Datenschutz

From Spielkarten-Wiki
Jump to navigation Jump to search

This is a short English summary of our data-protection notice under Art. 13 GDPR. The German version above is legally binding; in case of any discrepancy, the German text governs'.

Controller

TALON – Österreichischer Spielkartenverein (Austrian Playing-Card Society), General Arnold Straße 13, 5020 Salzburg, Austria. Contact for data-protection questions: kontakt@spielkarten.wiki (full details in the legal notice).

Reading the wiki

Reading a page leaves a log entry (IP address, time, requested address, status code, and, if sent by the browser, browser identifier and referring page), kept in a fixed-size rolling buffer for the technical operation and security of the site (Art. 6(1)(f) GDPR) and never evaluated further or matched with other data. There is no visitor counting, no analytics and no sharing of logs with third parties.

No cookies are set while merely reading. Logging in sets a session cookie and, where applicable, a cookie for the chosen interface language. There are no analytics or advertising cookies and no advertising networks — hence no consent banner: there is nothing to consent to.

Third-party connections

Everything needed to display a page — images, style sheets, scripts and fonts — comes from our own server; reading the wiki makes no connection to any other provider. The one exception: three search tools that open a map (pack search in the "timeline and map" view, maker search once you select a maker, and the collections atlas) fetch map tiles from OpenStreetMap (`tile.openstreetmap.org`, OpenStreetMap Foundation, UK) and place coordinates from Wikidata (`www.wikidata.org`, Wikimedia Foundation, Inc., San Francisco, USA); your browser contacts them directly and thereby sends your IP address and the usual browser information to servers outside the European Union. Anyone who does not open a map does not connect to either of them. Ordinary links to other websites are unaffected — only following one tells that site about your visit.

User accounts

Accounts are created by the administration only; there is no self-registration. We store the chosen username, an encrypted password value and, if given, an email address (not visible to other users). The username is public and permanently visible; it may be a pseudonym, but a real name chosen as username is published permanently.

The edit history

Every edit is recorded permanently and publicly with username, timestamp and the full change — this is the point of a wiki, not a side effect: traceability of every statement is the basis of a reference work's credibility. As a consequence, deleting individual contributions from the edit history is not straightforwardly possible without breaking the context of later edits; the right to erasure under Art. 17 GDPR is in tension with how the system works. Anyone who does not want this should not contribute under their real name. Visitors who are not logged in cannot edit — as a side effect, no IP address is ever recorded in the public edit history, unlike in many open wikis.

Hosting and backups

The server is operated on our behalf by Hetzner Online GmbH, Germany, with the machine located in Helsinki, Finland — within the European Union, under a data processing agreement (Art. 28 GDPR). A daily backup is kept off-site with OVH SAS (OVHcloud), in the Frankfurt am Main, Germany data centre — also within the EU, encrypted before transfer. Older backups are kept on a rolling schedule (the last seven days, then four weekly and six monthly states) and then deleted.

Your rights

You have the right to access, rectification, erasure and restriction of processing, and to object to processing — within the limits described above for the edit history. Contact kontakt@spielkarten.wiki. You may also contact the supervisory authority:

Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42, 1030 Vienna, Austria
dsb@dsb.gv.at

See also: Impressum (with an English summary).