...
GÉANT is the body which is responsible for the international coordination and interoperability of eduroam. As such GÉANT operates a number of services for the eduroam community, from the technical infrastructure at the European level to supporting services aimed for the world-wide community.Those services are maintained by eduroam Operations Team (OT). This privacy policy concerns part of the eduroam service that is operated and maintained by GÉANT including, but not limited to, the following services: the European level authentication proxy infrastructure, the eduroam database, the eduroam Configuration Assistant Tool (CAT), the eduroam F-ticks traffic measurement, portal with technical information about the service monitor.eduroam.org, eduroam wiki and website.
...
- When you roam and visit other countries, the European proxy servers will receive and log the following data: your realm (denoting your institution and federation) and MAC addresses. We can also receive your username if you have choosen to not anonymise this data. When you roam to another institution within your home country we don’t receive any data because the European proxy servers are not included in that process. The service has a legitimate interest in processing this information.
- When you roam and visit other countries or other institutions within your federation we may also process for monitoring, measuring and reporting services, ,in addition to the data mentioned above, the data about visited country, visited institution and authentication outcome. The service has a legitimate interest in processing this information. The service has a legitimate interest in processing this information..
- As part of supporting activities we maintain several public web sites (e.g. web of CAT service) where we collect normal web server logs, i.e. timestamp of access, IP address which requested the page, the page being requested, the HTML result code, etc. The data collected is for the purpose of troubleshooting and debugging potential problems of with eduroam web servers and therefore the service has a legitimate interest in processing this information.
- The eduroam Operations Team maintains a database where we collect data related to NROs, IdPS and SPs to enable supporting services and improve incident response and user support. The data is provided by the NROs based on the eduroam Policy.
- To ensure proper fuctioning of the eduroam Configuration Assistant Tool (CAT) we collect the identifers and e-mail addresses of the NRO and IdP admins responsible for the configurations that will be used be the end users.
TO DO: eduroam Managed IdP.
...
Personal data gathered for website statistics is only shared within the GÉANT Association and the eduroam Operational Team for analysis and reporting..
All other personal data is held and processed only by the eduroam OT. The contact information collected in the eduroam database is used by the OT and NROs in order to resolve securty incident and debug problems reported by the end users.
All other personal data is held and processed only by the eduroam OT.
Personal Data Retention
Analytical data for website statistics is currently retained permanently.
...