Version 2.1 from May 2018
The following service provider is responsible for the protection of your personal data.
wikical non-profit limited company
Greifswalder Str. 228
10405 Berlin
Germany
Tel: +493039820596
Fax: +493034060473
Email: info@wikical.com
Managing Director: Iván Fernando Villanueva Barrio
Comercial Register: Amtsgericht Charlottenburg
Register Number: HRB 190397 B
Tax Number: 27/612/05956
Bank: Berliner Sparkasse
BIC: BELADEBEXXX
IBAN: DE38 1005 0000 0190 6514 15
wikical is committed to the professional management of personal data. The personal data which you enter would never be passed on to unauthorized third parties. Where the service provider is subject to a legal requirement to collect data about its users, such data would be stored only for the period that is mandated by law.
Every time you access our web service wikical the servers log your request in files that are kept for a limited period of time. The stored data comprises the IP-address of your computer with a date and time stamp, the uniform resource identifier (URI) of the requested resources, the referring web site (referrer URI), some identifiers of the operating system, client software, protocols and carriers when available. The technical administration of our service infrastructure collects these data for the sole purpose of being able to investigate server load issues and security. An analysis of the data would take place in the event of server load problems, of an attack on the information technology infrastructure of the service, or for statistical purposes of server load.
According to Article 6, Paragraph 1, Point F, and recital 49 of the GDPR, access server logs (described above) are kept for 100 days. Error server logs, which are generated only when an unexpected error occurs and additionally contain system state information, are kept for 200 days. The system state information in the error logs may contain the location of the user which generated the error, versions of software used, search terms, and stack traces, which are the parts of the software executed including times and data. Additionally, in the case of a security incident, we keep security server logs for 400 days. The data stored is described at ModSecurity Logs.
The internet protocol RFC2965 specifies HTTP "cookies" for the technical administration of a user session. Cookies are small text files. By consent a web browser automatically saves cookies on your connecting device when you request the wikical site. Cookies are necessary so that the service provider wikical can process the web requests of the users in a timely manner. Users enjoy a right to object to the use of cookies ("opt-out"). wikical uses cookies for the envisaged technical purpose, and does not make use of the controversial cross-site tracking cookies.
wikical operates an in-house solution for web analytics using Matomo (formerly Piwik). Our installation of Matomo is configured to not store any personal data. The stored Matomo data comprises an anonymized version of the IP address of a request, time stamp and the duration of the visit, the specific pages which are accessed, browsers, plugins, search engines and referring pages (referrer URI).
wikical applies the results from the Matomo web analytics tool to improve user navigation and service quality of wikical. Under no circumstances wikical would reconcile the data in Matomo with other records of your personal data. Technical security measures and direct instructions to our system administrators prohibit data merge and reconnaissance of pseudonyms. wikical shares anonymized, aggregated media data with the general public.
In order to differentiate types of users, wikical associates tags with user accounts and emails. These tags can indicate for instance that the account is used weekly, or that it has never used some specific functionality of wikical. wikical uses these tags to present different messages or send different kinds of emails.
While signed in as a user of the website wikical, the following data is stored in the database: time stamp of registration, IP address of the computer, user identification, counter-phrase of the password ("hash"), where applicable full name, where applicable profile image, address of the electronic mail (email), a membership in groups, time zone, city and country. When you sign in as a user, you can always edit your "public profile" and add more information about yourself. wikical invites you to use a pseudonym instead of your real name.
Not-signed-in users can choose to be notified for future matches of searches by providing their email. The recipient of the email will receive a confirmation link. If confirmed, the email address will be stored until the link to cancel the subscription is used. If not confirmed, the email will be deleted within 14 days. These storage and deletion occur in the database. Encrypted, incremental database backups will retain the email from up to 400 days, allowing the recovering of the data according to Article 32 of the GDPR in the case of an incident.
You have the right to access all your personal data saved in wikical, which is accessible to you at any time in your profile settings. You can ask us at any time for a copy of all the personal data we have on you. If you think that the way we process your personal data with Matomo analytics is infringing the law, you have the right to lodge a complaint with a supervisory authority.
When a user account is removed, the following data will be irreversibly erased: username, email, name, profile image (if any), nation, city and time zone. In addition, wikical erase associations of a user to social networks and to her activity. Some entries remain in wikical such as edited and contributed events, images, comments, and activities but they will be attributed to a general "former user".
The irreversibly erasure occurs in the database within 14 days. Encrypted, incremental database backups will retain all the data up to 400 days, allowing the recovering of the data according to Article 32 of the GDPR in the case of an incident.
wikical processes and uses your personal data for the mere purpose to provide and optimize the wikical services for you. Email contact data is used for automated confirmation of registration via email. Optionally you may get notified about events by email ("opt-in"). It is a fully automated service. By no means an IP address will be reconciled with personal data from other sources. IP addresses are masked in order to render a mapping impossible. Depending on technical capabilities you are free to submit geographic indicators (location information) to the service provider in order to better customize search results. At wikical specific technical and organizational state-of-the-art measures are taken for the protection of personal data.
The personal data received are sent exclusively to wikical and to our web hosting provider Hetzner Online GmbH, Gunzenhausen, Germany. All data is stored exclusively in Germany. A contract based on Article 28 of the GDPR is available between wikical and Hetzner.
The service provider organizes the operation of wikical that only those staffers get access to the data where they require it in the performance of their activities. These staffers have signed confidentiality agreements, and have to bear serious consequences for breach of confidentiality, such as termination and criminal/civil sanctions.
The service provider cannot exercise control over external sites linked from the wikical site. These web sites may set their own cookies or spy on their users' personal information.
The service provider offers apps for mobile devices like iPhones and Android devices that can access data of the service. The apps, when permitted by the user, determine the user's geographic position (geolocation) through either WiFi or GPS of the user's device and pass that position to the service provider to retrieve positional data like nearest events. The apps and the servers of the service provider retain only the latest retrieved position. They do not keep a history of the user's previous positions. They do not keep or require any other user or device information.
When connecting your account to a provider like Facebook or Google, wikical will use basic information from that account, like your name, user-id, username, email, your profile picture and your location. Your email will be used to send you notifications that you can stop at any time. When a location is not available, wikical will use your IP to guess your location.
wikical tries to display to you more interesting events for you in your events feed, but only if you sign in. In this case, wikical stores attached to your account the events you add to wikical, import or add to your groups, the items you follow, your likes, dislikes, the pictures you upload to wikical, your filters, your comments and messages. You can see anytime all this information on your settings page and ask for a copy of it. The city and country associated to your account can also be used for your feed. This association can take place when you sign in based on your IP. Some of this data is used to personalize your feed. You can opt-out of this personalization at any time by signing out.