Privacy

The pinboard system pinnet is developed with principles of data economy in mind. Therefore pinnet does not process any data that is not necessary for its operation.

We collect and process personal data only to the extent described in this privacy policy.

The system can be used anonymously. No personalized login is required. Therefore it will not be visible anywhere on a pinboard who was the author of a note or comment.

Information, correction, deletion or blocking of stored personal data can be requested at any time via our privacy contact privacy@pinnet.eu.

 

Data we collect

Every access to pinnet.eu is stored in a log file. The following data is recorded in that file:
  • IP address: the server needs the IP address to deliver the requested data to your device. However, the IP address is immediately pseudonymised by our provider and cannot be assigned to a connection at any time.
  • Date and time, page or name of the file accessed, amount of data transferred and message as to whether the access/retrieval was successful: this allows us to monitor the stability of the service.
  • Self-declaration of your browser (type, version, operating system)

The legal basis for this processing is art. 6 (1) lit. f GDPR (legitimate interest of system security).

In addition to log data, which is processed by the web server, the pinboard system itself processes personal data related to your content in the following ways:

  • Pinboard owners: If provided, the e-mail address for the person responsible for a pinboard is stored and used for authentication or for necessary communication (password reset or similar). Unconfirmed email addresses are deleted from the system after three days.
  • Time of creation: When notes and comments are created, the time of creation is saved. This time is used internally in the system to compile the summary emails. The exact time of a card creation is not made public at any point.
  • Moving items to the trash bin: When cards are moved to the trash bin, the time of that action can be reviewed via the trash bin overview. The purpose is to ensure that notes that may have been removed by mistake can quickly be found and restored. Besides, the timestamp is used internally in the system to automatically and permanently delete contents after 7 days.
  • Subscriptions: the platform stores and processes the email address of subscribers for the delivery of daily summaries.
  • Email history: emails that are sent out by the pinnet system are stored for 30 days.

Responsible persons (“board owners”) can delete a pinboard and all associated data via the administration access. The final deletion from the backups is carried out by the provider after 14 days at the latest.

The legal basis for this processing is art. 6 (1) lit. a and c GDPR (consent of the affected person, legal obligation).

 

Overview of the storage period of data

  • Unconfirmed email addresses for boards will be removed and deleted after three days.
  • Cards in the trash bin will be deleted permanently after 7 days.
  • Boards that see no activity after creation and that have no confirmed ownership/email address, will be deleted after 7 days.
  • Boards without confirmed owners, that saw no activity for 30 days, will be deleted.
  • Board with confirmed owners that saw no activity for 90 days will be deleted.
  • Email history: emails that are sent out by the pinnet system are stored for 30 days.

 

Data processing

We do not operate the underlying server ourselves, but have put the technical maintenance in professional hands. The server is provided by:

Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Deutschland
Tel.: +49 (0)9831 505-0, Fax: +49 (0)9831 505-3, E-Mail: info@hetzner.com

The provider is certified according to ISO 27001 (Information technology – Security techniques – Information security management systems – Requirements). The technical and organisational measures of the provider according to art. 28 GDPR can be retrieved here: www.hetzner.com/AV/TOM.pdf.

The server is located in Nuremberg/Germany.

 

Disclosure of personal data to third parties

Content or access logs to pinnet.eu will only be transmitted to third parties if we are obliged to do so by law or by a court decision. Data will not be disclosed for any other purpose.

 

Use of cookies

Systems with login functionality require the use of cookies. Otherwise, users would have to re-enter their credentials with every new click. Therefore, we do not point out to the particular use of cookies.

Cookies related to this website are only created and processed by the primary server.

Most browsers are set to automatically accept cookies. However, the storage of cookies can be deactivated or the browser can be set so that cookies are only stored for the duration of the respective online session.

 

Data protection for minors

Persons under 16 years of age should not submit any personal data to us without the consent of their parents or legal guardians. We do not request personal data from children and minors. Neither will we collect such data knowingly nor will we pass such data on to third parties.

 

Opportunity for participation and contact

As with any analogue and publicly accessible pinboard, a pinnet board is not the right place to publish confidential data. All contributing users share the responsibility.

If you recognise inappropriate contents, please get active and make sure those postings are removed from the pinboard.

If you have any questions or comments, feel free to contact us at support@pinnet.eu.