Yrittäjä WIKI:Tietosuojakäytäntö

Tietosuojakäytäntö

Voimaantulopäivä: 30. lokakuuta 2026. Soveltamisalue: Suomi (EU)

Tämä asiakirja on laadittu Euroopan unionin yleisen tietosuoja-asetuksen (GDPR, 2016/679) ja Suomen tietosuojalain (1050/2018) mukaisesti. Tässä asiakirjassa esitetään periaatteet, jotka koskevat käyttäjätietojen keräämistä, säilyttämistä ja suojaamista avoimessa, moderoidussa Yrittäjä WIKI -tietokannassa.

1. Rekisterinpitäjä

Projektin nimi: Yrittäjä Wiki

Vastuuhenkilö, johto ja kehitys: ”Renas Media, Y-3546398-8, contact@renasmedia.com”

2. Tietojenkäsittelyrekisteri (määrittely)

Tietojen kerääminen rajoittuu yksinomaan MediaWiki-pohjaisen alustan toimivuuden varmistamiseen, infrastruktuurin suojaamiseen ja avoimen tietokannan läpinäkyvyyden ylläpitämiseen. Tiedot jaetaan seuraaviin luokkiin sen mukaan, kuinka paljon käyttäjä on vuorovaikutuksessa alustan kanssa:

Verkkosivuston kävijät (luvaton käyttö). Kerätyt tiedot: IP-osoite, selaimen tekniset tiedot (User-Agent), pyynnön ajankohta ja vieraillujen sivujen URL-osoitteet. Käsittelyn tarkoitus: Verkon turvallisuuden varmistaminen, infrastruktuurin suojaaminen DDoS-hyökkäyksiltä ja roskapostilta sekä palvelinlokien ylläpito. Oikeusperusta (GDPR): 6 artiklan 1 kohdan f alakohta – rekisterinpitäjän oikeutettu etu suojata ja varmistaa IT-infrastruktuurin vakaa toiminta.

Säilytysaika: Palvelinlokit säilytetään 30–90 päivää, minkä jälkeen ne poistetaan automaattisesti.

Registered Users and Editors. Data Collected: Username, email address, cryptographic hash of the password, and edit history (which may record the IP address at the time of registration or when changes are made). Purpose of processing: To identify content authors, moderate the knowledge base, provide a password recovery mechanism, and comply with the legal terms of open licenses (attribution of authorship). Legal basis (GDPR): Article 6(1)(b)—processing is necessary for the performance of the user agreement.

Retention period: The email address is stored until the account is deleted. The edit history and username are retained indefinitely and are publicly accessible to verify the integrity and authorship of articles.

Team Members and Volunteers. Data Collected: Name or username, project role, profile photo, contact email, and external links. Purpose of Processing: Public acknowledgment of contributions to the platform’s development and transparent presentation of the project team to the community. Legal basis (GDPR): Article 6(1)(a) — explicit, informed, and voluntary consent of the data subject. Retention period: Data is processed and published until the data subject withdraws consent (by requesting the administration to delete the profile card).

3.The Unique Features of the MediaWiki Platform and Open Data

The project operates as a public wiki database. Any action to add or modify content is accompanied by the irreversible preservation of the edit history: Public Access: The text of edits, the time they were made, and the author’s identifier (username) remain publicly accessible indefinitely to ensure transparency in moderation and compliance with copyright laws. Prohibition on PII (Personally Identifiable Information): Users are strictly prohibited from publishing confidential third-party data (including Finnish henkilötunnus, financial information, and exact addresses) without the third party’s documented consent. The administration removes such data from public page revisions upon discovery (Oversight/RevisionDelete).

4. Cookie Policy (Evästekäytäntö)

The project adheres to the Privacy-by-Design principle and does not use advertising or hidden analytics trackers. Strictly Necessary (Technical/Session): MediaWiki session cookies required for authentication, maintaining the editor’s session, and protecting against CSRF attacks. Functional: Cookies that store user interface settings and the status of the cookie consent notification.

5. Data Recipients and Cross-Border Data Transfers

The project does not engage in the commercialization of personal data. Data transfers are permitted exclusively to: Data Processors: Hosting providers and CDN operators whose servers are physically located within the European Economic Area (EEA) and who are bound to the project by Data Processing Agreements (DPAs). Law enforcement agencies: Upon an official and justified request from authorized Finnish authorities in accordance with national legislation.

6. Data Subject Rights (Rekisteröidyn oikeudet)

Under the GDPR, users have the following rights: Access: Request a copy of the personal data held. Rectification: Request that inaccurate data in the profile be corrected. Deletion / Right to be Forgotten: Request deletion of the account (subject to MediaWiki’s technical limitations on deleting public edit histories—in such cases, the account will be de-identified or anonymized). Withdrawal of Consent: Withdraw consent to publish your profile in the volunteers section. Requests to exercise these rights are processed by the administration at info@yrittaja.wiki within 30 days. Verification via the email address linked to your account may be required to confirm the request.

7. Technical Security Measures (Tietoturva)

Communication with the knowledge base takes place exclusively via the encrypted TLS protocol (HTTPS). User passwords are not stored in plain text and are protected by cryptographic hashing using modern algorithms. Access to servers and databases is restricted by strict firewall policies and is available only to authorized project system administrators.

8. The Right to File a Complaint with a Regulatory Authority

If there are grounds to believe that a project is processing personal data in violation of the GDPR or Finnish law, the data subject has the right to file a complaint with the supervisory authority. Tietosuojavaltuutetun toimisto, tietosuoja.fi

9. Policy Changes The Administration reserves the right to make changes to this Policy as the knowledge base’s functionality evolves or as Finnish and EU legislation is updated. The current version is always published on the https://yrittaja.wiki/Yritta%CC%88ja%CC%88_WIKI:Privacy_policy