Merge pull request #37 from Bjwebb/privacy-notice

 Add privacy notice

docs/_templates/footer.html

@@ -0,0 +1,5 @@
+{% extends "!footer.html" %}
+{% block extrafooter %}
+    {{ super() }}
+    <a href="{{ pathto('privacy-notice') }}">Privacy Notice</a>.
+{% endblock %}

docs/privacy-notice.md

@@ -0,0 +1,51 @@
+Privacy Notice
+--------------
+
+ReadTheDocs provide the platform these docs are hosted on, for information about how they collect and process personal data, [see their Privacy Policy](https://docs.readthedocs.io/en/latest/privacy-policy.html).
+
+Social Economy Data Lab is committed to ensuring that your privacy is protected. This privacy notice sets out how we collect and process any personal data when you use this website.
+
+We may change this notice from time to time by updating this page. This notice is effective from 24th May 2018.
+
+Data controller: <br/>
+Social Economy Data Lab, c/o Power to Change Trustee Limited, [admin@socialeconomydatalab.org](mailto:admin@socialeconomydatalab.org)<br/>
+Contact us if would like a copy of the information held on you or if you believe that any information we are holding on you is incorrect or incomplete.
+
+You have the following rights concerning this data:
+
+*   Right to be informed, which is the purpose of this privacy notice
+*   Right to Access, Rectification, Erasure, and to Restrict Processing. Note that the right to Erasure and Restrict Processing are balanced against our legitimate interests. Where relevant, you need to provide information to re-identify yourself from our pseudonymised data, see [GDPR Article 11](https://gdpr-info.eu/art-11-gdpr/)
+*   Right to object to our processing.
+
+Our supervisory authority is the [ICO in the UK](https://ico.org.uk/). You have the right to lodge a complaint with them.
+
+We process personal data for the following purposes:
+
+*   Understanding website visitor and traffic patterns
+
+We rely on [legitimate interests](https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/legitimate-interests/) ([GDPR Article 6(1)(f)](https://gdpr-info.eu/art-6-gdpr/)) as the lawful basis for this processing. Details about the type of data, the purpose of the processing and legitimate interests, and the storage and retention of the data are set out below.
+
+
+### Understanding website visitor and traffic patterns
+
+We collect data about your visits to the website, for the purpose of analysing how the website is used, so that we can improve it. A self hosted copy of [Matomo](http://matomo.org) is used for this.
+
+Personal data we collect:
+
+* Your IP address - this is pseudonymised by redacting the second half of the address
+* Referrer (what page you arrived at one of our web pages from)
+* Information about your device, OS and browser
+
+We do not use this data to personally identify individuals, but it is possible that it could be used to do so, particularly if combined with other datasets.
+
+You can opt out of this processing: If you have set your web browser to "I do not want to be tracked" (DoNotTrack is enabled) then Matomo will not track your visit.
+
+Matomo also it’s own opt out mechanism:
+<!-- opt out iframe - clicking this will mean people can opt out of tracking -->
+<iframe style="border: 1; height: 150px; width: 600px;" src="https://mon.opendataservices.coop/piwik/index.php?module=CoreAdminHome&amp;action=optOut&amp;language=en"></iframe>
+
+Data processors: Open Data Services Co-operative Limited, Bytemark.
+
+No data is transferred to third countries or international organisations.
+
+The data is kept indefinitely, in pseudonymised form.