OpenVerse Wiki

OpenVerse Wiki:Privacy policy

Revision as of 10:46, 2 October 2026 by CollectiveIntelligenceAdmin (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Last updated: 2 October 2026

This Privacy Policy describes how the OpenVerse Wiki (https://wiki.open-verse.eu), operated by Martel GmbH ("we", "us", or "our"), collects and processes personal data. We are committed to protecting your privacy and handling your personal data in accordance with the Swiss Federal Act on Data Protection (revFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

As a public MediaWiki platform designed for collaborative open science and repository sharing, we collect and process personal data when you browse the wiki, create an account or log in (including via Single Sign-On from the OpenVerse Observatory), edit content, or interact with the platform.

1. Data Controller and Representatives

Data Controller (Switzerland)

The entity responsible for processing your personal data on this platform is:

Designated EU Representative (EEA)

Because Martel GmbH is established outside the European Economic Area (EEA), we have designated the following entity as our representative in the European Union under Article 27 of the GDPR:

  • Martel Innovate B.V.
    Keizersgracht 482, 1017 EG Amsterdam, Netherlands

2. Categories of Data Collected and Processed

A. User Account & Registration Data (including Single Sign-On)

When you register an account or log in to the OpenVerse Wiki—either directly or via Single Sign-On (SSO) from the OpenVerse Observatory (operated by Trust-IT Services)—we collect personal data necessary to establish and manage your user account.

  • Data Collected: Username, email address, password hash (for direct accounts), SSO authentication tokens/identifiers, account preferences, and registration timestamps.
  • Purpose & Legal Basis: Under Swiss revFADP (Art. 31(2)(a)) and GDPR (Art. 6(1)(b)), processing account data is necessary for the performance of a contract / service provision to authenticate your identity, provide account access, manage user permissions, and enable collaborative editing.

B. User Contributions, Edits, and Published Content

When you create, edit, or comment on wiki pages, upload files, or participate in discussions on the OpenVerse Wiki, your contributions are recorded by the platform.

  • Data Collected: Wiki text edits, uploaded files, revision histories, talk page posts, edit summaries, and associated timestamps.
  • Public Attribution: In accordance with standard MediaWiki functionality and open repository standards, your contributions and edits are publicly displayed and permanently linked to your username in the revision history of the relevant wiki pages.
  • Purpose & Legal Basis: Processing is necessary for service provision (Art. 6(1)(b) GDPR) and justified by our legitimate interests (Art. 6(1)(f) GDPR / FADP Art. 31(1)) in operating an open, transparent, and attribution-grounded repository for research and innovation.

C. Strictly Necessary Session & Authentication Cookies

This website uses strictly necessary cookies native to the MediaWiki platform.

  • Purpose: These cookies maintain your logged-in state (e.g., wikiUserID, wikiUserName, wikiToken), manage session security, save language preferences, and enable secure editing.
  • No Consent Required: Under Swiss FADP and EU ePrivacy rules, functional session cookies that are technically essential to deliver a requested service do not require user consent.

D. Essential Cybersecurity & Technical Connection Logs

When you access or log in to the wiki, our server infrastructure automatically logs standard technical connection data.

  • Data Logged: IP address, date and time of request, requested URL, HTTP status code, volume of data transferred, referrer URL, and browser User-Agent string.
  • Purpose & Legal Basis: Under Swiss revFADP (Art. 31(1)-(2)) and GDPR (Art. 6(1)(f)), logging technical connection data is justified by our overriding legitimate interests to defend against cyber-attacks, prevent spam/vandalism, and ensure system resilience.

E. Web Analytics (Matomo – Opt-In Only)

To understand how visitors use our wiki and improve platform navigation, we use an opt-in, self-hosted Matomo analytics instance.

  • Explicit Opt-In: Analytics scripts are loaded and cookies (_pk_id, _pk_ses) are set only if you give explicit consent via our cookie banner.
  • Privacy Controls: Matomo runs on Martel's EU cloud servers, IP addresses are anonymised at source, and no analytics data is shared with third parties.

3. Cloud Infrastructure, Processors & SSO Transfers

We partner with trusted service providers under formal Data Processing Agreements (DPAs):

  1. OpenVerse Observatory SSO (Trust-IT Services): When you log in via OpenVerse Observatory SSO, authentication credentials are exchanged between Trust-IT Services (Italy) and Martel GmbH (Switzerland) solely to authenticate your account.
  2. AWS Sovereign Cloud (Germany / European Union): All wiki databases, user account records, page histories, and server security logs are stored on physical AWS servers within the European Union (EU).
  3. Cloudflare (United States / Global): Web traffic is routed through Cloudflare to protect against malicious traffic and DDoS attacks, protected under EU/Swiss Standard Contractual Clauses (SCCs).

4. Data Retention and Erasure

  • Account Data: Account profile data is retained as long as your account remains active. You can delete your account at any time.
  • Wiki Edits & Public Contributions: To maintain the historical integrity, attribution, and open-license lineage of collaborative wiki content, public page edits, upload histories, and revision records are permanently retained in the wiki's public version history associated with your username.
  • Security Logs: Standard technical connection logs are automatically purged within 14 to 30 days, unless required for active cyber-threat investigation.
  • Session Cookies: Purged from your device when you log out or close your browser session.

5. Your Statutory Rights

Under the Swiss revFADP and GDPR, you have statutory rights regarding your personal data:

  • Right of Access (Art. 25 FADP / Art. 15 GDPR): Request confirmation and a copy of your personal data.
  • Right to Rectification (Art. 32 FADP / Art. 16 GDPR): Request correction of inaccurate personal details.
  • Right to Erasure (Art. 32 FADP / Art. 17 GDPR): Request deletion of personal data, subject to legal obligations and public wiki edit attribution requirements.
  • Right to Restriction & Object (Art. 32 FADP / Art. 18 & 21 GDPR): Restrict or object to processing based on legitimate interests.
  • Right to Data Portability (Art. 28 FADP / Art. 20 GDPR): Request your personal data in a structured format.

To exercise these rights, contact us directly at [email protected].

Supervisory Authority Complaints

  • In Switzerland: Swiss Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, CH-3003 Bern (www.edoeb.admin.ch).
  • In the EU/EEA: Your local national Data Protection Authority (DPA).
Retrieved from "https://wiki.open-verse.eu/index.php?title=OpenVerse_Wiki:Privacy_policy&oldid=631"