From 51b347033021a4b29e61702b1dee7f3f2f392fa5 Mon Sep 17 00:00:00 2001 From: vd Date: Tue, 13 Oct 2026 14:59:35 +0000 Subject: [PATCH] Update privacy-en.md --- privacy-en.md | 23 ++++++++++++++++++----- 1 file changed, 18 insertions(+), 5 deletions(-) diff --git a/privacy-en.md b/privacy-en.md index 45fd1d3..861f321 100644 --- a/privacy-en.md +++ b/privacy-en.md @@ -1,7 +1,7 @@ [[https://vdpr.org/VDMDI/.resources/raw/branch/main/vdpol-logo-pr.png]] --- -Viridian Public Privacy Policy (VDPrivP) / Second Revision +Viridian Public Privacy Policy (VDPrivP) / Third Revision === The Viridian Public Privacy Policy (VDPrivP) defines how the Viridian Administration collects, stores, and handles data through the VDPR server (vdpr.org). @@ -18,8 +18,9 @@ VDPR is hosted on rented infrastructure. For more information, review the [VDMDI 3: Processing --- -1. User sessions and activity - log-ins, pages you access, as well as data about your devices including IP address, browser, operating system, and similar information: this data may be stored in server logs. Logs are deleted after seven days. *This processing is based on a legitimate interest pursuant to Art. 6(1)(f) GDPR (ensuring system stability, preventing abuse/attacks)* +1. User sessions and activity - log-ins, pages you access, as well as data about your devices including IP address, browser, operating system, and similar information: this data may be stored in server logs. Logs are deleted after seven days. VDPR utilizes strictly necessary session and security cookies (such as CSRF protection tokens and login session identifiers) to provide authentication. *This processing is based on a legitimate interest pursuant to Art. 6(1)(f) GDPR (ensuring system stability, preventing abuse/attacks)* 2. Changes made on repositories and organisations, tickets filed, comments; including private organisations and repositories: modifications you make to data on the VDPR server can be traced back to you. Data you store on VDPR, including but not limited to uploaded files, created repositories or organisations, tickets, comments, are stored until deleted by you or the Viridian Administration. *This processing is necessary for the performance of a contract or service pursuant to Art. 6(1)(b) GDPR (provision of the Gitea platform).* +3. Violations of Viridian Public Policy in accordance with section seven of this policy. 4: Your personal data --- @@ -37,7 +38,19 @@ VDPR is hosted on rented infrastructure. For more information, review the [VDMDI 6: Your rights --- -1. You may contact the Viridian Administration in order to obtain information about, or to request changes to or deletion of your data at all times. +1. You may contact the Viridian Administration in order to obtain information about, or to request changes to or deletion of your data at all times (Arts. 15, 16, and 17 GDPR). Data regarding your violations of Viridian Public Policy is retained in accordance with section seven of this policy. 2. You have the right to object to the storage and processing of your data on VDPR by contacting the Viridian Administration. Such objection may be overridden under Art. 21(1) GDPR. -3. You cannot delete or modify individual commits made on a repository. This is due to the nature of git services. -4. You may lodge a complaint with a data protection supervisory authority, free of charge and without any formal requirements, if you believe the processing of your personal data infringes the GDPR. \ No newline at end of file +3. You cannot delete or modify individual commits made on a repository. This is due to the nature of git services and pursuant to Art. 17(3)(d) GDPR (archiving purposes in the public interest / collaborative technical integrity). +4. You may lodge a complaint with a data protection supervisory authority, free of charge and without any formal requirements, if you believe the processing of your personal data infringes the GDPR. + +7: Retention of Data regarding Violations +--- +1. The Viridian Administration retains data regarding violations of Viridian Public Policy for every user who has breached such policy. *This processing is based on a legitimate interest pursuant to Art. 6(1)(f) GDPR (ensuring platform security and safety, preventing abuse/attacks)* +2. The following information is retained: + 1. The offender's account ID + 2. The offender's current penalty score + 3. Violations recognised by the Viridian Administration within the past three years, including the following information for each violation: + 1. Full name, username, and e-mail of the offender provided at the time of recognition of the violation + 2. The specific rules breached (quoted and cited) + 3. Evidence of violation in the form of screenshots +3. If you request deletion of your data under Art. 17 GDPR, data retained under subsection two is retained for a minimum of two but no more than three calendar years. *This retention is pursuant to Art. 17(3)(e) GDPR (necessary for defence of legal claims). VDPR is operated in Germany. Section 195 of the German Civil Code defines three years as the regular statutory limitation period for civil claims. The Viridian Administration is allowed to retain evidence regarding your violations during this period.* \ No newline at end of file