Your data
This page explains what personal data of yours reaches the foundation when you use the novusignis.org website, and what you can do about it. Suveria and Omniforum are at the design stage today; data in those services is covered in their whitepapers.
Who is responsible for your data#
The controller of your data is the Novus Ignis Foundation, based in Poznań, Poland, entered in the National Court Register (KRS) under number 0001269575. For any matter concerning your data, write to salve@novusignis.org.
The website itself#
- The website uses no cookies and no analytics scripts. It has one form: an entry for OmniVox (described below).
- Your chosen language is remembered only by your browser; this information does not reach us.
- The server that runs the website (at Infomaniak in Switzerland) may record technical connection data, such as IP addresses, in logs needed for its operation and security. We do not use them for tracking. We want to count from them only aggregate numbers of page views and downloads, without IP addresses or browser descriptions; the rules and results are on the Site statistics page. The legal basis is our legitimate interest in knowing the interest in the foundation (Article 6(1)(f) GDPR).
When you write to us#
You send the message from your own mailbox, even when the "I have a comment" button prepares it for you. We use your address and the content of your message to reply and to deal with the matter, for example a comment on a document. The legal basis is our legitimate interest in conducting this correspondence (Article 6(1)(f) GDPR). We keep messages for as long as they are needed for the matter they concern.
An entry for OmniVox#
- The form Write to OmniVox sends the entry to our server and from there to the OmniVox discussions on GitHub, where it is public. You send a signature you choose yourself (it can be a pseudonym) and the text of the entry.
- The form's script stores neither the IP address nor the content of rejected entries. A published entry is stored by GitHub (USA) under its privacy policy.
- The legal basis is your consent (Article 6(1)(a) GDPR), which you give by sending the entry. You can withdraw it: write to salve@novusignis.org with the address of the entry and we will remove it. You share the entry under the CC BY 4.0 licence, so copies made before removal may exist beyond our control.
- Do not include personal data about other people. The form rejects an entry in which it recognises an email address, a phone number, a PESEL number, or a bank account or card number, but it works by patterns and will not catch everything. If such data still ends up in an entry, write to salve@novusignis.org with the address of the entry and we will remove the data.
Waiting list#
- You join by sending a message with the subject "[Lista oczekujących] Suveria i Omniforum". This is your consent (Article 6(1)(a) GDPR).
- We will use your address for one message only: that the first trials of Suveria and Omniforum are starting. After sending it, we remove the address from the list.
- You can withdraw your consent at any time by writing to us; we will then remove the address right away. Withdrawing consent does not affect what we did on its basis before.
Donations#
With a bank transfer, the bank gives us the sender's data: name, account number and payment reference. We keep this data because accounting and tax regulations require it (Article 6(1)(c) GDPR), for the period those regulations specify. In the public register of contributions and expenses we name donors only if they themselves wish it, and we do not publish payment references.
Who else may have access#
Data is processed on our behalf by Infomaniak from Switzerland, which hosts the website and our email. Switzerland has a European Commission decision finding an adequate level of personal data protection, so transferring data to that country requires no additional safeguards. The foundation's accounts are kept by BNP Paribas Bank Polska, which processes transfer data as a bank, under its own responsibility. We do not sell data, we do not pass it on for advertising and we do not make automated decisions based on it.
Your rights#
You have the right:
- to access your data and receive a copy of it;
- to have it corrected;
- to have it erased or its processing restricted;
- to the portability of data you provide to us on the basis of consent;
- to object to processing based on our legitimate interest;
- to withdraw your consent at any time;
- to lodge a complaint with the President of the Personal Data Protection Office (UODO).
Providing data is voluntary. Without an address, however, we cannot reply to your message or write to you when the trials begin.