Yrittäjä WIKI:Privacy policy

Privacy Policy

Effective Date: October 30, 2026. Jurisdiction: Finland (EU)

This document has been prepared in accordance with the European Union’s General Data Protection Regulation (GDPR, 2016/679) and the Finnish Data Protection Act (Tietosuojalaki 1050/2018). This document sets forth the principles governing the collection, storage, and protection of user information on the open, moderated knowledge base Yrittäjä WIKI.

1. Data Controller

Project Name: Yrittäjä Wiki

Person in Charge, Management and Development: Renas Media, Y-3546398-8, contact@renasmedia.com

2. Data Processing Register (Specification)

Data collection is strictly limited to ensuring the operability of the MediaWiki-based platform, protecting the infrastructure, and maintaining the transparency of the open knowledge base. Depending on the level of interaction with the platform, data is divided into the following categories:

Website visitors (unauthorized readers). Data collected: IP address, browser technical data (User-Agent), request time, and URLs of visited pages. Purpose of processing: Ensuring network security, protecting the infrastructure from DDoS attacks and spam, and maintaining server logs. Legal basis (GDPR): Article 6(1)(f)—the controller’s legitimate interest in protecting and ensuring the stable operation of the IT infrastructure.

Retention period: Server logs are stored for 30 to 90 days, after which they are automatically deleted.

Registered Users and Editors. Data Collected: Username, email address, cryptographic hash of the password, and edit history (which may record the IP address at the time of registration or when changes are made). Purpose of processing: To identify content authors, moderate the knowledge base, provide a password recovery mechanism, and comply with the legal terms of open licenses (attribution of authorship). Legal basis (GDPR): Article 6(1)(b)—processing is necessary for the performance of the user agreement.

Retention period: The email address is stored until the account is deleted. The edit history and username are retained indefinitely and are publicly accessible to verify the integrity and authorship of articles.

Team Members and Volunteers. Data Collected: Name or username, project role, profile photo, contact email, and external links. Purpose of Processing: Public acknowledgment of contributions to the platform’s development and transparent presentation of the project team to the community. Legal basis (GDPR): Article 6(1)(a) — explicit, informed, and voluntary consent of the data subject. Retention period: Data is processed and published until the data subject withdraws consent (by requesting the administration to delete the profile card).

3.The Unique Features of the MediaWiki Platform and Open Data

The project operates as a public wiki database. Any action to add or modify content is accompanied by the irreversible preservation of the edit history: Public Access: The text of edits, the time they were made, and the author’s identifier (username) remain publicly accessible indefinitely to ensure transparency in moderation and compliance with copyright laws. Prohibition on PII (Personally Identifiable Information): Users are strictly prohibited from publishing confidential third-party data (including Finnish henkilötunnus, financial information, and exact addresses) without the third party’s documented consent. The administration removes such data from public page revisions upon discovery (Oversight/RevisionDelete).

4. Cookie Policy (Evästekäytäntö)

The project adheres to the Privacy-by-Design principle and does not use advertising or hidden analytics trackers. Strictly Necessary (Technical/Session): MediaWiki session cookies required for authentication, maintaining the editor’s session, and protecting against CSRF attacks. Functional: Cookies that store user interface settings and the status of the cookie consent notification.

5. Data Recipients and Cross-Border Data Transfers

The project does not engage in the commercialization of personal data. Data transfers are permitted exclusively to: Data Processors: Hosting providers and CDN operators whose servers are physically located within the European Economic Area (EEA) and who are bound to the project by Data Processing Agreements (DPAs). Law enforcement agencies: Upon an official and justified request from authorized Finnish authorities in accordance with national legislation.

6. Data Subject Rights (Rekisteröidyn oikeudet)

Under the GDPR, users have the following rights: Access: Request a copy of the personal data held. Rectification: Request that inaccurate data in the profile be corrected. Deletion / Right to be Forgotten: Request deletion of the account (subject to MediaWiki’s technical limitations on deleting public edit histories—in such cases, the account will be de-identified or anonymized). Withdrawal of Consent: Withdraw consent to publish your profile in the volunteers section. Requests to exercise these rights are processed by the administration at info@yrittaja.wiki within 30 days. Verification via the email address linked to your account may be required to confirm the request.

7. Technical Security Measures (Tietoturva)

Communication with the knowledge base takes place exclusively via the encrypted TLS protocol (HTTPS). User passwords are not stored in plain text and are protected by cryptographic hashing using modern algorithms. Access to servers and databases is restricted by strict firewall policies and is available only to authorized project system administrators.

8. The Right to File a Complaint with a Regulatory Authority

If there are grounds to believe that a project is processing personal data in violation of the GDPR or Finnish law, the data subject has the right to file a complaint with the supervisory authority. Tietosuojavaltuutetun toimisto, tietosuoja.fi

9. Policy Changes The Administration reserves the right to make changes to this Policy as the knowledge base’s functionality evolves or as Finnish and EU legislation is updated. The current version is always published on the https://yrittaja.wiki/Yritta%CC%88ja%CC%88_WIKI:Privacy_policy