Wikimedia Foundation Privacy Policy
Original documentLAST VERIFIED 2026-10-01
ATTENTION POINTS · 15 TO CHECK · HEURISTIC, NOT LEGAL ADVICE
GDPR / UK-GDPR
4/13 ADDRESSED- Who controls your data (identity & contact of the data controller)GDPR Art. 13(1)(a)
- Data Protection Officer contactGDPR Art. 13(1)(b)
- The legal basis for using your dataGDPR Art. 13(1)(c)
- International transfers and their safeguardsGDPR Art. 13(1)(f) / 46
- Your data-subject rights (access, erasure, portability, object, …)GDPR Arts. 13(2)(b), 15–21
- The right to withdraw consent (where consent is the basis)GDPR Art. 13(2)(c)
- Whether providing your data is required, and what happens if you don'tGDPR Art. 13(2)(e)
- Automated decision-making or profilingGDPR Arts. 13(2)(f), 22
- Where your data was obtained, if not collected from you (source)GDPR Art. 14(2)(f)
CCPA / CPRA
4/10 ADDRESSED- The business or commercial purposes for collecting/selling/sharingCCPA §1798.110(c)
- A 'Do Not Sell or Share My Personal Information' option (if it sells/shares)CCPA §1798.135(a)
- A 'Limit the Use of My Sensitive Personal Information' option (CPRA)CPRA §1798.135(a)
- Your CCPA rights (know, delete, correct, opt-out, limit, non-discrimination)CCPA §§1798.100–125
- A non-discrimination promise for exercising your rightsCCPA §1798.125
- At least two ways to submit a request, plus a contactCCPA §1798.130
Other languages: - Avañe'ẽ - Bahasa Indonesia - Bahasa Melayu - Basa Banyumasan - Cebuano - Cymraeg - Deutsch - Deutsch (Sie-Form) - English - Esperanto - Frysk - Hausa - Ido - Jawa - Kiswahili - Kreyòl ayisyen - Ligure - Lëtzebuergesch - Madhurâ - Malagasy - Mara - Napulitano - Nederlands - Nederlands (informeel) - Nordfriisk - Oromoo - Qaraqalpaqsha - Ripoarisch - Scots - Soomaaliga - Tagalog - Tiếng Việt - Türkçe - Yorùbá - Zazaki - asturianu - azərbaycanca - bosanski -…
Show full text