Add cookie and privacy policy

Gemfile

@@ -15,6 +15,7 @@ gem 'foundation-rails', '5.5.3.2'
 gem 'friendly_id'
 gem 'github-markdown'
 gem 'haml'
+gem 'high_voltage'
 gem 'jquery-rails'
 gem 'jquery-ui-rails', '~> 5.0.0'
 gem 'mini_magick'

Gemfile.lock

@@ -157,6 +157,7 @@ GEM
       temple (>= 0.8.0)
       tilt
     hashie (3.5.7)
+    high_voltage (3.1.0)
     htmlentities (4.3.4)
     httparty (0.13.7)
       json (~> 1.8)
@@ -403,6 +404,7 @@ DEPENDENCIES
   gibbon (~> 1.1.5)
   github-markdown
   haml
+  high_voltage
   icalendar
   jbuilder
   jquery-rails

app/controllers/pages_controller.rb

@@ -0,0 +1,3 @@
+class PagesController < ApplicationController
+  include HighVoltage::StaticPage
+end

app/views/layouts/_footer.html.haml

@@ -4,6 +4,7 @@
       %p.copyright
         © #{Date.today.year} codebar
 
+
       %p.contact
         =t("footer.email_us")
         -# encoded email address
@@ -29,7 +30,12 @@
 
     .large-3.columns
       = render partial: 'shared/social_media'
+
   .row
     .large-12.columns
-      %p.registration
-        Registered UK company number: 10791813
+
+      %ul.inline-list.registration
+        %li
+          Registered UK company number: 10791813
+        %li= link_to t("navigation.cookies"), cookies_path
+        %li= link_to t("navigation.privacy-policy"), privacy_policy_path

app/views/pages/cookies.html.haml

@@ -0,0 +1,50 @@
+.row.mt1
+  .large-12.columns
+    :markdown
+
+      ##{t('pages.cookies.title')}
+
+      #{t('pages.cookies.p1')}
+
+      #{t('pages.cookies.p2')}
+
+      #{t('pages.cookies.sub.title')}
+
+
+      ## #{t('pages.cookies.functional.title')}
+
+       #{t('pages.cookies.functional.description')}
+      <br/>
+
+      | Cookie name | Purpose | Expires |
+      | ---- | ------- |    ----- |
+      | `_planner_session` | #{t('pages.cookies.functional.planner')} | #{t('pages.cookies.functional.planner_expiry ')} |
+
+      <div style="height:1px;font-size:1px;">&nbsp;</div>
+
+      ## #{t('pages.cookies.google_analytics.title')}
+
+      #{t('pages.cookies.google_analytics.description')}
+
+      **#{t('pages.cookies.google_analytics.info')}**
+
+      <div style="height:1px;font-size:1px;">&nbsp;</div>
+
+      | Name |	Purpose | 	Expires |
+      | ---- | ------- |    ----- |
+      | `_ga` | #{t('pages.cookies.google_analytics.ga')} | #{t('pages.cookies.google_analytics.ga_expiry ')} |
+      | `_ga` | #{t('pages.cookies.google_analytics.gid')} | #{t('pages.cookies.google_analytics.gid_expiry ')} |
+
+      <div style="height:1px;font-size:1px;">&nbsp;</div>
+
+      #{t('pages.cookies.google_analytics.opt_out')}
+
+      ### #{t('pages.cookies.cloudflare.title')}
+
+      <div style="height:1px;font-size:1px;">&nbsp;</div>
+
+      | Name | Purpose | Expires |
+      | ---- | ------- |    ----- |
+      | `_cfduid` | #{t('pages.cookies.cloudflare.cfduid')} | #{t('pages.cookies.cloudflare.cfduid_expiry')} |
+
+      <div class='mb1' >&nbsp;</div>

app/views/pages/privacy-policy.html.haml

@@ -0,0 +1,41 @@
+.row.mt1
+  .large-12.columns
+    :markdown
+
+      # #{t('pages.privacy_policy.title')}
+
+      ### #{t('pages.privacy_policy.subtitle')}
+
+      #{t('pages.privacy_policy.p1')}
+
+      #{t('pages.privacy_policy.address_html')}
+
+      ### #{t('pages.privacy_policy.information.title')}
+
+      #{t('pages.privacy_policy.information.description')}
+
+      #{t('pages.privacy_policy.information.subscribing_html')}
+
+      #{t('pages.privacy_policy.information.cookies_html')}
+
+      #{t('pages.privacy_policy.information.usage_html')}
+
+      ### #{t('pages.privacy_policy.your_rights.title')}
+
+      #{t('pages.privacy_policy.your_rights.rights_html')}
+
+      #{t('pages.privacy_policy.your_rights.data_retention_html')}
+
+      #{t('pages.privacy_policy.your_rights.personal_data_access_html')}
+
+      ####{t('pages.privacy_policy.security.title')}
+      #{t('pages.privacy_policy.security.text')}
+
+      ####{t('pages.privacy_policy.changes.title')}
+      #{t('pages.privacy_policy.changes.text')}
+
+      ####{t('pages.privacy_policy.contact.title')}
+      #{t('pages.privacy_policy.contact.text')}
+
+
+      <div class='mb1' >&nbsp;</div>

config/initializers/haml_markdown.rb

@@ -0,0 +1,29 @@
+module Haml::Filters
+
+  remove_filter("Markdown") #remove the existing Markdown filter
+
+  module Markdown
+
+    include Haml::Filters::Base
+
+    def render(text)
+      markdown.render(text)
+    end
+
+  private
+
+    def markdown
+      @markdown ||= Redcarpet::Markdown.new Redcarpet::Render::HTML, {
+        autolink:         true,
+        fenced_code:      true,
+        generate_toc:     true,
+        gh_blockcode:     true,
+        hard_wrap:        true,
+        no_intraemphasis: true,
+        strikethrough:    true,
+        tables:           true,
+        xhtml:            true
+      }
+    end
+  end
+end

config/locales/de.yml

@@ -346,6 +346,77 @@ de:
           pay: Make a payment
       edit:
         title: Edit job listing
+  pages:
+    cookies:
+      title: Cookies
+      p1: 'Cookies are small pieces of text used to store information on web browsers. They are used by websites accross a number of different devices to store and receive identifiers and other information. Our Website and Service use cookies and other similar technologies (collectively in this Policy, "cookies"), in order to provide a better service to you and to generally improve our Website and Service. For example, we may use cookies to help direct you to the appropriate part of our Website, by indicating that you are a repeat visitor. We also may use information to present you with services that are matched to your preferences and to manage and track the effectiveness of our marketing efforts.'
+      p2: Some portions of the codebar website are functional without cookies, and you may generally choose whether to accept cookies. Most web browsers are set to accept cookies by default, however, you may be able to delete cookies yourself through your browser's cookie manager. To do so, please follow the instructions provided by your web browser. Please note that disabling cookies will reset your session, disable auto-login, and may adversely affect the availability and functionality of our Website and the services we can provide to you.
+      sub:
+        title: Below the cookies used by the codebar website.
+      functional:
+        title: Functional Cookies
+        description: Stores information about your session.
+        planner: Stores session data
+        planner_expiry: Expires after 24 hours
+      google_analytics:
+        title: Google Analytics
+        description: Google Analytics  collects information about how you use the codebar website. This enables us to identify how busy the website is and possible improvements.
+        info: We don’t allow Google to use or share our analytics data.
+        opt_out: You can [opt out of Google Analytics](https://tools.google.com/dlpage/gaoptout).
+        ga: Tracks if you have visited codebar.io before
+        ga_expiry: After 2 years
+        gid: Tracks if you have visited codebar.io before
+        gid_expiry: After 24 hours
+      cloudflare:
+        title: Cloudflare
+        cfduid: Used to identify individual clients behind a shared IP address and apply security settings on a per-client basis.
+        cfduid_expiry: '1 year'
+    privacy_policy:
+      title: Privacy Policy
+      subtitle: Your privacy matters to us
+      p1: 'Your privacy means a lot to us, and we take it very seriously. We aim to be transparent with you about the data we collect about you and how it is used and shared. By signing up to our workshops you consent to our use of your data under this Privacy Policy. The document below has been created by codebar whose companies house registered name and address is as follows:'
+      address_html: '
+        codebar Ltd,<br/>
+        International House,<br/>
+        24 Holborn Viaduct,<br/>
+        London,<br/>
+        England,<br/>
+        EC1A 2BN<br/>
+        Company No. 10791813<br/>'
+      information:
+        title: 1. Information we collect
+        description: We do not share any of your information with any third parties without your consent. We also do not sell your contact information or use it for marketing purposes.
+        subscribing_html: '**1.1 Subscribing to an event**<br/>
+        We share your name with our host companies as we are required to provide a list with all attendee names when you subscribe to any of our events. We **do not share** your email address or any other personal information.'
+        cookies_html: '**1.2 Cookie Policy**<br/>
+        We use cookies to recognize you and your location. You can control cookies through your browser settings and other tools. For more information read our [cookie policy](/cookie_policy).'
+        usage_html:  '**1.3 How we use information we collect**<br/>
+        The legal basis on which we collect and process your data is “legitimate interest”. This is because we collect and store your data in order to process event information.'
+      your_rights:
+        title: 2. Your rights, choices and obligations
+        rights_html: '
+          **2.1 Your rights**<br/>
+          Data protection law provides you with rights in respect of personal data that we hold about you, including the right to request a copy of the personal data and request that we rectify, restrict or delete your data.
+          If you would like to exercise any of these rights please email us at company@codebar.io.
+          If you have a complaint about how we handle your data, please get in touch with us at company@codebar.io. If you are not happy about the way a complaint has been handled, you have the right to refer your complaint to the Information Commissioner’s Office.'
+        data_retention_html: '
+          **2.2 Data retention**<br/>
+          We will retain your data for as long as necessary to provide our services to you and fulfil transactions you have requested. If at any point you wish us to delete your data please email company@codebar.io.'
+        personal_data_access_html: '
+          **2.3 Right to Access and Control Your Personal Data**<br/>
+          You can request a copy of the data we hold about you, or request that we delete any data we hold on you. You can also ask us to correct, update or delete any inaccurate personal data that we hold about you. Just email us at company@codebar.io at any time.  We aim to process requests for data records or deletion within two weeks of receipt.'
+        access_and_portability_html: '
+          **2.4 Data Access and Portability**<br/>
+          You have the right to request a copy of the personal information we hold about you in a structured, electronic format. If you wish to receive a copy of the information we hold about you, please email company@codebar.io.'
+      security:
+        title: 3. Security
+        text: From time to time we implement and update administrative, technical, and physical security measures to help protect your information against unauthorised access, loss, destruction, or alteration. However, the Internet is not a 100% secure environment so we can’t guarantee the security of the transmission or storage of your information.
+      changes:
+        title: 4. Changes to this privacy policy
+        text: We reserve the right to modify this Privacy Policy at any time in accordance with this provision. If we make changes to this Privacy Policy, we will post the revised Privacy Policy on the codebar website. If you disagree with the revised Privacy Policy, you may ask us to remove your information from our systems pleas email company@codebar.io.
+      contact:
+        title: 5. Contact
+        text: If you have any questions or complaints about this Privacy Policy or our information handling practices, you may email us company@codebar.io stating 'Data inquiry' in the subject title.
   admin:
     dashboard:
       title: 'Admin'

config/locales/en.yml

@@ -88,6 +88,8 @@ en:
     becoming_sponsor: "Becoming a sponsor"
     faq: "FAQ"
     blog: "Blog"
+    cookies: 'Cookies'
+    privacy-policy: 'Privacy Policy'
   dashboard:
     join_workshops_in: "Join our <i>free</i> workshops in"
     workshops_goal: "to get to grips with the basics of programming and web development."
@@ -346,6 +348,78 @@ en:
           pay: Make a payment
       edit:
         title: Edit job listing
+  pages:
+    cookies:
+      title: Cookies
+      p1: 'Cookies are small pieces of text used to store information on web browsers. They are used by websites accross a number of different devices to store and receive identifiers and other information. Our Website and Service use cookies and other similar technologies (collectively in this Policy, "cookies"), in order to provide a better service to you and to generally improve our Website and Service. For example, we may use cookies to help direct you to the appropriate part of our Website, by indicating that you are a repeat visitor. We also may use information to present you with services that are matched to your preferences and to manage and track the effectiveness of our marketing efforts.'
+      p2: Some portions of the codebar website are functional without cookies, and you may generally choose whether to accept cookies. Most web browsers are set to accept cookies by default, however, you may be able to delete cookies yourself through your browser's cookie manager. To do so, please follow the instructions provided by your web browser. Please note that disabling cookies will reset your session, disable auto-login, and may adversely affect the availability and functionality of our Website and the services we can provide to you.
+      sub:
+        title: Below the cookies used by the codebar website.
+      functional:
+        title: Functional Cookies
+        description: Stores information about your session.
+        planner: Stores session data
+        planner_expiry: Expires after 24 hours
+      google_analytics:
+        title: Google Analytics
+        description: Google Analytics  collects information about how you use the codebar website. This enables us to identify how busy the website is and possible improvements.
+        info: We don’t allow Google to use or share our analytics data.
+        opt_out: You can [opt out of Google Analytics](https://tools.google.com/dlpage/gaoptout).
+        ga: Tracks if you have visited codebar.io before
+        ga_expiry: After 2 years
+        gid: Tracks if you have visited codebar.io before
+        gid_expiry: After 24 hours
+      cloudflare:
+        title: Cloudflare
+        cfduid: Used to identify individual clients behind a shared IP address and apply security settings on a per-client basis.
+        cfduid_expiry: '1 year'
+    privacy_policy:
+      title: Privacy Policy
+      subtitle: Your privacy matters to us
+      p1: 'Your privacy means a lot to us, and we take it very seriously. We aim to be transparent with you about the data we collect about you and how it is used and shared. By signing up to our workshops you consent to our use of your data under this Privacy Policy. The document below has been created by codebar whose companies house registered name and address is as follows:'
+      address_html: '
+        codebar Ltd,<br/>
+        International House,<br/>
+        24 Holborn Viaduct,<br/>
+        London,<br/>
+        England,<br/>
+        EC1A 2BN<br/>
+        Company No. 10791813<br/>'
+      information:
+        title: 1. Information we collect
+        description: We do not share any of your information with any third parties without your consent. We also do not sell your contact information or use it for marketing purposes.
+        subscribing_html: '**1.1 Subscribing to an event**<br/>
+        We share your name with our host companies as we are required to provide a list with all attendee names when you subscribe to any of our events. We **do not share** your email address or any other personal information.'
+        cookies_html: '**1.2 Cookie Policy**<br/>
+        We use cookies to recognize you and your location. You can control cookies through your browser settings and other tools. For more information read our [cookie policy](/cookie_policy).'
+        usage_html:  '**1.3 How we use information we collect**<br/>
+        The legal basis on which we collect and process your data is “legitimate interest”. This is because we collect and store your data in order to process event information.'
+      your_rights:
+        title: 2. Your rights, choices and obligations
+        rights_html: '
+          **2.1 Your rights**<br/>
+          Data protection law provides you with rights in respect of personal data that we hold about you, including the right to request a copy of the personal data and request that we rectify, restrict or delete your data.
+          If you would like to exercise any of these rights please email us at company@codebar.io.
+          If you have a complaint about how we handle your data, please get in touch with us at company@codebar.io. If you are not happy about the way a complaint has been handled, you have the right to refer your complaint to the Information Commissioner’s Office.'
+        data_retention_html: '
+          **2.2 Data retention**<br/>
+          We will retain your data for as long as necessary to provide our services to you and fulfil transactions you have requested. If at any point you wish us to delete your data please email company@codebar.io.'
+        personal_data_access_html: '
+          **2.3 Right to Access and Control Your Personal Data**<br/>
+          You can request a copy of the data we hold about you, or request that we delete any data we hold on you. You can also ask us to correct, update or delete any inaccurate personal data that we hold about you. Just email us at company@codebar.io at any time.  We aim to process requests for data records or deletion within two weeks of receipt.'
+        access_and_portability_html: '
+          **2.4 Data Access and Portability**<br/>
+          You have the right to request a copy of the personal information we hold about you in a structured, electronic format. If you wish to receive a copy of the information we hold about you, please email company@codebar.io.'
+      security:
+        title: 3. Security
+        text: From time to time we implement and update administrative, technical, and physical security measures to help protect your information against unauthorised access, loss, destruction, or alteration. However, the Internet is not a 100% secure environment so we can’t guarantee the security of the transmission or storage of your information.
+      changes:
+        title: 4. Changes to this privacy policy
+        text: We reserve the right to modify this Privacy Policy at any time in accordance with this provision. If we make changes to this Privacy Policy, we will post the revised Privacy Policy on the codebar website. If you disagree with the revised Privacy Policy, you may ask us to remove your information from our systems pleas email company@codebar.io.
+      contact:
+        title: 5. Contact
+        text: If you have any questions or complaints about this Privacy Policy or our information handling practices, you may email us company@codebar.io stating 'Data inquiry' in the subject title.
+
   admin:
     dashboard:
       title: 'Admin'