Privacy Policy [RevLog]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
# Privacy Policy

*Last updated: 01-01-2026*

## 1. Introduction

This privacy policy explains how we collect, use, and protect your personal data when you use this wiki service operated by RevLog ("we", "us", "our").

We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Swiss data protection law.

## 2. Data Controller

**Revlog**  

- REVLOG, 24 rue du Général-Dufour, 1211 Genève, Switzerland
- revlog (at) unige.ch 

For questions about this policy or your personal data, contact us in the aforementioned email

## 3. What Personal Data We Collect

### 3.1 Authentication Data

We use federated authentication through Switch edu-ID and the eduGAIN federation. When you log in, we receive the following attributes from your identity provider:

- Unique identifier (persistent ID or eduPersonPrincipalName)
- Display name
- Email address
- Affiliation (e.g., student, staff, faculty)

We do not receive or store your password.

### 3.2 Data We Generate

When you use this wiki, we collect:

- **Usage logs**: IP address, browser type, pages accessed, timestamps
- **Content contributions**: edits, page creations, and modifications you make
- **Session data**: temporary cookies required for authentication

## 4. Legal Basis for Processing

We process your personal data based on:

- **Legitimate interests** (Art. 6(1)(f) GDPR): to operate and secure the wiki service, maintain audit logs, and attribute content contributions
- **Consent** (Art. 6(1)(a) GDPR): where applicable, for optional features

## 5. How We Use Your Data

We use your personal data to:

- Authenticate you and manage access permissions
- Display attribution for your contributions (username or display name)
- Maintain security and audit logs
- Troubleshoot technical issues
- Comply with legal obligations
## 6. Data Retention

^ Data Type ^ Retention Period ^
| Authentication logs | 1 year |
| Access logs | 1 year |
| Wiki contributions | Indefinitely (as part of page history) |
| Session cookies | Duration of browser session |

You may request deletion of your account. Note that contributions may be retained with anonymised attribution to preserve wiki integrity.

## 7. Data Sharing

We share your data with:

- **Switch/eduGAIN**: authentication federation (as data processor)

We do not sell your personal data or share it with third parties for marketing purposes.

### International Transfers

If data is transferred outside the EU/EEA, appropriate safeguards are in place (e.g., EU Standard Contractual Clauses, Swiss-EU adequacy decision).

## 8. Cookies

This site uses:

^ Cookie ^ Purpose ^ Duration ^
| DokuWiki session | Authentication | Session |
| DokuWiki preferences | User settings | 1 year |

No third-party tracking cookies are used.

## 9. Your Rights

Under GDPR, you have the right to:

- **Access** your personal data
- **Rectify** inaccurate data
- **Erase** your data ("right to be forgotten")
- **Restrict** processing
- **Data portability**
- **Object** to processing
- **Withdraw consent** at any time
- **Lodge a complaint** with a supervisory authority

To exercise these rights, contact revlog (at) unige.ch

We will respond within 30 days.

## 10. Security

We implement appropriate technical and organisational measures to protect your data, including:

- Encrypted connections (HTTPS/TLS)
- Access controls and authentication
- Regular security updates
- Log monitoring

## 11. Changes to This Policy

We may update this policy periodically. Significant changes will be communicated via [the wiki / email].

## 12. Contact & Complaints

For privacy-related inquiries:  
revlog (at) unige.ch

You have the right to lodge a complaint with:

- **CNIL** (France): [cnil.fr](https://www.cnil.fr)
- **FDPIC** (Switzerland): [edoeb.admin.ch](https://www.edoeb.admin.ch)