTS|
   :depth: 2
   :local:

.. _ch-freepriv-gdpr-intro:

Introduction
~~~~~~~~~~~~

Digital Privacy is a fundamental right in the primary law of the
European Union, and the `General Data Protection
Regulation <https://ec.europa.eu/info/law/law-topic/data-protection_en>`__
(GDPR) is one of the main legal instruments. GDPR uses the following
terminology (in short):

-  *Data Subject* : a natural person, as in
   :ref:`Person <ch-auth-print-key-concepts-person>`.

-  *Personal Data* : information related to a Data Subject. 
   See :ref:`Edit User <ch-webapp-admin-user-edit>` and
   :ref:`Log <ch-webapp-user-main-log>`.

-  *Data Controller* : an entity that controls the Personal Data, and
   determines the purpose and means of processing. Members and Visitors
   of the :ref:`SavaPage Community <ch-community>` are Data Controllers.

-  *Data Processor* : an organization that processes the Personal data
   on behalf of the Data Controller (e.g. in an outsourcing situation).

.. _ch-freepriv-gdpr-data-portability:

Data Portability
~~~~~~~~~~~~~~~~

*Data Portability* is the Data Subject’s right to obtain information
related to the processing of their Personal Data from the Data
Controller. This allows the Data Subject to move, copy or transfer
personal data easily from one IT environment to another.

|PRODUCT_NAME| Data Portability is implemented as a download of personal
data as CSV files in a ZIP container from the 
:ref:`User List <ch-webapp-admin-user-data-portability>` in the Admin Web App or
optionally from a :ref:`GDPR Dialog <ch-webapp-user-main-gdpr>` in the
User Web App.

.. _ch-freepriv-gdpr-data-erasure:

Data Erasure
~~~~~~~~~~~~

*Data Erasure* is the Data Subject’s “right to be forgotten”. This right
enables a person to request the removal of personal data when there is
no compelling reason for its continued processing. The request can
optionally be send from the :ref:`GDPR Dialog <ch-webapp-user-main-gdpr>`
in the User Web App.

Data Erasure is performed with a :ref:`Server Command <app-tools-savapage-cmd>`.
See :ref:`eraseUser <cli-erase-user>` and
:ref:`Erased Users <ch-webapp-admin-user-list-data-erasure>`.