Privacy policy for the OpenGenesisLINK Wiki

Last updated: 11 October 2026. This notice explains the processing of personal data in connection with this documentation website pursuant to Articles 12–14 of the General Data Protection Regulation (GDPR).

1. Controller and contact

Jörg Weiß
Käthe-Kollwitz-Weg 9
29699 Walsrode
Germany
Email: info@opengenesislink.de

OpenGenesisLINK is a joint project by Jörg Weiß and Marlin Flemming. Marlin Flemming develops the separate OpenGenesisLINK Viewer. Joint development does not by itself establish joint controllership for every service. The website operator previously identified in this Wiki's legal notice is listed above as the Wiki contact. Responsibilities for other project services require their own assessment.

No data protection officer is identified in the provided Wiki source. Please use the email address above for privacy questions and requests to exercise your rights.

2. Website access and server logs

Opening the website involves processing network data such as your IP address, access time, requested URL, HTTP method and response status, and depending on the server/browser configuration, your browser identifier, operating system and referrer. The host or reverse proxy may retain access and error logs.

Purposes: page delivery, reliability, troubleshooting and security. Legal basis: Article 6(1)(f) GDPR (legitimate interests in providing a secure and operational website). Recipients: hosting/infrastructure providers and authorised technical administrators where applicable.

Retention: network records should only be kept for as long as necessary for operations and security, subject to legal obligations and specific incidents. The actual production hosting provider's retention period has not yet been confirmed and must be added before final compliance approval.

3. Search, use of pages and downloads

The Wiki search sends your query and language preference to /api/search on the same Wiki server as URL parameters. The source code searches local article titles and descriptions; no separate user-profile database is used for this function. Search terms may nevertheless appear in webserver logs. Legal basis: Article 6(1)(f) GDPR, delivering the requested search feature.

For the release label, your browser requests /api/releases/latest from this Wiki. The Wiki server—not your browser—then contacts the GitHub release API and temporarily caches its response. Clicking the download link redirects your browser to GitHub, which may process your network data under its own policies.

4. Cookies and browser storage

The inspected Wiki application does not itself set tracking, advertising or analytics cookies. It stores the chosen light/dark appearance in a browser localStorage item named og-theme. Its only value is light or dark; it is read to restore your preference and overwritten when you change the theme. The application does not transmit this value to its server. You can delete it through browser site-data controls.

This access supports a display setting actively chosen by the user and may fall under the strictly necessary exemption of section 25(2)(2) TDDDG. Any storage access by third parties must be assessed separately.

5. Third-party design CDNs

As delivered, this Wiki loads:

• jsDelivr (cdn.jsdelivr.net): Remix Icon stylesheet and fonts.
• Cloudflare CDNJS (cdnjs.cloudflare.com): Font Awesome stylesheet and fonts.
• Tailwind CSS CDN (cdn.tailwindcss.com): JavaScript for generating layout styles.

Your browser connects directly to these providers when the page loads. They may receive your IP address, browser/device information and referrer. The current implementation relies on legitimate interests under Article 6(1)(f) GDPR for website presentation; whether the specific live integrations may lawfully operate without consent—including possible access to device storage—needs a separate review. Serving these dependencies locally would better minimise third-party data transfers.

Because CDNs operate globally, processing outside the EEA cannot be ruled out. Transfers must comply with GDPR Chapter V, for example through an applicable adequacy decision (where relevant an appropriately certified recipient under the EU–US Data Privacy Framework) or standard contractual clauses. The actual vendors, subprocessors and transfer safeguards must be verified. Consult each provider's own privacy information.

6. Contact via email

Contact emails involve processing your address, any name supplied, message and associated communication data to handle your enquiry. Legal bases: Article 6(1)(b) GDPR for contractual/pre-contractual matters; otherwise Article 6(1)(f) for handling requests, or Article 6(1)(c) where documentation is legally required. Data is not shared except as required to handle the matter or comply with law.

Messages are erased once no longer needed unless further correspondence, claims or legal retention rules apply. The actual email provider and technical retention settings need to be confirmed by the operator.

7. Locally hosted videos and external links

The source package serves videos locally from /static/video/; it does not require a connection to YouTube or Vimeo merely to play the embedded Wiki video. External sites such as GitHub, GitHub Sponsors and the forum are accessed when you open their links. Their respective operators process data under their own privacy notices.

8. Hosting, recipients, processors and international transfers

The hosting company, proxy/network providers, administrators and identified CDNs may act as processors, other recipients or independent controllers depending on their role. Where applicable, Article 28 GDPR processing agreements are needed. The provided source does not identify the actual production host, processing region or data processing agreements. Accordingly, we do not claim that all processing necessarily takes place within the EU.

9. Storage limits and security

Retention depends on the processing purpose, technical necessity, legal requirements and relevant legal claims. You can delete the browser theme preference at any time. The Wiki sends security-related HTTP headers. Actual HTTPS, access controls, backups and log deletion policies must be checked against the deployed system before making definitive assurances.

10. Your GDPR rights

Subject to applicable conditions, you have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20) and objection to processing based on legitimate interests (Art. 21 GDPR). You may withdraw consent at any time prospectively where consent is relied on (Art. 7(3)). Contact info@opengenesislink.de.

The inspected Wiki code does not carry out automated decision-making or profiling within the meaning of Article 22 GDPR. Providing personal details is generally voluntary, but basic network data is technically needed to deliver the website.

11. Right to lodge a complaint

Under Article 77 GDPR you may complain to a data protection authority. For the operator based in Lower Saxony this is notably the Lower Saxony Data Protection Commissioner (Der Landesbeauftragte für den Datenschutz Niedersachsen). See www.lfd.niedersachsen.de/beschwerde.

12. Updates and required deployment review

We update this notice when the website, service providers or applicable law change. The latest version is available here.

Legal references: GDPR · section 25 TDDDG.