Miraheze Offline Help

Tech:Data Processing Inventory

{{ {{outdated}} }}

At the Board meeting of October 23, 2020 a data processing inventory was suggested. This page is a draft.

Data processors

ProcessorWebsiteJurisdictionData processing agreementPurposeData
DigitalOcean, LLChttps://www.digitalocean.com/United Stateshttps://www.digitalocean.com/legal/data-processing-agreement/Hosting infrastructureUsernames, real names, email addresses, IP addresses, (private) wiki content, passwords, optional user information, other usage information
OVHhttps://www.ovh.co.uk/Francehttps://www.ovh.co.uk/support/termsofservice/Data%20Processing%20Agreement_UK.pdfHosting infrastructure
RamNode LLChttps://ramnode.com/United Stateshttps://www.ramnode.com/gdpr-dpa.pdfHosting infrastructureUsernames, real names, email addresses, IP addresses, (private) wiki content, passwords, optional user information, other usage information

Data processing

Data typeSubjectsLegal basisRetention dateProcessors
IP addressEditors, readersAnonymous editors: consent
CheckUser (registered editor): legitimate interests		Anonymous editing: indefinite (attribution mandatory by licensing)
CheckUser (registered editor): up to 90 days		DigitalOcean, OVH, RamNode
UsernamesRegistered editorsConsent (account may not be required 1)Indefinite (until account has been renamed or deleted by user or per GDPR request 2)DigitalOcean, OVH, RamNode
PasswordRegistered usersLegitimate interests (account security)Indefinite (until changed or removed by user or per GDPR request)DigitalOcean, OVH, RamNode
Email addressRegistered usersConsent (not required upon registration), legitimate interests (account security / password reset)Indefinite (until removed or changed by user or per GDPR request)DigitalOcean, OVH, RamNode
Optional user information (e.g. a user page, real name)EditorsConsentIndefinite (until edited or removed by user or per GDPR request)DigitalOcean, OVH, RamNode
colspan=“4”Access logs / analytics
IP addressEditors, readersLegitimate interestsUp to 90 daysDigitalOcean, OVH, RamNode
Timestamp of requestEditors, readersLegitimate interestsUp to 90 daysDigitalOcean, OVH, RamNode
User agentEditors, readersLegitimate interestsUp to 90 daysDigitalOcean, OVH, RamNode
URLEditors, readersLegitimate interestsUp to 90 daysDigitalOcean, OVH, RamNode
RefererEditors, readersLegitimate interestsUp to 90 daysDigitalOcean, OVH, RamNode

Legenda

  • Anonymous: user without an account
  • Registered: user with an account
  • Editors: anonymous or registered users, editing wiki content 3
  • Readers: anonymous or registered users, reading wiki content

Go to Source →

  1. Communities may require registration prior to reading and editing, but Miraheze Limited commits to information access without prior registration. ↩︎

  2. Due to attribution requirements by licensing, user accounts will not be erased, but accounts will be renamed to apply pseudonymisation. ↩︎

  3. All editors are readers, but not all readers are editors. ↩︎

Prev
Tech:CSP Policy
Next
Tech:Db151