Yrittäjä WIKI:Privacy policy

Privacy Policy

Effective Date: October 30, 2026. Jurisdiction: Finland (EU)

This document has been prepared in accordance with the European Union’s General Data Protection Regulation (GDPR, 2016/679) and the Finnish Data Protection Act (Tietosuojalaki 1050/2018). This document sets forth the principles governing the collection, storage, and protection of user information on the open, moderated knowledge base Yrittäjä WIKI.

1. Data Controller

Project Name: Yrittäjä Wiki

Person in Charge, Management and Development: Renas Media, Y-3546398-8, contact@renasmedia.com

2. Data Processing Register (Specification)

Data collection is strictly limited to ensuring the operability of the MediaWiki-based platform, protecting the infrastructure, and maintaining the transparency of the open knowledge base. Depending on the level of interaction with the platform, data is divided into the following categories:

Website visitors (unauthorized readers)

Data collected: IP address, browser technical data (User-Agent), request time, and URLs of visited pages. Purpose of processing: Ensuring network security, protecting the infrastructure from DDoS attacks and spam, and maintaining server logs. Legal basis (GDPR): Article 6(1)(f)—the controller’s legitimate interest in protecting and ensuring the stable operation of the IT infrastructure.

Retention period: Server logs are stored for 30 to 90 days, after which they are automatically deleted.

Registered Users and Editors

Data Collected: Username, email address, cryptographic hash of the password, and edit history (which may record the IP address at the time of registration or when changes are made). Purpose of processing: To identify content authors, moderate the knowledge base, provide a password recovery mechanism, and comply with the legal terms of open licenses (attribution of authorship). Legal basis (GDPR): Article 6(1)(b)—processing is necessary for the performance of the user agreement.

Retention period: The email address is stored until the account is deleted. The edit history and username are retained indefinitely and are publicly accessible to verify the integrity and authorship of articles.

Team Members and Volunteers

Data Collected: Name or username, project role, profile photo, contact email, and external links. Purpose of Processing: Public acknowledgment of contributions to the platform’s development and transparent presentation of the project team to the community. Legal basis (GDPR): Article 6(1)(a) — explicit, informed, and voluntary consent of the data subject.

Retention period: Data is processed and published until the data subject withdraws consent (by requesting the administration to delete the profile card).