Differences

This shows you the differences between two versions of the page.

--- privacy_policy [2025/02/10 14:58] – formatting fix karelkubicek
+++ privacy_policy [2025/02/11 10:16] (current) – admin
@@ Line 1: / Line 1: @@
 ====== Privacy Policy ======
-  * Cookies are used to keep you logged in.
+===== In Brief =====
-  * We keep logs for debugging purposes.
+Hi, this is Karel! As administrator of MeasureTheWeb, we are processing some personal data. This privacy policy is meant to provide you with information regarding the processing of personal data that is taking place here.
+In a nutshell, these are our main data processing activities:
+  * if you just visit our page: we just show you the page. That's it.
+  * if you edit a page on MeasureTheWeb: to edit a page, you need an account. In the edit, you account identifier, username, and IP address (visible only to administrator) will be stored. Some cookies are technically necessary in this case.
+  * if you subscribe to modification of pages: we keep your email in a list and if you unsubscribe we delete it. That's it.
+  * in all cases: the hosting service runs anonymized statistics.
+If you have a problem or question, [[#contact|send us a message]] and we’ll take care of things!
+===== In Detail =====
+This privacy policy explains how we collect, use, and protect your personal data when you use MeasureTheWeb. We are committed to complying with the General Data Protection Regulation (GDPR) and the ePrivacy Directive. This policy applies to all users, particularly those within the European Union.
+==== Legal Basis for Processing ====
+We process your personal data of registered users based on the following legal bases:
+  * **Consent:** We rely on your consent for processing your email address for account registration and communication, as well as for storing the data associated with your wiki edits. You provide this consent during the registration process and when you contribute content.
+  * **Contractual Necessity:** Processing your username, name, and email address is necessary for providing you with the wiki services. Without this information, we cannot create and manage your account.
+  * **Legitimate Interest:** We collect IP addresses of users registering accounts that appear suspicious (e.g., using temporary email providers) to protect the website and its users from abuse and spam. Our legitimate interest is maintaining the integrity and security of the platform. We also use technical means to serve you the content faster (caching), which requires to keep some information about your connection. We base this processing on the ePrivacy Directive's Art. 5(3) having a "sole purpose of carrying out the transmission of a communication over an electronic communications network", i.e., to deliver the service, which is exempt from consent. Logging is anonymized and does not contain sensitive data.
+==== Data Collection and Use Purposes ====
+We collect the following types of data:
+  * **Registration Data:** When you register an account, you provide your username, name, and email address. We use this information to create and manage your account, to communicate with you about your account (e.g., password resets), and, if you have specifically opted in, to send you page content updates.
+  * **Content Data:** All edits you make on the wiki are stored under your username. Administrators can also view your email address and IP address associated with your edits. All content is shared under the [[https://creativecommons.org/licenses/by-nc-sa/4.0/deed.en|CC BY-NC-SA 4.0]] license. Do not store sensitive personal data on the wiki, as we cannot guarantee its complete removal from backups.
+  * **Log Data:** We collect anonymized information about errors (logs) occurring on the website to identify and fix issues. These logs do not typically include personal information. In cases of suspected abuse (e.g., spam account creation), we collect the IP addresses. Detailed logs (debug) are intentionally disabled.
+  * **Cookie Data:** We use cookies to keep you logged in and to improve website performance through caching. See our [[#cookies|Cookie Policy]] for details.
+==== Data Retention ====
+We retain your data for the following periods:
+  * **Log Data:** 14 days.
+  * **Content Data:** Content is kept indefinitely.
+  * **Metadata about Content (edit history):** Kept until the associated account is removed.
+  * **Registration Data:** Kept until the account is removed.
+==== Data Subject Rights ====
+You have the following rights regarding your personal data:
+  * **Right to Access:** You can view your account data in your account settings. For a complete overview of your contributions, please [[#contact|contact us]].
+  * **Right to Rectification:** You can correct your account information yourself through your account settings.
+  * **Right to Erasure ("Right to be Forgotten"):** You can remove your account. Upon removal, your contributions will be anonymized. Please note that while your username will no longer be associated with the edits, the content itself will remain under the CC BY-NC-SA 4.0 license.
+  * **Right to Restriction of Processing:** We collect the minimum information in order to provide this service. The possibility to further restrict the processing is limited.
+  * **Right to Data Portability:** We do not offer data portability.
+  * **Right to Object:** You can remove your account, which effectively objects to further processing.
+  * **Right to Withdraw Consent:** You can withdraw your consent for email subscription to content changes by unsubscribing. To stop any communication and remove data associated with your edits, remove your account.
+  * **Right to Lodge a Complaint:** You have the right to lodge a complaint with a supervisory authority. A list of EU data protection authorities can be found here: https://gdprhub.eu/index.php?title=Category:DPA
+You can exercise these rights by [[#contact|contacting us]].
+==== Third-Party Data Sharing ====
+We share data with our hosting provider, who may have access to more detailed server logs. We have appropriate safeguards in place to protect your data.
+==== Data Security ====
+We take reasonable measures to protect your data, including [[https://www.dokuwiki.org/config:passcrypt|strong protection of your passwords]] and hiding email addresses from regular users.
+==== Children's Data ====
+This website is intended for a university-level research audience and is not directed at children.
+==== Changes to the Privacy Policy ====
+We do not plan to modify the data processing practices documented on this page. However, if this were to happen, we will notify you of the updated privacy policy.
+==== Contact ====
+For privacy-related inquiries, please contact us at privacy@ the domain of this website.
+===== Cookies ======
+This is the list of cookies that we use.
+^ Cookie name    ^ Processing purpose ^ Storage period  ^
+| DokuWiki       | Necessary: used to hold temporary data and avoid CSRF attacks | Expires with closing the browser |
+| DOKU_PREFS     | Necessary: used to remember user preferences, like the size of the editor textarea. | Expires in a year from the last use |
+| DW<32 characters> | Necessary: used for authentication after login. It holds the necessary data to (re)login a previously authenticated user. | Expires in a year from the last use |
+| _lscache_vary | Necessary: used for faster content delivery (caching). | Expires with closing the browser |
+| lsc_private | Necessary: used for faster content delivery (caching). | Expires with closing the browser |
+| measwpnu_mw14665_mwgrfr__session | Statistical: Used for anonymized statistics collection by the hosting provider. | Expires with closing the browser |