Archive:Wikimedia Foundation Annual Report Privacy Policy

Introduction

Welcome!

This Wikimedia Foundation annual report Privacy Policy ("Privacy Policy") explains how the Wikimedia Foundation ("WMF"), the nonprofit organization that hosts Wikipedia, collects, uses, and shares information we receive from you through your use of the Wikimedia Foundation annual report site (https://annual.wikimedia.org/) ("WMF annual report site") The WMF annual report site is not covered by our main privacy policy, and this Privacy Policy does not apply to any other Wikimedia site or project.

It is essential to understand that, by using any of the WMF annual report site, you consent to the collection, transfer, processing, storage, disclosure, and use of your information as described in this Privacy Policy.

Definitions

To help ensure your understanding of some particular key terms, here is a table of translations:

When we say... ... we mean:
"the Wikimedia Foundation" / "the Foundation" / "we" / "us" / "our" The Wikimedia Foundation, Inc., the non-profit organization that operates the Wikimedia Sites.
"Wikimedia Sites" / "our services" Wikimedia websites and services (regardless of language), including our main projects, such as Wikipedia and Wikimedia Commons, as well as mobile applications, APIs, emails, and notifications.
"this site" / "the site" / "WMF annual report site" The WMF annual report site ("this site," "the site") includes all pages under https://annual.wikimedia.org/.
"you" / "your" / "me" You, regardless of whether you are an individual, group, or organization, and regardless of whether you are using the WMF annual report site or our services on behalf of yourself or someone else.
"this Policy" / "this Privacy Policy" This document, entitled the "Wikimedia Foundation annual report Privacy Policy".
"personal information" Information you provide us or information we collect from you that could be used to personally identify you. To be clear, while we do not necessarily collect all of the following types of information, we consider at least the following to be "personal information" if it is otherwise nonpublic and can be used to identify you:
(a) your real name, address, phone number, email address, password, identification number on government-issued ID, IP address, user-agent information, credit card number; and
(b) when associated with one of the items in subsection (a), any sensitive data such as date of birth, gender, sexual orientation, racial or ethnic origins, marital or familial status, medical conditions or disabilities, political affiliation, and religion.
"third party" / "third parties" Individuals, entities, websites, services, products, and applications that are not controlled, managed, or operated by the Wikimedia Foundation. This includes other Wikimedia users and independent organizations or groups who help promote the Wikimedia movement such as Wikimedia chaptersthematic organizations, and user groups as well as volunteers, employees, directors, officers, grant recipients, and contractors of those organizations or groups.

We recognize that only some of you are familiar with technical terms like "tracking pixels" and "cookies" used in the Privacy Policy. Whether you are brand new to privacy terminology or you are an expert who just wants a refresher, you might find our Glossary of Key Terms helpful.

Use of info

Types of Information We Receive From You, How We Get It, & How We Use It

We want to make this site and other Wikimedia Sites better for you by learning more about how you use them. Examples of this might include how often you visit the site, what you like, what you find helpful, how you get to the site, and whether you would use a helpful feature more if we explained it differently. We also want this Policy and our practices to reflect our community's values. For this reason, we keep information related to your use of this site confidential, except as provided in this Policy.

Information We Receive Automatically

Because of how browsers work and similar to other major websites, we receive some information automatically when you visit this site. This information includes information about the device you are using, the type and version of your browser, your browser's language preference, the type and version of your device's operating system, in some cases the name of your internet service provider or mobile carrier, the website that referred you to the this site, which pages you request and visit, and the date and time of each request you make to this site.

Put simply, we use this information to enhance your experience with this site. For example, we use this information to administer the sites, provide greater security, and fight vandalism; optimize mobile applications, customize content and set language preferences, test features to see what works, and improve performance; understand how users interact with the this site, track and study use of various features, gain understanding about the demographics, and analyze trends.

Information We Collect

We actively collect some types of information with a variety of commonly-used technologies. These generally include tracking pixels, JavaScript, and a variety of "locally stored data" technologies, such as cookies and local storage.

Depending on which technology we use, locally stored data can be anything from text, pictures, and whole articles (as we explain further below) to personal information (like your IP address) and information about your use of this site.

We use this information to make your experience with this site safer and better, to gain a greater understanding of user preferences and their interaction with this site, and to generally improve our services.. Locally stored data, JavaScript, and tracking pixels help us do things like:

  • Provide you with a personalized experience.
  • Deliver more relevant content to you faster.
  • Understand how you use the site, so that we know what works and what is useful.
  • Understand how you use the site across different devices, so that we can make the site more efficient and effective for you.

We believe this data collection helps improve your user experience, but you may remove or disable some or all locally stored data through your browser settings, depending on your browser. While locally stored data may not be necessary to use the site, some features may not function properly if you disable locally stored data.

Please note that some information about your actions on the site may be made publicly available through public logs alongside actions taken by other users.

IP Addresses

When you visit this site, we automatically receive the IP address of the device (or your proxy server) you are using to access the Internet, which could be used to infer your geographical location. IP address data is anonymized after it is collected and may become publicly available in anonymized form. If you are visiting the sites with your mobile device, we may use your IP address to provide anonymized or aggregated information to service providers regarding the volume of usage in certain areas. We use IP addresses for research and analytics; to better personalize content, notices, and settings for you; to fight spam, identity theft, malware, and other kinds of abuse; and to provide better mobile and other applications.

Sharing

When May We Share Your Information?

Generally, we keep personal, nonpublic information about you confidential. We do not sell or rent your nonpublic information, nor do we give it to others to sell you anything. However, there are a few specific circumstances where we are permitted to share your information.

With Your Permission

We may share your information for a particular purpose, if you agree.

We may access, preserve, or disclose your personal information if we reasonably believe it necessary to satisfy a valid and legally enforceable warrant, subpoena, court order, law or regulation, or other judicial or administrative order. However, if we believe that a particular request for disclosure of a user's information is legally invalid or an abuse of the legal system and the affected user does not intend to oppose the disclosure themselves, we will try our best to fight it. We are committed to notifying you via email at least ten (10) calendar days, when possible, before we disclose your personal information in response to a legal demand. However, we may only provide notice if we are not legally restrained from contacting you, there is no credible threat to life or limb that is created or increased by disclosing the request, and you have provided us with an email address.

Nothing in this Privacy Policy is intended to limit any legal objections or defenses you may have to a third party's request (whether it be civil, criminal, or governmental) to disclose your information. We recommend seeking the advice of legal counsel immediately if such a request is made involving you.

For more information, see our Subpoena FAQ.

If the Organization is Transferred (Really Unlikely!)

In the extremely unlikely event that ownership of all or substantially all of the Foundation changes, or we go through a reorganization (such as a merger, consolidation, or acquisition), we will continue to keep your personal information confidential, except as provided in this Policy, and provide notice to you via the Wikimedia Sites and a notification on WikimediaAnnounce-L or similar mailing list at least thirty (30) calendar days before any personal information is transferred or becomes subject to a different privacy policy.

To Protect You, Ourselves & Others

We, or particular users with certain administrative rights as described below, may need to share your personal information if it is reasonably believed to be necessary to enforce or investigate potential violations of our Terms of Use, this Privacy Policy, or any Foundation or user community-based policies. We may also need to access and share information to investigate and defend ourselves against legal threats or actions.

Wikimedia Sites are collaborative, with users writing most of the policies and selecting from amongst themselves people to hold certain administrative rights. These rights may include access to limited amounts of otherwise nonpublic information about activity by other users. They may use this access to help protect against vandalism and abuse, fight harassment of other users, and generally try to minimize disruptive behavior on this site and the Wikimedia Sites. These various user-selected administrative groups have their own privacy and confidentiality guidelines, but all such groups are supposed to agree to follow our Access to Nonpublic Information Policy. These user-selected administrative groups are accountable to other users through checks and balances: users are selected through a community-driven process and overseen by their peers through a logged history of their actions. However, the legal names of these users are not known to the Wikimedia Foundation.

We hope that this never comes up, but we may disclose your personal information if we believe that it is reasonably necessary to prevent imminent and serious bodily harm or death to a person, or to protect our organization, employees, contractors, users, or the public. We may also disclose your personal information if we reasonably believe it necessary to detect, prevent, or otherwise assess and address potential spam, malware, fraud, abuse, unlawful activity, and security or technical concerns.

To Our Service Providers

As hard as we may try, we cannot do it all. So sometimes we use third-party service providers or contractors who help run or improve this site or the Wikimedia Sites for you and other users. We may give access to your personal information to these providers or contractors as needed to perform their services for us or to use their tools and services. We put requirements, such as confidentiality agreements, in place to help ensure that these service providers treat your information consistently with, and no less protective of your privacy than, the principles of this Policy.

To Understand & Experiment

In order to better understand how people use the site, we may run analytics on the site using analytics platforms, such as Piwik. When information is collected through Piwik, Wikimedia Foundation staff and contractors may be able to access information about users, like IP addresses and user agent information, and how users interact with the site.

We may give some volunteer developers limited access to systems that contain your personal information, but only as reasonably necessary for them to develop and contribute to this site or the Wikimedia Sites. Similarly, we may share non-personal or aggregated information with researchers, scholars, academics, and other interested third parties who wish to study this site or the Wikimedia Sites. Sharing this information helps them understand usage, viewing, and demographics statistics and patterns. They then can share their findings with us and our users so that we can all better understand and improve this site and the Wikimedia Sites.

When we give access to personal information to third-party developers or researchers, we put requirements, such as reasonable technical and contractual protections, in place to help ensure that these service providers treat your information consistently with the principles of this Policy and in accordance with our instructions. If these developers or researchers later publish their work or findings, we ask that they not disclose your personal information. Please note that, despite the obligations we impose on developers and researchers, we cannot guarantee that they will abide by our agreement, nor do we guarantee that we will regularly screen or audit their projects.

Because You Made It Public

Any information you post publicly on this site, the Wikimedia Sites, or third-party sites is just that – public. Please think carefully about your desired level of anonymity before you disclose personal information on this site, the Wikimedia Sites, or sites linked from this site or the Wikimedia Sites.

Protection

How Do We Protect Your Data?

We strive to protect your information from unauthorized access, use, or disclosure. Unfortunately, there is no such thing as completely secure data transmission or storage, so we cannot guarantee that our security will not be breached (by technical measures or through violation of our policies and procedures).

How Long Do We Keep Your Data?

Once we receive personal information from you, we keep it for the shortest possible time that is consistent with the maintenance, understanding, and improvement of this site and the Wikimedia Sites, and our obligations under applicable U.S. law. Non-personal information may be retained indefinitely.

Important info

For the protection of the Wikimedia Foundation and other users, if you do not agree with this Privacy Policy, you may not use this site.

Where is the Foundation & What Does That Mean for Me?

The Wikimedia Foundation is a nonprofit organization based in San Francisco, California, with servers and data centers located in the U.S. If you decide to use this site, whether from inside or outside of the U.S., you consent to the collection, transfer, storage, processing, disclosure, and other uses of your information in the U.S. as described in this Privacy Policy. You also consent to the transfer of your information by us from the U.S. to other countries, which may have different or less stringent data protection laws than your country, in connection with providing services to you.

Our Response to Do Not Track (DNT) signals

We may use analytics platforms to better understand how users interact with and use this site. Those analytics platforms respect DNT signals and will not track information about you if you have DNT enabled. However, please note that the Wikimedia Foundation will still automatically receive certain information about you even if you have DNT enabled. Please see the "Information we receive automatically" section above. It is important to note that regardless of whether you have DNT enabled, we will never share your information with third parties for marketing purposes.

Changes to This Privacy Policy

Because things naturally change over time and we want to ensure our Privacy Policy accurately reflects our practices and the law, it may be necessary to modify this Privacy Policy from time to time. We reserve the right to do so, and we will provide notice of such changes in a reasonable manner and time. We ask that you please review the most up-to-date version of our Privacy Policy. Your continued use of the site after this Privacy Policy becomes effective constitutes acceptance of this Privacy Policy on your part. Your continued use of the site after any subsequent version of this Privacy Policy becomes effective, following notice as outlined above, constitutes acceptance of that version of the Privacy Policy on your part.

Contact Us

If you have questions or suggestions about this Privacy Policy, or the information collected under this Privacy Policy, please email us at privacy@wikimedia.org or contact us directly.

Thank You!

Thank you for reading our Privacy Policy. We hope you enjoy using the WMF annual report site and appreciate your participation in creating, maintaining, and constantly working to improve the largest repository of free knowledge in the world.

Please note that in the event of any differences in meaning or interpretation between the original English version of this Privacy Policy and a translation, the original English version takes precedence.

Effective Date: 1 February 2017