Page MenuHomePhabricator

List Matomo in our "Registerförteckning" and create a "rensningsrutin"
Closed, ResolvedPublic

Description

With Matomo up and running we should add it to our information asset register and define a retention schedule

Event Timeline

First draft:

TypLagringsplatsSyfteRättslig grundSäkerhetsklassRensningspolicyKommentar
WebbstatistikMatomoKunna analysera beteendet för besökarna på våra webbplatser för att förbättre webbplatsernas funktion.Intresseavvägning för vårt berättigade intresse att upprätthålla en webbplats som effektivt förmedlar det vi önskar.1Rådata om besök och handlingar rensas efter 180 dagar.IP-nummer maskeras direkt vid registrering (enbart 2 byte sparas). För fördjupande information om vad som kan samlas in se 1.

@Evelina-Bang-WMSE @Sebastian_Berlin-WMSE @Historiker @Jopparn any feedback is welcome.

The link in the comment would probably be something to add as a footnote from Integritetspolicy#Webbplatser instead.

@Sebastian_Berlin-WMSE Where did I get the 180 days from? Didn't Matomo also have a page about the potential risk of holding on to the aggregate reports?

@Sebastian_Berlin-WMSE Where did I get the 180 days from?

From the FAQ: "3) for Privacy reasons, it is sometimes recommended to keep detailed logs only for 6 months or so, and remove older data."

Didn't Matomo also have a page about the potential risk of holding on to the aggregate reports?

In the same FAQ they write about deleting reports, but only as a way to save disk space.

I also just realized that since we have automatic backups for the server, some data will be kept up to one year longer.

I think the addition looks good. Please go ahead.

Jopparn triaged this task as High priority.Nov 11 2019, 4:01 PM

The link in the comment would probably be something to add as a footnote from Integritetspolicy#Webbplatser instead.

This would likely require a board approval right?

@Sebastian_Berlin-WMSE Where did I get the 180 days from?

From the FAQ: "3) for Privacy reasons, it is sometimes recommended to keep detailed logs only for 6 months or so, and remove older data."

Didn't Matomo also have a page about the potential risk of holding on to the aggregate reports?

In the same FAQ they write about deleting reports, but only as a way to save disk space.

Thanks

I also just realized that since we have automatic backups for the server, some data will be kept up to one year longer.

Good point. I'll add a note about this to our rensingsinstruktion document. What we may want to do is manually delete any very old backups as part of the October data purge.

Lokal_Profil claimed this task.
Lokal_Profil moved this task from Backlog to Done on the WMSE-Organisational-Development-2019 board.
Lokal_Profil moved this task from 📆 This week to ☑️ Done on the User-LokalProfil board.
Lokal_Profil reassigned this task from Lokal_Profil to Sebastian_Berlin-WMSE.

I also just realized that since we have automatic backups for the server, some data will be kept up to one year longer.

Good point. I'll add a note about this to our rensingsinstruktion document. What we may want to do is manually delete any very old backups as part of the October data purge.

I made it clear in the rensingsrutin that data might get stored up to 6 months extra as part of the server backup.

Sebastian will also:

  1. Limit backup of this server to 6 months
  2. Actually activate the 180 purge routine.

Assigning the task to him for these two parts

The longest server backup interval is now set to 6 months (technically 26 weeks due to limitations on the server side).

  1. Limit backup of this server to 6 months

The longest server backup interval is now set to 6 months (technically 26 weeks due to limitations on the server side).

  1. Actually activate the 180 purge routine.

This is now turned on. Note that all sites for this Matomo-installation will have the same settings.

Lokal_Profil claimed this task.

The longest server backup interval is now set to 6 months (technically 26 weeks due to limitations on the server side).

  1. Limit backup of this server to 6 months

The longest server backup interval is now set to 6 months (technically 26 weeks due to limitations on the server side).

  1. Actually activate the 180 purge routine.

This is now turned on. Note that all sites for this Matomo-installation will have the same settings.

Thanks