What does this Privacy Policy cover?

This Privacy Policy covers our treatment of information that could be used to personally identify you (“Personal Information”) that we gather when you are accessing or using Wikimedia Enterprise. It does not apply to the practices of third parties we don’t own, control, or manage, or who are not otherwise authorized to process data on our behalf. We gather various types of Personal Information from our users, as explained in more detail below, and we use this Personal Information internally in connection with Wikimedia Enterprise, including to personalize, provide and improve our products, to contact you, and to analyze how you use Wikimedia Enterprise.

Wikimedia Enterprise is not directed at anyone under the age of 18. We do not knowingly collect or solicit Personal Information from anyone under the age of 13. If you are under 13, please do not attempt to register for Wikimedia Enterprise or send any Personal Information about yourself to us. If we learn that we have collected Personal Information from a child under age 13, we will delete that Personal Information as quickly as possible. If you believe that a child under 13 may have provided us Personal Information, please contact us at [email protected].

Will Wikimedia ever change this Privacy Policy?

We’re constantly trying to improve Wikimedia Enterprise, so we may need to change this Privacy Policy from time to time as well, but we will alert you to changes by placing a notice on enterprise.wikimedia.org 30 days before the changes take effect, by sending you an email, and/or by some other means. We will notify you of any material changes to this Privacy Policy using the contact details you have provided, if any.  Use of Personal Information we collect now is subject to the Privacy Policy in effect at the time such Personal Information is used.

What personal information does Wikimedia collect?

We receive and store any Personal Information you knowingly provide to us. Certain Personal Information (such as account registration information) may be required to register with us or to take advantage of some of our features.

This information is collected for the purpose of providing our products (including any requested further features) to you, under our legitimate purpose of providing our products and/or to comply with our legal obligations under applicable laws including our obligations arising from laws relating to tax, health and safety, employment and social security, equality and anti-discrimination.

We also collect Personal Information automatically about your use of Wikimedia Enterprise, such as metadata related to your use of Wikimedia Enterprise, your preferences, your configurations, and other information gathered about your use of Wikimedia Enterprise. For example, this may include using common technologies, such as cookies, for marketing purposes and to better understand how visitors interact with Wikimedia Enterprise. We do not use third-party cookies without providing clear notice and an opportunity to opt out. We use first-party cookies to collect information including but not limited to browser details, device details, operating system, screen size, time zone, geography, session length, form sign up behavior, and pages viewed.

This information is collected for the purposes of:

• fighting spam, identity theft, security threats, malware and other kinds of abuse; 
• sending emails to individuals who have visited our site and given us permission to contact them;
• determining the effectiveness of marketing campaigns; and
• optimizing our products such as the signup flow and user dashboard.

We may send you marketing materials where we are permitted to under applicable laws if you’ve provided us the means to do so. For example, if you’ve given us your email address, we may send you emails on behalf of Wikimedia, or email you about your use of Wikimedia Enterprise. If you do not want to receive promotional communications from us, please indicate your preference, by using any controls made available to you online or in the emails you receive, or by sending an email to [email protected].

Will Wikimedia share any of the personal information it receives?

In some circumstances, we employ other companies and people to perform tasks on our behalf and need to share your Personal Information with them for those purposes; for example, we may use a third-party mail management service to send you emails on our behalf. Unless we tell you differently, our agents do not have any right to use the Personal Information we share with them beyond what is necessary to assist us.

As a USA headquartered company, most of our IT systems are hosted in the USA and most of the Personal Information described above is hosted in the USA. Where applicable, transfers between the EU and the USA are governed by the Standard Contractual Clauses, as published by the EU Commission or equivalent measures produced by the UK Government respectively, combined with further measures we have put in place. 

We reserve the right to access, read, preserve, and disclose any Personal Information that we reasonably believe is necessary to comply with law or court order; or protect the rights, property, or safety of Wikimedia, our employees, our users, or others.

How long will Wikimedia store my Personal Information for?

Your Personal Information will be stored by Wikimedia or our agents and assigns for as long as you have a relationship with us in the context of our Enterprise products and for as long as we need it to comply with our legal obligations and to protect the rights, property, or safety of Wikimedia, our employees, our users, or others.

Is personal information about me secure?

We endeavor to protect the privacy of your Personal Information we hold in our records, but unfortunately, we cannot guarantee complete security. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of user information at any time.

What rights do I have over my Personal Information?

California

Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to ask us for a notice identifying the categories of Personal Information which we share with our affiliates and/or third parties for marketing purposes, and providing contact information for such affiliates and/or third parties. If you are a California resident and would like a copy of this notice, please submit a written request to 1 Sansome Street, Suite 1895, San Francisco, CA 94104.

UK and EEA

Under the GDPR and UK GDPR, residents of the EEA and UK have the right to ask Wikimedia for a copy of your Personal Information; to correct, delete or restrict processing of your Personal Information; and to obtain the Personal Information you provide in a structured, machine readable format. In addition, you can object to the processing of your Personal Information in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement). These rights may be limited, for example if fulfilling your request would reveal Personal Information about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep. If you have unresolved concerns, you have the right to complain to a data protection authority.

What choices do I have?

You can always opt not to disclose Personal Information to us, but keep in mind some Personal Information may be needed to register with us or to take advantage of some of our features.

Where we have asked for your consent, you may withdraw consent at any time. If you ask to withdraw your consent to Wikimedia processing your data, this will not affect any processing which has already taken place at that time.

What if I have questions about this policy?

If you have any questions or concerns regarding this Privacy Policy, please send us a detailed message to [email protected] and we will try to resolve your concerns or contact us at [email protected] directly. 

If you are located in the European Economic Area and have questions about your Personal Information or would like to request to access, update, or delete it, you may contact our representative via email at [email protected], or via mail at:

Bird & Bird GDPR Representative Ireland
29 Earlsfort Terrace
Dublin 2
D02 AY28
Ireland

Main point of contact: Vincent Rezzouk-Hammachi

If you are an individual located in the United Kingdom, and have questions about your Personal Information or would like to request to access, update, or delete it, you may contact our representative via email at [email protected], or via mail at:

Bird & Bird GDPR Representative Services UK
12 New Fetter Lane
London
EC4A 1JP
United Kingdom

Main point of contact: Vincent Rezzouk-Hammachi

Our European Economic Area and United Kingdom Representative can only be contacted for queries in relation to data protection.

Depending on your jurisdiction, you also may have the right to lodge a complaint with a supervisory authority competent for your country or region.

Last Updated