From 4bb13bf8409101d2f16187ba323e501dca9100fb Mon Sep 17 00:00:00 2001 From: vd Date: Sun, 11 Oct 2026 12:23:39 +0000 Subject: [PATCH] Add privacy-en.md --- privacy-en.md | 49 +++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) create mode 100644 privacy-en.md diff --git a/privacy-en.md b/privacy-en.md new file mode 100644 index 0000000..0224518 --- /dev/null +++ b/privacy-en.md @@ -0,0 +1,49 @@ +[[https://vdpr.org/VDMDI/.resources/raw/branch/main/vdpol-logo-pr.png]] +=== + +Privacy Policy +=== + +This policy defines how the Viridian Administration collects, stores, and handles data through the VDPR server (vdpr.org). + +What is VDPR? +--- + +VDPR is a customized gitea server. The administration of this server has not implemented telemetry or other means of data collection in addition to gitea defaults. Gitea does not employ telemetry or other means of data collection, except for data necessary to operate the server. + +Hosting and Infrastructure +--- + +VDPR is hosted on IONOS infrastructure. Data may be processed by IONOS. A Data Processing Agreement (Auftragsverarbeitungsvertrag) has been concluded with IONOS SE pursuant to Art. 28 GDPR to ensure compliant and secure data processing. You may reach IONOS at: + +IONOS SE
+Elgendorfer Str. 57
+56410 Montabaur
+Deutschland
+Mail: datenschutz@ionos.de + +What might be recorded +--- +1. User sessions and activity - log-ins, pages you access, as well as data about your devices including IP address, browser, operating system, and similar information: this data may be stored in server logs. Logs are deleted after seven days. *This is a legitimate interest pursuant to Art. 6(1)(f) GDPR (ensuring system stability, preventing abuse/attacks)* +2. Changes made on repositories and organisations, tickets filed, comments; including private organisations and repositories: modifications you make to data on the VDPR server can be traced back to you. Data you store on VDPR, including but not limited to uploaded files, created repositories or organisations, tickets, comments, are stored until deleted by you or the Viridian Administration. *This processing is necessary for the performance of a contract or service pursuant to Art. 6(1)(b) GDPR (provision of the Gitea platform).* + +Your personal data +--- +1. When signing up for an account on VDPR, you are required to disclose the following data: + 1. full name + 2. username + 3. e-mail address (can be hidden, **visible to other users by default**) +2. This data, alongside other information you voluntarily add to your profile, is publicly visible to others unless you manually change visibility settings. + +Processing +--- +1. The Viridian Administration may look at your full name and e-mail address in order to contact you. +2. The Viridian Administration may review server logs for security reasons. +3. The Viridian Administration may observe all changes you make on VDPR, including but not limited to the creation of organisations, repositories, and tickets, as well as creation, upload, and modification of files. + +Your rights +--- +1. You may contact the Viridian Administration in order to obtain information about, or to request changes to or deletion of your data at all times. +2. You have the right to object to the storage and processing of your data by deleting your data from VDPR. You may do this manually or by contacting the Viridian Administration. +3. You cannot delete or modify individual commits made on a repository. This is due to the nature of git services. +4. You may lodge a complaint with a data protection supervisory authority, free of charge and without any formal requirements, if you believe the processing of your personal data infringes the GDPR. \ No newline at end of file