Yrittäjä WIKI:Privacy policy: Difference between revisions
More actions
No edit summary |
No edit summary |
||
| Line 17: | Line 17: | ||
Data collection is strictly limited to ensuring the operability of the MediaWiki-based platform, protecting the infrastructure, and maintaining the transparency of the open knowledge base. Depending on the level of interaction with the platform, data is divided into the following categories: | Data collection is strictly limited to ensuring the operability of the MediaWiki-based platform, protecting the infrastructure, and maintaining the transparency of the open knowledge base. Depending on the level of interaction with the platform, data is divided into the following categories: | ||
''Website visitors (unauthorized readers)'' | ''Website visitors (unauthorized readers).'' | ||
Data collected: IP address, browser technical data (User-Agent), request time, and URLs of visited pages. Purpose of processing: Ensuring network security, protecting the infrastructure from DDoS attacks and spam, and maintaining server logs. Legal basis (GDPR): Article 6(1)(f)—the controller’s legitimate interest in protecting and ensuring the stable operation of the IT infrastructure. | Data collected: IP address, browser technical data (User-Agent), request time, and URLs of visited pages. Purpose of processing: Ensuring network security, protecting the infrastructure from DDoS attacks and spam, and maintaining server logs. Legal basis (GDPR): Article 6(1)(f)—the controller’s legitimate interest in protecting and ensuring the stable operation of the IT infrastructure. | ||
Retention period: Server logs are stored for 30 to 90 days, after which they are automatically deleted. | Retention period: Server logs are stored for 30 to 90 days, after which they are automatically deleted. | ||
''Registered Users and Editors'' | ''Registered Users and Editors.'' | ||
Data Collected: Username, email address, cryptographic hash of the password, and edit history (which may record the IP address at the time of registration or when changes are made). Purpose of processing: To identify content authors, moderate the knowledge base, provide a password recovery mechanism, and comply with the legal terms of open licenses (attribution of authorship). Legal basis (GDPR): Article 6(1)(b)—processing is necessary for the performance of the user agreement. | Data Collected: Username, email address, cryptographic hash of the password, and edit history (which may record the IP address at the time of registration or when changes are made). Purpose of processing: To identify content authors, moderate the knowledge base, provide a password recovery mechanism, and comply with the legal terms of open licenses (attribution of authorship). Legal basis (GDPR): Article 6(1)(b)—processing is necessary for the performance of the user agreement. | ||
Retention period: The email address is stored until the account is deleted. The edit history and username are retained indefinitely and are publicly accessible to verify the integrity and authorship of articles. | Retention period: The email address is stored until the account is deleted. The edit history and username are retained indefinitely and are publicly accessible to verify the integrity and authorship of articles. | ||
''Team Members and Volunteers'' | ''Team Members and Volunteers.'' | ||
Data Collected: Name or username, project role, profile photo, contact email, and external links. Purpose of Processing: Public acknowledgment of contributions to the platform’s development and transparent presentation of the project team to the community. | Data Collected: Name or username, project role, profile photo, contact email, and external links. Purpose of Processing: Public acknowledgment of contributions to the platform’s development and transparent presentation of the project team to the community. | ||
Legal basis (GDPR): Article 6(1)(a) — explicit, informed, and voluntary consent of the data subject. | Legal basis (GDPR): Article 6(1)(a) — explicit, informed, and voluntary consent of the data subject. | ||
Revision as of 05:14, 30 October 2026
Privacy Policy
Effective Date: October 30, 2026. Jurisdiction: Finland (EU)
This document has been prepared in accordance with the European Union’s General Data Protection Regulation (GDPR, 2016/679) and the Finnish Data Protection Act (Tietosuojalaki 1050/2018). This document sets forth the principles governing the collection, storage, and protection of user information on the open, moderated knowledge base Yrittäjä WIKI.
1. Data Controller
Project Name: Yrittäjä Wiki
Person in Charge, Management and Development: Renas Media, Y-3546398-8, contact@renasmedia.com
2. Data Processing Register (Specification)
Data collection is strictly limited to ensuring the operability of the MediaWiki-based platform, protecting the infrastructure, and maintaining the transparency of the open knowledge base. Depending on the level of interaction with the platform, data is divided into the following categories:
Website visitors (unauthorized readers). Data collected: IP address, browser technical data (User-Agent), request time, and URLs of visited pages. Purpose of processing: Ensuring network security, protecting the infrastructure from DDoS attacks and spam, and maintaining server logs. Legal basis (GDPR): Article 6(1)(f)—the controller’s legitimate interest in protecting and ensuring the stable operation of the IT infrastructure.
Retention period: Server logs are stored for 30 to 90 days, after which they are automatically deleted.
Registered Users and Editors. Data Collected: Username, email address, cryptographic hash of the password, and edit history (which may record the IP address at the time of registration or when changes are made). Purpose of processing: To identify content authors, moderate the knowledge base, provide a password recovery mechanism, and comply with the legal terms of open licenses (attribution of authorship). Legal basis (GDPR): Article 6(1)(b)—processing is necessary for the performance of the user agreement.
Retention period: The email address is stored until the account is deleted. The edit history and username are retained indefinitely and are publicly accessible to verify the integrity and authorship of articles.
Team Members and Volunteers. Data Collected: Name or username, project role, profile photo, contact email, and external links. Purpose of Processing: Public acknowledgment of contributions to the platform’s development and transparent presentation of the project team to the community. Legal basis (GDPR): Article 6(1)(a) — explicit, informed, and voluntary consent of the data subject.
Retention period: Data is processed and published until the data subject withdraws consent (by requesting the administration to delete the profile card).