Privacy Policy DSGVO with sheets for categories, export-, check- and first erase-functions

docs/version-history/README.md

@@ -159,3 +159,6 @@ Older notes are concise English summaries migrated from the original release doc
 ## Update instructions
 
 See [UPDATE-NOTE.md](UPDATE-NOTE.md).
+
+- [0.5.5.39](UPDATE-0.5.5.39.md) – Privacy read-only tabs and permission-aware dashboard counts.
+- [0.5.5.40](UPDATE-0.5.5.40.md) – Privacy exports available to all authenticated users.

docs/version-history/UPDATE-0.5.5.36.md

@@ -0,0 +1,11 @@
+# AssetManager 0.5.5.36
+
+## Security and privacy documentation – phase 1
+
+- Added **Settings → Security & privacy**.
+- Added configurable processing-activity metadata, purposes, recipients, third-country transfer information, systems, backup retention and review information.
+- Added editable personal-data categories with retention type, period, trigger, manual deletion procedure, backup treatment and responsible role.
+- Added initial AssetManager and MeshCentral categories based on the documented remote-support and inventory processing activity.
+- Added a policy audit log that records configuration changes and report exports without copying deleted personal data.
+- Added structured text and Excel exports for review by a data protection officer.
+- Automatic deletion is deliberately not executed in this first phase. The settings prepare a later dry-run and controlled deletion implementation.

docs/version-history/UPDATE-0.5.5.37.md

@@ -0,0 +1,11 @@
+# AssetManager 0.5.5.37
+
+## Privacy report and category user interface
+
+- Fixed the privacy Excel export by returning validated complete XLSX bytes.
+- Added protection against invalid control characters and oversized Excel cell content.
+- Added localized worksheet names and column headings.
+- Added a standalone HTML privacy report export.
+- Replaced the expanded category cards with worksheet-style tabs.
+- Categories can still be added, renamed and removed without changing the stored data model.
+- Automatic deletion remains disabled in privacy phase 1.

docs/version-history/UPDATE-0.5.5.38.md

@@ -0,0 +1,16 @@
+# AssetManager 0.5.5.38
+
+## Security and privacy phase 2
+
+- makes the security and privacy documentation readable for all authenticated users
+- restricts changes, retention checks and deletion runs to administrators
+- protects built-in privacy categories from removal while custom categories remain removable
+- adds retention dry runs and manually confirmed deletion actions for job payloads and diagnostic logs
+- records checks and deletion runs in a separate privacy deletion audit log without copying deleted personal content
+- keeps automatic deletion disabled
+- fixes the HTML report browser title to "Record of Processing Activities / Retention Concept"
+
+### Implemented manual retention handlers
+
+- **Job scripts, output, callback payloads and diagnostics:** clears payload and diagnostic fields of completed jobs older than the configured retention period while retaining job metadata.
+- **Application, LDAP and diagnostic logs:** deletes old log files and truncates active log files older than the configured retention period. Privacy policy and deletion audit logs are excluded.

docs/version-history/UPDATE-0.5.5.39.md

@@ -0,0 +1,8 @@
+# Version 0.5.5.39
+
+## Privacy read-only navigation and dashboard permission counts
+
+- Fixed privacy category tabs for non-administrator users. Read-only users can now switch between all category tabs while fields and editing actions remain protected.
+- Dashboard category cards now count only assets visible to the signed-in user according to the configured asset access rules.
+- Dashboard charts and recently changed assets continue to use the same permission-aware asset scope.
+- Removed the implicit loading of all category assets solely to calculate card counts.

docs/version-history/UPDATE-0.5.5.40.md

@@ -0,0 +1,7 @@
+# Version 0.5.5.40
+
+## Changes
+
+- Privacy text, HTML, and Excel exports are now available to every authenticated user.
+- Editing privacy settings, running retention previews, and executing deletions remain restricted to administrators.
+- Privacy export audit entries record the authenticated user who initiated the export.