First revision

cf. ticket 1
VDREL/Tickets#1
This commit is contained in:
vd
2026-10-12 00:33:25 +00:00
parent d541c16d83
commit fa8fb1776e
+9 -9
View File
@@ -1,17 +1,17 @@
[[https://vdpr.org/VDMDI/.resources/raw/branch/main/vdpol-logo-pr.png]]
---
Viridian Public Privacy Policy (VDPrivP)
Viridian Public Privacy Policy (VDPrivP) / First Revision
===
The Viridian Public Privacy Policy (VDPrivP) defines how the Viridian Administration collects, stores, and handles data through the VDPR server (vdpr.org).
What is VDPR?
1: What is VDPR?
---
VDPR is a customized gitea server. The administration of this server has not implemented telemetry or other means of data collection in addition to gitea defaults. Gitea does not employ telemetry or other means of data collection, except for data necessary to operate the server.
Hosting and Infrastructure
2: Hosting and Infrastructure
---
VDPR is hosted on IONOS infrastructure. Data may be processed by IONOS. A Data Processing Agreement (Auftragsverarbeitungsvertrag) has been concluded with IONOS SE pursuant to Art. 28 GDPR to ensure compliant and secure data processing. You may reach IONOS at:
@@ -22,12 +22,12 @@ Elgendorfer Str. 57<br>
Deutschland<br>
Mail: datenschutz@ionos.de
What might be recorded
3: What might be recorded
---
1. User sessions and activity - log-ins, pages you access, as well as data about your devices including IP address, browser, operating system, and similar information: this data may be stored in server logs. Logs are deleted after seven days. *This is a legitimate interest pursuant to Art. 6(1)(f) GDPR (ensuring system stability, preventing abuse/attacks)*
1. User sessions and activity - log-ins, pages you access, as well as data about your devices including IP address, browser, operating system, and similar information: this data may be stored in server logs. Logs are deleted after seven days. *This processing is based on a legitimate interest pursuant to Art. 6(1)(f) GDPR (ensuring system stability, preventing abuse/attacks)*
2. Changes made on repositories and organisations, tickets filed, comments; including private organisations and repositories: modifications you make to data on the VDPR server can be traced back to you. Data you store on VDPR, including but not limited to uploaded files, created repositories or organisations, tickets, comments, are stored until deleted by you or the Viridian Administration. *This processing is necessary for the performance of a contract or service pursuant to Art. 6(1)(b) GDPR (provision of the Gitea platform).*
Your personal data
4. Your personal data
---
1. When signing up for an account on VDPR, you are required to disclose the following data:
1. full name
@@ -35,15 +35,15 @@ Your personal data
3. e-mail address (can be hidden, **visible to other users by default**)
2. This data, alongside other information you voluntarily add to your profile, is publicly visible to others unless you manually change visibility settings.
Processing
5: Processing
---
1. The Viridian Administration may look at your full name and e-mail address in order to contact you.
2. The Viridian Administration may review server logs for security reasons.
3. The Viridian Administration may observe all changes you make on VDPR, including but not limited to the creation of organisations, repositories, and tickets, as well as creation, upload, and modification of files.
Your rights
6: Your rights
---
1. You may contact the Viridian Administration in order to obtain information about, or to request changes to or deletion of your data at all times.
2. You have the right to object to the storage and processing of your data by deleting your data from VDPR. You may do this manually or by contacting the Viridian Administration.
2. You have the right to object to the storage and processing of your data on VDPR by contacting the Viridian Administration. Such objection may be overridden under Art. 21(1) GDPR.
3. You cannot delete or modify individual commits made on a repository. This is due to the nature of git services.
4. You may lodge a complaint with a data protection supervisory authority, free of charge and without any formal requirements, if you believe the processing of your personal data infringes the GDPR.