User talk:Astirmays/Privacy policy

As Valter VB pointed out on my it.viki talk page, the Vikidia Foundation isn't actually the owner of the servers, so the "Responsibility" paragraph needs to be re-thought before the policy becomes effective. I would say (but, once again, I am not a lawyer) something like "TuxFamily.org, as the owner of the servers that host Vikidia, and the Vikidia Foundation are responsible for the technical retention and distribution of personal data..." I would say, based on the few things I know about privacy laws, that Vikidia foundation (or association, or whatever :) ) is responsible anyway, even if it doesn't own the servers (for example, the identification process cannot be carried out by someone outside the Vikidia world). Another thing Southparkfan made me notice on IRC is that oversight (if it is enabled on a project) should be subject to the identification process: it is used for serious privacy matters (whereas the revision is only hidden when the "privacy matter" is just in the form of real name, phone number), so it makes sense that users are of legal age in this case as well (WMF projects have the same identification rules for oversight and CheckUser). Yet another sidenote: if we ever decide to enable global groups with CheckUser permissions (something similar to WMF stewards) we need to extend this policy to them. And that should be all :) --Dry Martini (talk) 22:20, 16 February 2014 (CET)

Moreover, it came to my mind that Italian privacy law requires we inform visitors that personal data will be handled both in electronic and manual way. I would also add to the policy that Vikidia doesn't retain "sensible" data (which many law systems define as gender, age, sexual orientation, religion, etc). Sensible data are subject to much stricter regulation and making clear that we have nothing to do with that stuff could help (and anyway would work as a disclaimer). --Dry Martini (talk) 20:09, 7 March 2014 (CET)