From 47d6d81b798ec3ed467e0f4339c98c8a6b80cecd Mon Sep 17 00:00:00 2001
From: Yassine Doghri <yassine@doghri.fr>
Date: Thu, 29 Sep 2022 14:08:58 +0000
Subject: [PATCH] feat(gdpr): add purpose for granting access to premium
 content

---
 GDPR.txt                    | 12 ++++++++++++
 public/.well-known/GDPR.yml | 11 +++++++++++
 2 files changed, 23 insertions(+)

diff --git a/GDPR.txt b/GDPR.txt
index f8f7f13c..a7336bac 100644
--- a/GDPR.txt
+++ b/GDPR.txt
@@ -69,3 +69,15 @@ description:
     platforms (such as Apple Podcasts).
 mitigation:
     The e-mail can be generic.
+
+purpose: Grant access to premium content
+lawfulness: legitimate interest
+
+data: Subscriber's email address
+required: yes
+visibility: administrators
+description:
+    The subscriber's e-mail address is used to provide credentials for
+    listening to premium content.
+mitigation:
+    The e-mail can be generic.
diff --git a/public/.well-known/GDPR.yml b/public/.well-known/GDPR.yml
index 40c822ba..dba6d271 100644
--- a/public/.well-known/GDPR.yml
+++ b/public/.well-known/GDPR.yml
@@ -73,3 +73,14 @@ purposes:
           platforms (such as Apple Podcasts).
         mitigation: The e-mail can be generic.
         retention: forever
+  - description: Grant access to premium content
+    lawfulness: legitimate interest
+    data:
+      - field: Subscriber's email address
+        required: yes
+        visibility: administrators
+        description: |
+          The subscriber's e-mail address is used to provide credentials for
+          listening to premium content.
+        mitigation: The e-mail can be generic.
+        retention: until the subscription ends