DevHeads.net

GDPR, privacy notices - any action required for individual projects?

Hi!

A co-developer recently pointed out that EU General Data Protection
Regulation (GDPR) is going to come into effect, soon (May 25th). To my
_very_ limited understanding, this will require privacy notices on all
websites. I see some kde.org sites already have one (e.g.
<a href="https://community.kde.org/KDE_Community_Wiki:Privacy_policy" title="https://community.kde.org/KDE_Community_Wiki:Privacy_policy">https://community.kde.org/KDE_Community_Wiki:Privacy_policy</a>), but I
wonder about sites "belonging" to individual projects (but managed
by our tireless sysadmins) such as <a href="https://kate.kde.org" title="https://kate.kde.org">https://kate.kde.org</a> and
<a href="https://rkward.kde.org" title="https://rkward.kde.org">https://rkward.kde.org</a>.

More specifically, am I, as a project maintainer, responsible for
adding a similar notice to <a href="https://rkward.kde.org" title="https://rkward.kde.org">https://rkward.kde.org</a>, and if so, is there
a recommended common practice, such as copying or linking to some
KDE.org-global policy page?

Regards
Thomas