From afa6df87f4f6de7756ad08869bcc805f0d156169 Mon Sep 17 00:00:00 2001 From: Perside Rosalie Date: Tue, 2 Jun 2026 09:45:23 +0200 Subject: [PATCH 01/18] WIP: Add upcoming terms of use page --- src/components/Pages/TermsOfUseUpcoming.vue | 815 ++++++++++++++++++++ src/router/index.js | 6 + 2 files changed, 821 insertions(+) create mode 100644 src/components/Pages/TermsOfUseUpcoming.vue diff --git a/src/components/Pages/TermsOfUseUpcoming.vue b/src/components/Pages/TermsOfUseUpcoming.vue new file mode 100644 index 00000000..ecbab7da --- /dev/null +++ b/src/components/Pages/TermsOfUseUpcoming.vue @@ -0,0 +1,815 @@ + + + + + diff --git a/src/router/index.js b/src/router/index.js index c164fc9d..3fefe9ca 100644 --- a/src/router/index.js +++ b/src/router/index.js @@ -20,6 +20,7 @@ import User from '@/components/Pages/User' import Discovery from '@/components/Pages/Discovery/Discovery' import Complaint from '@/components/Pages/Complaint.vue' import HostingPolicy from '@/components/Pages/HostingPolicy.vue' +import TermsOfUseUpcoming from "@/components/Pages/TermsOfUseUpcoming.vue"; Vue.use(Router) @@ -74,6 +75,11 @@ const router = new Router({ name: 'TermsOfUse', component: TermsOfUse, }, + { + path: '/terms-of-use/upcoming', + name: 'TermsOfUseUpcoming', + component: TermsOfUseUpcoming, + }, { path: '/hosting-policy/pilot', name: 'Hosting Policy', From e32aa1921a8e8ce81746b31228eecb3483659a09 Mon Sep 17 00:00:00 2001 From: dena Date: Tue, 2 Jun 2026 12:26:13 +0200 Subject: [PATCH 02/18] list wrapping + router links --- src/components/Pages/TermsOfUseUpcoming.vue | 73 +++++++++++---------- 1 file changed, 40 insertions(+), 33 deletions(-) diff --git a/src/components/Pages/TermsOfUseUpcoming.vue b/src/components/Pages/TermsOfUseUpcoming.vue index ecbab7da..9f4e6f8b 100644 --- a/src/components/Pages/TermsOfUseUpcoming.vue +++ b/src/components/Pages/TermsOfUseUpcoming.vue @@ -88,28 +88,31 @@ create, publish or share Content. The User agrees not to upload or share any Content on their Wikibase Instance that infringes the intellectual property rights of third persons or that is otherwise unlawful.

-

5.3 It is - specifically prohibited to: - * Upload or distribute Content that is +

5.3 It is specifically prohibited to:

+

5.4 The User should be aware that the sites may be edited by the public and, as such, may contain inappropriate Content at any time.

@@ -136,30 +139,32 @@ that Wikimedia has erred in one of the measures mentioned above in this section 6, the User may request a review using the complaint functions and Wikimedia will review and reconsider the decision. The following - rules apply to complaints
- * The User may file a complaint against the + rules apply to complaints:

+

7. Grant of rights of use

7.1 The User grants Wikimedia the rights of use to the uploaded Content for the purpose of @@ -210,7 +215,8 @@

11. Data Protection

1.11 For comprehensive information on how Wikimedia collects, processes or uses personal data of the User, please refer to - our Privacy Policy.

+ our Privacy + Policy.

11.2 To the extent that the Content provided by the User or by contributors and users of the User’s Wikimedia Instance contains personal data of third parties, the User remains the controller @@ -609,7 +615,7 @@ and duration of the processing

ANNEX III

Technical and organisational measures including technical - and organisational measures to ensure the security of the data
+ and organisational measures to ensure the security of the data

You may obtain a copy of our technical and organisational measures on request, to do so please send an email to: datenschutz@wikimedia.de. @@ -620,18 +626,19 @@ be completed in case of specific authorisation of sub-processors (Clause 7.7(a), Option 1). The controller has authorised the use of the following sub-processors:

-
    -
  1. Name: Google Ireland Ltd.
    Address: Gordon +
      +
    • 1. Name: Google Ireland Ltd.
      • Address: Gordon House, Barrow Street, Dublin 4 Contact person’s name, position and contact details: Please contact Wikimedia for the contact information Description of the processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Hosting - of the Wikibase.cloud service
    • Name: Mailgun Technologies, Inc
      + of the Wikibase.cloud service

      +
    • 2. Name: Mailgun Technologies, Inc
      • Address: 112 E Pecan St #1135, San Antonio, TX 78205 Contact person’s name, position and contact details: Please contact Wikimedia for the contact information Description of the processing : Email service provisioning -
+

Appendix 2: International Standard Contractual Clauses : MODULE FOUR: Transfer processor to controller

SECTION I

From 047b7eead9376d29dbcec4d854bd9a60003c4878 Mon Sep 17 00:00:00 2001 From: dena Date: Tue, 2 Jun 2026 12:28:23 +0200 Subject: [PATCH 03/18] format HTML --- src/components/Pages/TermsOfUseUpcoming.vue | 542 ++++++++++++-------- 1 file changed, 323 insertions(+), 219 deletions(-) diff --git a/src/components/Pages/TermsOfUseUpcoming.vue b/src/components/Pages/TermsOfUseUpcoming.vue index 9f4e6f8b..23a6a0ce 100644 --- a/src/components/Pages/TermsOfUseUpcoming.vue +++ b/src/components/Pages/TermsOfUseUpcoming.vue @@ -6,18 +6,18 @@

Terms Of Use

1. Definitions

In addition to terms defined elsewhere in this - Agreement, the following terms have the following meanings:

+ Agreement, the following terms have the following meanings:

1.1 “Manager Account” or “Account”: The personal Account provided by Wikibase.cloud - to the User on the Platform after the User’s registration.

+ to the User on the Platform after the User’s registration.

1.2 “Content”: Any type of media (for example text, video files) uploaded to the - Platform by a User.

+ Platform by a User.

1.3 “User”: A natural person that registers for and - uses the Platform.

+ uses the Platform.

1.4 “Wikimedia”: Wikimedia Deutschland – Gesellschaft zur Förderung Freien Wissens e. V.

1.5 “Wikibase Instance” or “Site”: an open knowledge base that can be - created and run by anyone on Wikibase.cloud. -

+ created and run by anyone on Wikibase.cloud. +

2. Scope and Applicability

2.1 Wikimedia, Tempelhofer Ufer 23/24, 10963 Berlin, provides Wikibase.cloud (the „Platform“), a free cloud-based Platform that hosts @@ -89,30 +89,30 @@ any Content on their Wikibase Instance that infringes the intellectual property rights of third persons or that is otherwise unlawful.

5.3 It is specifically prohibited to:

-
    +
    • Upload or distribute Content that is - insulting, abusive, offensive, racist, threatening, harmful to minors, - pornographic, violates personal rights, promotes violence or sedition, - incites criminal acts, provides instructions on how to commit criminal - acts, or provides services that involve pornographic and/or erotic - Content or any other illegal Content
      • + insulting, abusive, offensive, racist, threatening, harmful to minors, + pornographic, violates personal rights, promotes violence or sedition, + incites criminal acts, provides instructions on how to commit criminal + acts, or provides services that involve pornographic and/or erotic + Content or any other illegal Content
    • Upload or distribute Content - that is copied as a whole or in part from another protected work or - material without the permission of the respective copyright owner; - *Upload or distribute Content that violates or infringes the rights of - third parties, in particular personal rights, copyrights or other - intellectual property rights or any other rights of third parties
      • + that is copied as a whole or in part from another protected work or + material without the permission of the respective copyright owner; + *Upload or distribute Content that violates or infringes the rights of + third parties, in particular personal rights, copyrights or other + intellectual property rights or any other rights of third parties
    • Upload or distribute Content that contains personal, confidential or - non-public information
      • + non-public information
    • Contact other users of the Platform in a - disrespectful and rude manner, as well as to buy or sell products or - services;
      • + disrespectful and rude manner, as well as to buy or sell products or + services;
    • Provide false data or information, as well as false data or - information of third parties; or
      • + information of third parties; or
    • Sell or otherwise transfer the User Account to another person.
      • -
    +

5.4 The User should be aware that the sites may be edited by the public and, as such, may contain inappropriate Content at any time.

@@ -140,56 +140,58 @@ section 6, the User may request a review using the complaint functions and Wikimedia will review and reconsider the decision. The following rules apply to complaints:

-
    +
    • The User may file a complaint against the - removal of the Content, the suspension or termination of the Account, or - the rejection of a report submitted by the User regarding Content that - the User considers to be illegal.
      • -
    • The User is not entitled to file a - complaint if the User has already been warned for improper use of - Wikimedia’s complaint system. This is the case, for example, if the User - repeatedly submits identical complaints without justification.
    • A - complaint must be made within six months of the date on which the User - was notified of our decision.
      • -
    • Wikimedia deals with complaints - promptly, carefully and without discrimination or arbitrariness. In - order to do this, Wikimedia needs all relevant information from the User - to understand the complaint. Complaints with offensive or inappropriate - language may result in the suspension of complaints after a warning.
      • -
    • Wikimedia shall promptly decide whether to reverse or uphold the - original action. The User will receive the reasoned decision promptly.
      • -
    • In considering the complaint, Wikimedia will take into account the - seriousness of the breach, the reason for the complaint, the frequency - and impact of the breaches and the intention behind the breach.
      • -
    • This section is without prejudice to the rights of EU users to take their - case to certified out-of-court complaint bodies. For more information, - please click here.
      • -
    + removal of the Content, the suspension or termination of the Account, or + the rejection of a report submitted by the User regarding Content that + the User considers to be illegal. +
  • The User is not entitled to file a + complaint if the User has already been warned for improper use of + Wikimedia’s complaint system. This is the case, for example, if the User + repeatedly submits identical complaints without justification. +
  • A + complaint must be made within six months of the date on which the User + was notified of our decision.
    • +
  • Wikimedia deals with complaints + promptly, carefully and without discrimination or arbitrariness. In + order to do this, Wikimedia needs all relevant information from the User + to understand the complaint. Complaints with offensive or inappropriate + language may result in the suspension of complaints after a warning.
    • +
  • Wikimedia shall promptly decide whether to reverse or uphold the + original action. The User will receive the reasoned decision promptly.
    • +
  • In considering the complaint, Wikimedia will take into account the + seriousness of the breach, the reason for the complaint, the frequency + and impact of the breaches and the intention behind the breach.
    • +
  • This section is without prejudice to the rights of EU users to take their + case to certified out-of-court complaint bodies. For more information, + please click here. +
    • +

7. Grant of rights of use

7.1 The User grants Wikimedia the rights of use to the uploaded Content for the purpose of Wikimedia’s provision of the Platform.

7.2 Wikimedia reserves the right to close, move, merge, or rename a site for any reason. Wikimedia shall not be held liable for any modification, - suspension or discontinuance of any site, or of the Platform as a whole.

+ suspension or discontinuance of any site, or of the Platform as a whole.

8. Term and Termination

8.1 The terms of this Agreement commence upon the - User’s registration.

+ User’s registration.

8.2 The User can delete their Account by contacting Wikimedia, for example, via https://www.wikibase.cloud/contact.

8.3 Wikimedia can (i) terminate the contract, (ii) suspend single instances, (iii) permanently delete single instances, and/ or (iv) transfer ownership of single instances to another User at any time and without - cause, provided that two weeks’ notice is given.

+ cause, provided that two weeks’ notice is given.

8.4 The User can delete their Wikibase Instance at any time through the settings. All data and Content associated with this Wikibase Instance will be permanently - deleted after 30 days. The domain may not be available for reuse.

+ deleted after 30 days. The domain may not be available for reuse.

8.5 Wikimedia may terminate or suspend any use of the Platform and the User’s Account immediately, without notice or liability, if the User breaches any of the terms and conditions of the Terms of Use. Upon termination of the User’s Account, the User’s right to use the Platform - will immediately cease.

+ will immediately cease.

9. Availability and Maintenance

9.1 Wikimedia shall implement appropriate measures to ensure the availability and error free functionality of the Platform. However, the User acknowledges @@ -216,7 +218,7 @@

1.11 For comprehensive information on how Wikimedia collects, processes or uses personal data of the User, please refer to our Privacy - Policy.

+ Policy.

11.2 To the extent that the Content provided by the User or by contributors and users of the User’s Wikimedia Instance contains personal data of third parties, the User remains the controller @@ -258,53 +260,53 @@

SECTION I

Clause 1

Purpose and scope

-

(a) The purpose of these Standard +

(a) The purpose of these Standard Contractual Clauses (the Clauses) is to ensure compliance with Article 28(3) and (4) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

-

(b) The controllers and processors listed in Annex I have +

(b) The controllers and processors listed in Annex I have agreed to these Clauses in order to ensure compliance with Article 28(3) and (4) of Regulation (EU) 2016/679 and/or Article 29(3) and (4) of Regulation (EU) 2018/1725.

-

(c) These Clauses apply to the processing of +

(c) These Clauses apply to the processing of personal data as specified in Annex II.

-

(d) Annexes I to IV are an +

(d) Annexes I to IV are an integral part of the Clauses.

-

(e) These Clauses are without prejudice to +

(e) These Clauses are without prejudice to obligations to which the controller is subject by virtue of Regulation (EU) 2016/679 and/or Regulation (EU) 2018/1725.

-

(f) These Clauses do not +

(f) These Clauses do not by themselves ensure compliance with obligations related to international transfers in accordance with Chapter V of Regulation (EU) 2016/679 and/or Regulation (EU) 2018/1725.

Clause 2

Invariability of the Clauses

-

(a) The Parties undertake not to modify the Clauses, except for +

(a) The Parties undertake not to modify the Clauses, except for adding information to the Annexes or updating information in them.

-

(b)This does not prevent the Parties from including the standard +

(b)This does not prevent the Parties from including the standard contractual clauses laid down in these Clauses in a broader contract, or from adding other clauses or additional safeguards provided that they do not directly or indirectly contradict the Clauses or detract from the - fundamental rights or freedoms of data subjects.

+ fundamental rights or freedoms of data subjects.

Clause 3

Interpretation

-

(a) Where these Clauses use the terms defined in Regulation (EU) +

(a) Where these Clauses use the terms defined in Regulation (EU) 2016/679 or Regulation (EU) 2018/1725 respectively, those terms shall have the same meaning as in that Regulation.

-

(b) These Clauses shall be +

(b) These Clauses shall be read and interpreted in the light of the provisions of Regulation (EU) 2016/679 or Regulation (EU) 2018/1725 respectively.

-

(c) These Clauses +

(c) These Clauses shall not be interpreted in a way that runs counter to the rights and obligations provided for in Regulation (EU) 2016/679 / Regulation (EU) 2018/1725 or in a way that prejudices the fundamental rights or freedoms - of the data subjects.

+ of the data subjects.

Clause 4

Hierarchy

-

In the event of a contradiction +

In the event of a contradiction between these Clauses and the provisions of related agreements between the Parties existing at the time when these Clauses are agreed or entered into thereafter, these Clauses shall prevail.

@@ -312,13 +314,13 @@

OBLIGATIONS OF THE PARTIES

Clause 5

Description of processing(s)

-

The details of the processing operations, in particular the categories of +

The details of the processing operations, in particular the categories of personal data and the purposes of processing for which the personal data is processed on behalf of the controller, are specified in Annex II.

Clause 6

Obligations of the Parties

6.1. Instructions
-

(a) The processor +

(a) The processor shall process personal data only on documented instructions from the controller, unless required to do so by Union or Member State law to which the processor is subject. In this case, the processor shall inform @@ -326,20 +328,20 @@ law prohibits this on important grounds of public interest. Subsequent instructions may also be given by the controller throughout the duration of the processing of personal data. These instructions shall always be - documented.

-

(b) The processor shall immediately inform the controller + documented.

+

(b) The processor shall immediately inform the controller if, in the processor’s opinion, instructions given by the controller infringe Regulation (EU) 2016/679 / Regulation (EU) 2018/1725 or the - applicable Union or Member State data protection provisions.

+ applicable Union or Member State data protection provisions.

6.2. Purpose limitation
-

The processor shall process the personal data only +

The processor shall process the personal data only for the specific purpose(s) of the processing, as set out in Annex II, unless it receives further instructions from the controller.

6.3. Duration of the processing of personal data
-

Processing by the processor - shall only take place for the duration specified in Annex II.

+

Processing by the processor + shall only take place for the duration specified in Annex II.

6.4. Security of processing
-

(a) The processor shall at least implement the +

(a) The processor shall at least implement the technical and organisational measures specified in Annex III to ensure the security of the personal data. This includes protecting the data against a breach of security leading to accidental or unlawful @@ -348,7 +350,7 @@ security, the Parties shall take due account of the state of the art, the costs of implementation, the nature, scope, context and purposes of processing and the risks involved for the data subjects.

-

(b) The +

(b) The processor shall grant access to the personal data undergoing processing to members of its personnel only to the extent strictly necessary for implementing, managing and monitoring of the contract. The processor @@ -356,7 +358,7 @@ received have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality.

6.5. Sensitive data
-

If the processing involves personal data revealing racial or ethnic +

If the processing involves personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data or biometric data for the purpose of uniquely identifying a natural person, data concerning health or a @@ -364,12 +366,12 @@ convictions and offences (“sensitive data”), the processor shall apply specific restrictions and/or additional safeguards.

6.6. Documentation and compliance
-

(a) The Parties shall be able to demonstrate compliance +

(a) The Parties shall be able to demonstrate compliance with these Clauses.

-

(b) The processor shall deal promptly and adequately +

(b) The processor shall deal promptly and adequately with inquiries from the controller about the processing of data in accordance with these Clauses.

-

(c) The processor shall make available to +

(c) The processor shall make available to the controller all information necessary to demonstrate compliance with the obligations that are set out in these Clauses and stem directly from Regulation (EU) 2016/679 and/or Regulation (EU) 2018/1725. At the @@ -378,16 +380,16 @@ reasonable intervals or if there are indications of non-compliance. In deciding on a review or an audit, the controller may take into account relevant certifications held by the processor.

-

(d) The controller may +

(d) The controller may choose to conduct the audit by itself or mandate an independent auditor. Audits may also include inspections at the premises or physical facilities of the processor and shall, where appropriate, be carried out with reasonable notice.

-

(e) The Parties shall make the information +

(e) The Parties shall make the information referred to in this Clause, including the results of any audits, available to the competent supervisory authority/ies on request.

6.7. Use of sub-processors
-

(a) GENERAL WRITTEN AUTHORISATION: The processor +

(a) GENERAL WRITTEN AUTHORISATION: The processor has the controller’s general authorisation for the engagement of sub-processors from an agreed list. The processor shall specifically inform in writing the controller of any intended changes of that list @@ -397,7 +399,7 @@ sub-processor(s). The processor shall provide the controller with the information necessary to enable the controller to exercise the right to object.

-

(b) Where the processor engages a sub-processor for carrying out +

(b) Where the processor engages a sub-processor for carrying out specific processing activities (on behalf of the controller), it shall do so by way of a contract which imposes on the sub-processor, in substance, the same data protection obligations as the ones imposed on @@ -405,30 +407,30 @@ ensure that the sub-processor complies with the obligations to which the processor is subject pursuant to these Clauses and to Regulation (EU) 2016/679 and/or Regulation (EU) 2018/1725.

-

(c) At the controller’s +

(c) At the controller’s request, the processor shall provide a copy of such a sub-processor agreement and any subsequent amendments to the controller. To the extent necessary to protect business secret or other confidential information, including personal data, the processor may redact the text of the agreement prior to sharing the copy.

-

(d) The processor shall remain +

(d) The processor shall remain fully responsible to the controller for the performance of the sub-processor’s obligations in accordance with its contract with the processor. The processor shall notify the controller of any failure by the sub-processor to fulfil its contractual obligations.

-

(e) The processor shall agree a third party beneficiary clause with the +

(e) The processor shall agree a third party beneficiary clause with the sub-processor whereby - in the event the processor has factually disappeared, ceased to exist in law or has become insolvent - the controller shall have the right to terminate the sub-processor contract and to instruct the sub-processor to erase or return the personal data.

-
6.8. International transfers
-

(a) Any transfer of data to a third country +

6.8. International transfers
+

(a) Any transfer of data to a third country or an international organisation by the processor shall be done only on the basis of documented instructions from the controller or in order to fulfil a specific requirement under Union or Member State law to which the processor is subject and shall take place in compliance with Chapter V of Regulation (EU) 2016/679 or Regulation (EU) 2018/1725.

-

(b) The +

(b) The controller agrees that where the processor engages a sub-processor in accordance with Clause 7.7. for carrying out specific processing activities (on behalf of the controller) and those processing activities @@ -440,99 +442,103 @@ the use of those standard contractual clauses are met.

Clause 7

Assistance to the controller

-

(a) The processor shall promptly notify the +

(a) The processor shall promptly notify the controller of any request it has received from the data subject. It shall not respond to the request itself, unless authorised to do so by the controller.

-

(b) The processor shall assist the controller in +

(b) The processor shall assist the controller in fulfilling its obligations to respond to data subjects’ requests to exercise their rights, taking into account the nature of the processing. In fulfilling its obligations in accordance with (a) and (b), the processor shall comply with the controller’s instructions

-

(c) In +

(c) In addition to the processor’s obligation to assist the controller pursuant to Clause 8(b), the processor shall furthermore assist the controller in ensuring compliance with the following obligations, taking into account the nature of the data processing and the information available to the - processor:

-
-

(1) the obligation to carry out an assessment of the impact - of the envisaged processing operations on the protection of personal - data (a ‘data protection impact assessment’) where a type of processing - is likely to result in a high risk to the rights and freedoms of natural - persons;

-

(2) the obligation to consult the competent supervisory - authority/ies prior to processing where a data protection impact - assessment indicates that the processing would result in a high risk in - the absence of measures taken by the controller to mitigate the risk;

-

(3) the obligation to ensure that personal data is accurate and up to - date, by informing the controller without delay if the processor becomes - aware that the personal data it is processing is inaccurate or has - become outdated;

-

(4) the obligations in Article 32 of Regulation (EU) - 2016/679.

-
-

(d) The Parties shall set out in Annex III the appropriate technical and organisational measures by which the processor is required to assist the controller in the application of this Clause as well as the scope and the extent of the assistance required.

+ processor:

+
+

(1) the obligation to carry out an assessment of the impact + of the envisaged processing operations on the protection of personal + data (a ‘data protection impact assessment’) where a type of processing + is likely to result in a high risk to the rights and freedoms of natural + persons;

+

(2) the obligation to consult the competent supervisory + authority/ies prior to processing where a data protection impact + assessment indicates that the processing would result in a high risk in + the absence of measures taken by the controller to mitigate the risk;

+

(3) the obligation to ensure that personal data is accurate and up to + date, by informing the controller without delay if the processor becomes + aware that the personal data it is processing is inaccurate or has + become outdated;

+

(4) the obligations in Article 32 of Regulation (EU) + 2016/679.

+
+

(d) The Parties shall set out in Annex III the appropriate technical and organisational measures by which + the processor is required to assist the controller in the application of this Clause as well as the scope + and the extent of the assistance required.

Clause 8

Notification of personal data breach

-

In the event of a personal data +

In the event of a personal data breach, the processor shall cooperate with and assist the controller for the controller to comply with its obligations under Articles 33 and 34 of Regulation (EU) 2016/679 or under Articles 34 and 35 of Regulation (EU) 2018/1725, where applicable, taking into account the nature of - processing and the information available to the processor.

+ processing and the information available to the processor.

8.1 Data breach concerning data processed by the controller
-

In the event of a +

In the event of a personal data breach concerning data processed by the controller, the processor shall assist the controller:

-

(a) in notifying the personal +

(a) in notifying the personal data breach to the competent supervisory authority/ies, without undue delay after the controller has become aware of it, where relevant/(unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons);

-

(b) in obtaining +

(b) in obtaining the following information which, pursuant to Article 33(3) of Regulation (EU) 2016/679, shall be stated in the controller’s notification, and - must at least include:

-
-

(1) the nature of the personal data including + must at least include:

+
+

(1) the nature of the personal data including where possible, the categories and approximate number of data subjects concerned and the categories and approximate number of personal data - records concerned;

-

(2) the likely consequences of the personal data - breach;

-

(3) the measures taken or proposed to be taken by the controller + records concerned;

+

(2) the likely consequences of the personal data + breach;

+

(3) the measures taken or proposed to be taken by the controller to address the personal data breach, including, where appropriate, - measures to mitigate its possible adverse effects.

-
-

Where, and insofar as, it is not possible to provide all this information at the same time, the initial notification shall contain the information then available and further information shall, as it becomes available, subsequently be provided without undue delay.

-

(c) in complying, pursuant to Article 34 of Regulation (EU) 2016/679, - with the obligation to communicate without undue delay the personal data - breach to the data subject, when the personal data breach is likely to - result in a high risk to the rights and freedoms of natural persons.

+ measures to mitigate its possible adverse effects.

+
+

Where, and insofar as, it is not possible to provide all this information at the same time, the initial + notification shall contain the information then available and further information shall, as it becomes + available, subsequently be provided without undue delay.

+

(c) in complying, pursuant to Article 34 of Regulation (EU) 2016/679, + with the obligation to communicate without undue delay the personal data + breach to the data subject, when the personal data breach is likely to + result in a high risk to the rights and freedoms of natural persons.

8.2 Data breach concerning data processed by the processor
-

In the event of a - personal data breach concerning data processed by the processor, the - processor shall notify the controller without undue delay after the - processor having become aware of the breach. Such notification shall - contain, at least:

-

(a) a description of the nature of the breach (including, where - possible, the categories and approximate number of data subjects and - data records concerned);

-

(b)the details of a contact point where more information concerning the - personal data breach can be obtained;

-

(c)its likely consequences and the measures taken or proposed to be - taken to address the breach, including to mitigate its possible adverse - effects.

-

Where, and insofar as, it is not possible to provide all this - information at the same time, the initial notification shall contain the - information then available and further information shall, as it becomes - available, subsequently be provided without undue delay.

-

The Parties - shall set out in Annex III all other elements to be provided by the - processor when assisting the controller in the compliance with the - controller’s obligations under Articles 33 and 34 of Regulation (EU) - 2016/679.

+

In the event of a + personal data breach concerning data processed by the processor, the + processor shall notify the controller without undue delay after the + processor having become aware of the breach. Such notification shall + contain, at least:

+

(a) a description of the nature of the breach (including, where + possible, the categories and approximate number of data subjects and + data records concerned);

+

(b)the details of a contact point where more information concerning the + personal data breach can be obtained;

+

(c)its likely consequences and the measures taken or proposed to be + taken to address the breach, including to mitigate its possible adverse + effects.

+

Where, and insofar as, it is not possible to provide all this + information at the same time, the initial notification shall contain the + information then available and further information shall, as it becomes + available, subsequently be provided without undue delay.

+

The Parties + shall set out in Annex III all other elements to be provided by the + processor when assisting the controller in the compliance with the + controller’s obligations under Articles 33 and 34 of Regulation (EU) + 2016/679.

SECTION III

FINAL PROVISIONS

Clause 9

@@ -548,43 +554,51 @@

(b) The controller shall be entitled to terminate the contract insofar as it concerns processing of personal data in accordance with these Clauses if:

-
-

(1) the processing of personal data by +

+

(1) the processing of personal data by the processor has been suspended by the controller pursuant to point (a) and if compliance with these Clauses is not restored within a reasonable time and in any event within one month following suspension;

-

(2) the +

(2) the processor is in substantial or persistent breach of these Clauses or its obligations under Regulation (EU) 2016/679 and/or Regulation (EU) - 2018/1725;

-

(3) the processor fails to comply with a binding decision of + 2018/1725;

+

(3) the processor fails to comply with a binding decision of a competent court or the competent supervisory authority/ies regarding its obligations pursuant to these Clauses or to Regulation (EU) 2016/679 - and/or Regulation (EU) 2018/1725.

-
-

(c) The processor shall be entitled to terminate the contract insofar as it concerns processing of personal data under these Clauses where, after having informed the controller that its instructions infringe applicable legal requirements in accordance with Clause 7.1 (b), the controller insists on compliance with the instructions.

-

(d) Following termination of the contract, the processor shall, at the choice of the controller, delete all personal data processed on behalf of the controller and certify to the controller that it has done so, or, return all the personal data to the controller and delete existing copies unless Union or Member State law requires storage of the personal data. Until the data is deleted or returned, the processor shall continue to ensure compliance with these Clauses.

+ and/or Regulation (EU) 2018/1725.

+
+

(c) The processor shall be entitled to terminate the contract insofar as it concerns processing of personal + data under these Clauses where, after having informed the controller that its instructions infringe + applicable legal requirements in accordance with Clause 7.1 (b), the controller insists on compliance with + the instructions.

+

(d) Following termination of the contract, the processor shall, at the choice of the controller, delete all + personal data processed on behalf of the controller and certify to the controller that it has done so, or, + return all the personal data to the controller and delete existing copies unless Union or Member State law + requires storage of the personal data. Until the data is deleted or returned, the processor shall continue + to ensure compliance with these Clauses.

ANNEX I

List of parties

Controller(s): [Identity and contact details - of the controller(s), and, where applicable, of the controller’s data - protection officer]

-

The User as specified in the Terms of Use.

-

Processor(s): + of the controller(s), and, where applicable, of the controller’s data + protection officer] +

+

The User as specified in the Terms of Use.

+

Processor(s): [Identity and contact details of the processor(s) and, where applicable, of the processor’s data protection officer]

-

Wikimedia +

Wikimedia Deutschland e. V., Tempelhofer Ufer 23-24, 10369 Berlin

ANNEX II

Description of the processing
Categories of data subjects whose personal data is processed
  • Any categories of data subjects - contained in the data uploaded by the User
    • . + contained in the data uploaded by the User. Categories of personal data processed
  • Any categories of personal data contained in the data - uploaded by the User.
    • + uploaded by the User. Sensitive data processed (if applicable) and applied restrictions or safeguards that fully take into consideration the nature of the data and the risks involved, such as for instance @@ -598,7 +612,7 @@ in the User’s responsibility to ensure that the safeguards are sufficient to process the specific categories of personal data. Nature of the processing -
  • Any processing necessary to fulfil the contractual +
  • Any processing necessary to fulfil the contractual purposes. Especially collection, storage, disclosure and dissemination and making publicly available as well as anonymization and/or deletion.
    • Purpose(s) for which the personal data is processed on behalf of the @@ -611,7 +625,7 @@ Duration of the processing
  • The rules of the Agreement regarding the Term and Termination apply.
    • - For processing by (sub-) processors, also specify subject matter, nature + For processing by (sub-) processors, also specify subject matter, nature and duration of the processing

    ANNEX III

    Technical and organisational measures including technical @@ -632,8 +646,8 @@ contact details: Please contact Wikimedia for the contact information Description of the processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Hosting - of the Wikibase.cloud service

    -
  • 2. Name: Mailgun Technologies, Inc
    • + of the Wikibase.cloud service

    +
  • 2. Name: Mailgun Technologies, Inc
    • Address: 112 E Pecan St #1135, San Antonio, TX 78205 Contact person’s name, position and contact details: Please contact Wikimedia for the contact information Description of the processing : Email service @@ -644,43 +658,81 @@

    SECTION I

    Clause 1

    Purpose and scope

    -

    (a) The purpose of these standard contractual clauses is to ensure compliance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation)[1] for the transfer of personal data to a third country.

    +

    (a) The purpose of these standard contractual clauses is to ensure compliance with the requirements of + Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of + natural persons with regard to the processing of personal data and on the free movement of such data + (General Data Protection Regulation)[1] for the transfer of personal data to a third country.

    (b) The Parties:

    -

    (i) the natural or legal person(s), public authority/ies, agency/ies or other body/ies (hereinafter “entity/ies”) transferring the personal data, as listed in Annex I.A. (hereinafter each “data exporter”),

    +

    (i) the natural or legal person(s), public authority/ies, agency/ies or other body/ies (hereinafter + “entity/ies”) transferring the personal data, as listed in Annex I.A. (hereinafter each “data exporter”), +

    and

    -

    (ii) the entity/ies in a third country receiving the personal data from the data exporter, directly or indirectly via another entity also Party to these Clauses, as listed in Annex I.A. (hereinafter each “data importer”)

    +

    (ii) the entity/ies in a third country receiving the personal data from the data exporter, directly or + indirectly via another entity also Party to these Clauses, as listed in Annex I.A. (hereinafter each “data + importer”)

    have agreed to these standard contractual clauses (hereinafter: “Clauses”).

    (c) These Clauses apply with respect to the transfer of personal data as specified in Annex I.B.

    -

    (d) The Appendix to these Clauses containing the Annexes referred to therein forms an integral part of these Clauses.

    +

    (d) The Appendix to these Clauses containing the Annexes referred to therein forms an integral part of + these Clauses.

    Clause 2 Effect and invariability of the Clauses

      - 
    1.    These Clauses set out appropriate safeguards, including enforceable data subject rights and effective legal remedies, pursuant to Article 46(1) and Article 46 (2)(c) of Regulation (EU) 2016/679 and, with respect to data transfers from controllers to processors and/or processors to processors, standard contractual clauses pursuant to Article 28(7) of Regulation (EU) 2016/679, provided they are not modified, except to select the appropriate Module(s) or to add or update information in the Appendix. This does not prevent the Parties from including the standard contractual clauses laid down in these Clauses in a wider contract and/or to add other clauses or additional safeguards, provided that they do not contradict, directly or indirectly, these Clauses or prejudice the fundamental rights or freedoms of data subjects.
      2. - 
    2.    These Clauses are without prejudice to obligations to which the data exporter is subject by virtue of Regulation (EU) 2016/679.
      3. +
    3. + 
         These Clauses set out appropriate safeguards, including enforceable data subject rights and effective legal remedies, pursuant to Article 46(1) and Article 46 (2)(c) of Regulation (EU) 2016/679 and, with respect to data transfers from controllers to processors and/or processors to processors, standard contractual clauses pursuant to Article 28(7) of Regulation (EU) 2016/679, provided they are not modified, except to select the appropriate Module(s) or to add or update information in the Appendix. This does not prevent the Parties from including the standard contractual clauses laid down in these Clauses in a wider contract and/or to add other clauses or additional safeguards, provided that they do not contradict, directly or indirectly, these Clauses or prejudice the fundamental rights or freedoms of data subjects.
      +
      4. +
    4. + 
         These Clauses are without prejudice to obligations to which the data exporter is subject by virtue of Regulation (EU) 2016/679.
      +

    Clause 3 Third-party beneficiaries

      - 
    1.    Data subjects may invoke and enforce these Clauses, as third-party beneficiaries, against the data exporter and/or data importer, with the following exceptions:
      2. - 
    2.    Clause 1, Clause 2, Clause 3, Clause 6, Clause 7;
      3. +
    3. + 
         Data subjects may invoke and enforce these Clauses, as third-party beneficiaries, against the data exporter and/or data importer, with the following exceptions:
      +
      4. +
    4. + 
         Clause 1, Clause 2, Clause 3, Clause 6, Clause 7;
      +
      - 
    1.    Clause 8 - Module One: Clause 8.5 (e) and Clause 8.9(b); Module Two: Clause 8.1(b), 8.9(a), (c), (d) and (e); Module Three: Clause 8.1(a), (c) and (d) and Clause 8.9(a), (c), (d), (e), (f) and (g); Module Four: Clause 8.1 (b) and Clause 8.3(b);
      2. - 
    2.    Clause 9 - Module Two: Clause 9(a), (c), (d) and (e); Module Three: Clause 9(a), (c), (d) and (e);
      3. - 
    3.    Clause 12 - Module One: Clause 12(a) and (d); Modules Two and Three: Clause 12(a), (d) and (f);
      4. - 
    4.    Clause 13;
      5. - 
    5.    Clause 15.1(c), (d) and (e);
      6. - 
    6.    Clause 16(e);
      7. - 
    7.    Clause 18 - Modules One, Two and Three: Clause 18(a) and (b); Module Four: Clause 18.
      8. +
    8. + 
         Clause 8 - Module One: Clause 8.5 (e) and Clause 8.9(b); Module Two: Clause 8.1(b), 8.9(a), (c), (d) and (e); Module Three: Clause 8.1(a), (c) and (d) and Clause 8.9(a), (c), (d), (e), (f) and (g); Module Four: Clause 8.1 (b) and Clause 8.3(b);
      +
      9. +
    9. + 
         Clause 9 - Module Two: Clause 9(a), (c), (d) and (e); Module Three: Clause 9(a), (c), (d) and (e);
      +
      10. +
    10. + 
         Clause 12 - Module One: Clause 12(a) and (d); Modules Two and Three: Clause 12(a), (d) and (f);
      +
      11. +
    11. + 
         Clause 13;
      +
      12. +
    12. + 
         Clause 15.1(c), (d) and (e);
      +
      13. +
    13. + 
         Clause 16(e);
      +
      14. +
    14. + 
         Clause 18 - Modules One, Two and Three: Clause 18(a) and (b); Module Four: Clause 18.
      +
      - 
    1.    Paragraph (a) is without prejudice to rights of data subjects under Regulation (EU) 2016/679.
      2. +
    2. + 
         Paragraph (a) is without prejudice to rights of data subjects under Regulation (EU) 2016/679.
      +

    Clause 4 Interpretation

      - 
    1.    Where these Clauses use terms that are defined in Regulation (EU) 2016/679, those terms shall have the same meaning as in that Regulation.
      2. - 
    2.    These Clauses shall be read and interpreted in the light of the provisions of Regulation (EU) 2016/679.
      3. - 
    3.    These Clauses shall not be interpreted in a way that conflicts with rights and obligations provided for in Regulation (EU) 2016/679.
      4. +
    4. + 
         Where these Clauses use terms that are defined in Regulation (EU) 2016/679, those terms shall have the same meaning as in that Regulation.
      +
      5. +
    5. + 
         These Clauses shall be read and interpreted in the light of the provisions of Regulation (EU) 2016/679.
      +
      6. +
    6. + 
         These Clauses shall not be interpreted in a way that conflicts with rights and obligations provided for in Regulation (EU) 2016/679.
      +

    Clause 5 Hierarchy

    In the event of a contradiction between these Clauses and the @@ -693,9 +745,15 @@ transferred, are specified in Annex I.B.

    Clause 7 - Optional Docking clause

      - 
    1.    An entity that is not a Party to these Clauses may, with the agreement of the Parties, accede to these Clauses at any time, either as a data exporter or as a data importer, by completing the Appendix and signing Annex I.A.
      2. - 
    2.    Once it has completed the Appendix and signed Annex I.A, the acceding entity shall become a Party to these Clauses and have the rights and obligations of a data exporter or data importer in accordance with its designation in Annex I.A.
      3. - 
    3.    The acceding entity shall have no rights or obligations arising under these Clauses from the period prior to becoming a Party.
      4. +
    4. + 
         An entity that is not a Party to these Clauses may, with the agreement of the Parties, accede to these Clauses at any time, either as a data exporter or as a data importer, by completing the Appendix and signing Annex I.A.
      +
      5. +
    5. + 
         Once it has completed the Appendix and signed Annex I.A, the acceding entity shall become a Party to these Clauses and have the rights and obligations of a data exporter or data importer in accordance with its designation in Annex I.A.
      +
      6. +
    6. + 
         The acceding entity shall have no rights or obligations arising under these Clauses from the period prior to becoming a Party.
      +

    SECTION II – OBLIGATIONS OF THE PARTIES Clause 8 Data protection safeguards

    @@ -705,21 +763,39 @@ obligations under these Clauses.

    8.1 Instructions

      - 
    1.    The data exporter shall process the personal data only on documented instructions from the data importer acting as its controller.
      2. - 
    2.    The data exporter shall immediately inform the data importer if it is unable to follow those instructions, including if such instructions infringe Regulation (EU) 2016/679 or other Union or Member State data protection law.
      3. - 
    3.    The data importer shall refrain from any action that would prevent the data exporter from fulfilling its obligations under Regulation (EU) 2016/679, including in the context of sub-processing or as regards cooperation with competent supervisory authorities.
      4. - 
    4.    After the end of the provision of the processing services, the data exporter shall, at the choice of the data importer, delete all personal data processed on behalf of the data importer and certify to the data importer that it has done so, or return to the data importer all personal data processed on its behalf and delete existing copies.
      5. +
    5. + 
         The data exporter shall process the personal data only on documented instructions from the data importer acting as its controller.
      +
      6. +
    6. + 
         The data exporter shall immediately inform the data importer if it is unable to follow those instructions, including if such instructions infringe Regulation (EU) 2016/679 or other Union or Member State data protection law.
      +
      7. +
    7. + 
         The data importer shall refrain from any action that would prevent the data exporter from fulfilling its obligations under Regulation (EU) 2016/679, including in the context of sub-processing or as regards cooperation with competent supervisory authorities.
      +
      8. +
    8. + 
         After the end of the provision of the processing services, the data exporter shall, at the choice of the data importer, delete all personal data processed on behalf of the data importer and certify to the data importer that it has done so, or return to the data importer all personal data processed on its behalf and delete existing copies.
      +

    8.2 Security of processing

      - 
    1.    The Parties shall implement appropriate technical and organisational measures to ensure the security of the data, including during transmission, and protection against a breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access (hereinafter “personal data breach”). In assessing the appropriate level of security, they shall take due account of the state of the art, the costs of implementation, the nature of the personal data[2], the nature, scope, context and purpose(s) of processing and the risks involved in the processing for the data subjects, and in particular consider having recourse to encryption or pseudonymisation, including during transmission, where the purpose of processing can be fulfilled in that manner.
      2. - 
    2.    The data exporter shall assist the data importer in ensuring appropriate security of the data in accordance with paragraph (a). In case of a personal data breach concerning the personal data processed by the data exporter under these Clauses, the data exporter shall notify the data importer without undue delay after becoming aware of it and assist the data importer in addressing the breach.
      3. - 
    3.    The data exporter shall ensure that persons authorised to process the personal data   have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality.
      4. +
    4. + 
         The Parties shall implement appropriate technical and organisational measures to ensure the security of the data, including during transmission, and protection against a breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access (hereinafter “personal data breach”). In assessing the appropriate level of security, they shall take due account of the state of the art, the costs of implementation, the nature of the personal data[2], the nature, scope, context and purpose(s) of processing and the risks involved in the processing for the data subjects, and in particular consider having recourse to encryption or pseudonymisation, including during transmission, where the purpose of processing can be fulfilled in that manner.
      +
      5. +
    5. + 
         The data exporter shall assist the data importer in ensuring appropriate security of the data in accordance with paragraph (a). In case of a personal data breach concerning the personal data processed by the data exporter under these Clauses, the data exporter shall notify the data importer without undue delay after becoming aware of it and assist the data importer in addressing the breach.
      +
      6. +
    6. + 
         The data exporter shall ensure that persons authorised to process the personal data   have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality.
      +

    8.3 Documentation and compliance

      - 
    1.    The Parties shall be able to demonstrate compliance with these Clauses.
      2. - 
    2.    The data exporter shall make available to the data importer all information necessary to demonstrate compliance with its obligations under these Clauses and allow for and contribute to audits.
      3. +
    3. + 
         The Parties shall be able to demonstrate compliance with these Clauses.
      +
      4. +
    4. + 
         The data exporter shall make available to the data importer all information necessary to demonstrate compliance with its obligations under these Clauses and allow for and contribute to audits.
      +

    Clause 9 [not applicable] Use of sub-processors

    Clause 10 Data subject rights

    @@ -729,15 +805,27 @@ under Regulation (EU) 2016/679.

    Clause 11 Redress

      - 
    1.    The data importer shall inform data subjects in a transparent and easily accessible format, through individual notice or on its website, of a contact point authorised to handle complaints. It shall deal promptly with any complaints it receives from a data subject.
      2. +
    2. + 
         The data importer shall inform data subjects in a transparent and easily accessible format, through individual notice or on its website, of a contact point authorised to handle complaints. It shall deal promptly with any complaints it receives from a data subject.
      +

    Clause 12 Liability

      - 
    1.    Each Party shall be liable to the other Party/ies for any damages it causes the other Party/ies by any breach of these Clauses.
      2. - 
    2.    Each Party shall be liable to the data subject, and the data subject shall be entitled to receive compensation, for any material or non-material damages that the Party causes the data subject by breaching the third-party beneficiary rights under these Clauses. This is without prejudice to the liability of the data exporter under Regulation (EU) 2016/679.
      3. - 
    3.    Where more than one Party is responsible for any damage caused to the data subject as a result of a breach of these Clauses, all responsible Parties shall be jointly and severally liable and the data subject is entitled to bring an action in court against any of these Parties.
      4. - 
    4.    The Parties agree that if one Party is held liable under paragraph (c), it shall be entitled to claim back from the other Party/ies that part of the compensation corresponding to its / their responsibility for the damage.
      5. - 
    5.    The data importer may not invoke the conduct of a processor or sub-processor to avoid its own liability.
      6. +
    6. + 
         Each Party shall be liable to the other Party/ies for any damages it causes the other Party/ies by any breach of these Clauses.
      +
      7. +
    7. + 
         Each Party shall be liable to the data subject, and the data subject shall be entitled to receive compensation, for any material or non-material damages that the Party causes the data subject by breaching the third-party beneficiary rights under these Clauses. This is without prejudice to the liability of the data exporter under Regulation (EU) 2016/679.
      +
      8. +
    8. + 
         Where more than one Party is responsible for any damage caused to the data subject as a result of a breach of these Clauses, all responsible Parties shall be jointly and severally liable and the data subject is entitled to bring an action in court against any of these Parties.
      +
      9. +
    9. + 
         The Parties agree that if one Party is held liable under paragraph (c), it shall be entitled to claim back from the other Party/ies that part of the compensation corresponding to its / their responsibility for the damage.
      +
      10. +
    10. + 
         The data importer may not invoke the conduct of a processor or sub-processor to avoid its own liability.
      +

    Clause 13 [not applicable] Supervision

    SECTION III – LOCAL LAWS AND OBLIGATIONS IN CASE OF ACCESS BY PUBLIC @@ -747,23 +835,39 @@

    SECTION IV – FINAL PROVISIONS

    Clause 16 Non-compliance with the Clauses and termination

      - 
    1.    The data importer shall promptly inform the data exporter if it is unable to comply with these Clauses, for whatever reason.
      2. - 
    2.    In the event that the data importer is in breach of these Clauses or unable to comply with these Clauses, the data exporter shall suspend the transfer of personal data to the data importer until compliance is again ensured or the contract is terminated. This is without prejudice to Clause 14(f).
      3. - 
    3.    The data exporter shall be entitled to terminate the contract, insofar as it concerns the processing of personal data under these Clauses, where:
      4. - 
    4.    the data exporter has suspended the transfer of personal data to the data importer pursuant to paragraph (b) and compliance with these Clauses is not restored within a reasonable time and in any event within one month of suspension;
      5. +
    5. + 
         The data importer shall promptly inform the data exporter if it is unable to comply with these Clauses, for whatever reason.
      +
      6. +
    6. + 
         In the event that the data importer is in breach of these Clauses or unable to comply with these Clauses, the data exporter shall suspend the transfer of personal data to the data importer until compliance is again ensured or the contract is terminated. This is without prejudice to Clause 14(f).
      +
      7. +
    7. + 
         The data exporter shall be entitled to terminate the contract, insofar as it concerns the processing of personal data under these Clauses, where:
      +
      8. +
    8. + 
         the data exporter has suspended the transfer of personal data to the data importer pursuant to paragraph (b) and compliance with these Clauses is not restored within a reasonable time and in any event within one month of suspension;
      +
      - 
    1.    the data importer is in substantial or persistent breach of these Clauses; or
      2. - 
    2.    the data importer fails to comply with a binding decision of a competent court or supervisory authority regarding its obligations under these Clauses.
      +
    3. + 
         the data importer is in substantial or persistent breach of these Clauses; or
      +
      4. +
    4. + 
         the data importer fails to comply with a binding decision of a competent court or supervisory authority regarding its obligations under these Clauses.
      In these cases, it shall inform the competent supervisory authority of such non-compliance. Where the contract involves more than two Parties, the data exporter may exercise this right to termination only with respect to the relevant Party, unless the Parties have agreed - otherwise.
      5. - 
    5.    Personal data collected by the data exporter in the EU that has been transferred prior to the termination of the contract pursuant to paragraph (c) shall immediately be deleted in its entirety, including any copy thereof. The data importer shall certify the deletion of the data to the data exporter. Until the data is deleted or returned, the data importer shall continue to ensure compliance with these Clauses. In case of local laws applicable to the data importer that prohibit the return or deletion of the transferred personal data, the data importer warrants that it will continue to ensure compliance with these Clauses and will only process the data to the extent and for as long as required under that local law.
      6. + otherwise. + +
    6. + 
         Personal data collected by the data exporter in the EU that has been transferred prior to the termination of the contract pursuant to paragraph (c) shall immediately be deleted in its entirety, including any copy thereof. The data importer shall certify the deletion of the data to the data exporter. Until the data is deleted or returned, the data importer shall continue to ensure compliance with these Clauses. In case of local laws applicable to the data importer that prohibit the return or deletion of the transferred personal data, the data importer warrants that it will continue to ensure compliance with these Clauses and will only process the data to the extent and for as long as required under that local law.
      +
      - 
    1.    Either Party may revoke its agreement to be bound by these Clauses where (i) the European Commission adopts a decision pursuant to Article 45(3) of Regulation (EU) 2016/679 that covers the transfer of personal data to which these Clauses apply; or (ii) Regulation (EU) 2016/679 becomes part of the legal framework of the country to which the personal data is transferred. This is without prejudice to other obligations applying to the processing in question under Regulation (EU) 2016/679.
      2. +
    2. + 
         Either Party may revoke its agreement to be bound by these Clauses where (i) the European Commission adopts a decision pursuant to Article 45(3) of Regulation (EU) 2016/679 that covers the transfer of personal data to which these Clauses apply; or (ii) Regulation (EU) 2016/679 becomes part of the legal framework of the country to which the personal data is transferred. This is without prejudice to other obligations applying to the processing in question under Regulation (EU) 2016/679.
      +

    Clause 17 Governing law

    These Clauses shall be governed by the law of a country allowing for From 1f3d65b43c17bf6e70556d2e953020c8fc9325db Mon Sep 17 00:00:00 2001 From: dena Date: Tue, 2 Jun 2026 12:29:48 +0200 Subject: [PATCH 04/18] close li --- src/components/Pages/TermsOfUseUpcoming.vue | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/components/Pages/TermsOfUseUpcoming.vue b/src/components/Pages/TermsOfUseUpcoming.vue index 23a6a0ce..36f502f9 100644 --- a/src/components/Pages/TermsOfUseUpcoming.vue +++ b/src/components/Pages/TermsOfUseUpcoming.vue @@ -89,6 +89,7 @@ any Content on their Wikibase Instance that infringes the intellectual property rights of third persons or that is otherwise unlawful.

    5.3 It is specifically prohibited to:

    +
    • Upload or distribute Content that is insulting, abusive, offensive, racist, threatening, harmful to minors, @@ -113,9 +114,11 @@ information of third parties; or
    • Sell or otherwise transfer the User Account to another person.
    +

    5.4 The User should be aware that the sites may be edited by the public and, as such, may contain inappropriate Content at any time.

    +

    6. Moderation of Content

    6.1 Wikimedia does not monitor Content on the Platform, but reserves the right to conduct @@ -148,7 +151,7 @@

  • The User is not entitled to file a complaint if the User has already been warned for improper use of Wikimedia’s complaint system. This is the case, for example, if the User - repeatedly submits identical complaints without justification. + repeatedly submits identical complaints without justification.
  • A complaint must be made within six months of the date on which the User was notified of our decision.
    • From 75e3b2d0e4764b994929da15a21ebf5570f59780 Mon Sep 17 00:00:00 2001 From: dena Date: Tue, 2 Jun 2026 13:39:46 +0200 Subject: [PATCH 05/18] headlines and dividers --- src/components/Pages/TermsOfUseUpcoming.vue | 196 +++++++++++++------- 1 file changed, 126 insertions(+), 70 deletions(-) diff --git a/src/components/Pages/TermsOfUseUpcoming.vue b/src/components/Pages/TermsOfUseUpcoming.vue index 36f502f9..276bc76f 100644 --- a/src/components/Pages/TermsOfUseUpcoming.vue +++ b/src/components/Pages/TermsOfUseUpcoming.vue @@ -170,6 +170,7 @@ please click here. +

    7. Grant of rights of use

    7.1 The User grants Wikimedia the rights of use to the uploaded Content for the purpose of @@ -177,6 +178,7 @@

    7.2 Wikimedia reserves the right to close, move, merge, or rename a site for any reason. Wikimedia shall not be held liable for any modification, suspension or discontinuance of any site, or of the Platform as a whole.

    +

    8. Term and Termination

    8.1 The terms of this Agreement commence upon the User’s registration.

    @@ -195,7 +197,8 @@ breaches any of the terms and conditions of the Terms of Use. Upon termination of the User’s Account, the User’s right to use the Platform will immediately cease.

    -

    9. Availability and Maintenance

    + +

    9. Availability and Maintenance

    9.1 Wikimedia shall implement appropriate measures to ensure the availability and error free functionality of the Platform. However, the User acknowledges that for technical reasons and due to the dependence on external @@ -206,7 +209,8 @@ may result in a temporary impairment of the usability of the Platform. Insofar Wikimedia shall carry out the maintenance work during periods of low use.

    -

    10. Liability

    + +

    10. Liability

    10.1 Wikimedia provides a free service that allows the User to create their own Wikibase Instance. Wikimedia assumes no responsibility for any material posted by the User. However, in @@ -217,6 +221,7 @@

    10.3 The User agrees to indemnify and hold harmless Wikimedia from any claims by third parties arising from Content they publish or actions they take while using our Platform.

    +

    11. Data Protection

    1.11 For comprehensive information on how Wikimedia collects, processes or uses personal data of the User, please refer to @@ -239,6 +244,7 @@ Appendix 2 (the “International Standard Contractual Clauses”) in form of Module 4 (Processor to Controller). The Annexes I, II, III and IV of Appendix 1 apply accordingly.

    +

    12. Miscellaneous

    12.1 This Agreement is governed by, and shall be interpreted in accordance with, the laws of, @@ -258,11 +264,14 @@ enforceable provision that comes as close as possible to the economic purpose that both parties had in mind with the invalid or unenforceable provision.

    + + +

    Appendix 1: Standard contractual clauses (Commission Implementing Decision (EU) 2021/915 of 4 June 2021)

    SECTION I

    -

    Clause 1

    -

    Purpose and scope

    + +

    Clause 1 — Purpose and scope

    (a) The purpose of these Standard Contractual Clauses (the Clauses) is to ensure compliance with Article 28(3) and (4) of Regulation (EU) 2016/679 of the European Parliament and @@ -285,8 +294,9 @@ by themselves ensure compliance with obligations related to international transfers in accordance with Chapter V of Regulation (EU) 2016/679 and/or Regulation (EU) 2018/1725.

    -

    Clause 2

    -

    Invariability of the Clauses

    + +

    Clause 2 — Invariability of the Clauses +

    (a) The Parties undertake not to modify the Clauses, except for adding information to the Annexes or updating information in them.

    (b)This does not prevent the Parties from including the standard @@ -294,8 +304,8 @@ from adding other clauses or additional safeguards provided that they do not directly or indirectly contradict the Clauses or detract from the fundamental rights or freedoms of data subjects.

    -

    Clause 3

    -

    Interpretation

    + +

    Clause 3 — Interpretation

    (a) Where these Clauses use the terms defined in Regulation (EU) 2016/679 or Regulation (EU) 2018/1725 respectively, those terms shall have the same meaning as in that Regulation.

    @@ -307,21 +317,22 @@ obligations provided for in Regulation (EU) 2016/679 / Regulation (EU) 2018/1725 or in a way that prejudices the fundamental rights or freedoms of the data subjects.

    -

    Clause 4

    -

    Hierarchy

    + +

    Clause 4 — Hierarchy

    In the event of a contradiction between these Clauses and the provisions of related agreements between the Parties existing at the time when these Clauses are agreed or entered into thereafter, these Clauses shall prevail.

    -

    SECTION II

    -

    OBLIGATIONS OF THE PARTIES

    -

    Clause 5

    -

    Description of processing(s)

    + + +

    SECTION II — OBLIGATIONS OF THE PARTIES

    + +

    Clause 5 — Description of processing(s)

    The details of the processing operations, in particular the categories of personal data and the purposes of processing for which the personal data is processed on behalf of the controller, are specified in Annex II.

    -

    Clause 6

    -

    Obligations of the Parties

    + +

    Clause 6 — Obligations of the Parties

    6.1. Instructions

    (a) The processor shall process personal data only on documented instructions from the @@ -433,8 +444,7 @@ fulfil a specific requirement under Union or Member State law to which the processor is subject and shall take place in compliance with Chapter V of Regulation (EU) 2016/679 or Regulation (EU) 2018/1725.

    -

    (b) The - controller agrees that where the processor engages a sub-processor in +

    (b) The controller agrees that where the processor engages a sub-processor in accordance with Clause 7.7. for carrying out specific processing activities (on behalf of the controller) and those processing activities involve a transfer of personal data within the meaning of Chapter V of @@ -443,6 +453,7 @@ contractual clauses adopted by the Commission in accordance with of Article 46(2) of Regulation (EU) 2016/679, provided the conditions for the use of those standard contractual clauses are met.

    +

    Clause 7

    Assistance to the controller

    (a) The processor shall promptly notify the @@ -454,8 +465,7 @@ exercise their rights, taking into account the nature of the processing. In fulfilling its obligations in accordance with (a) and (b), the processor shall comply with the controller’s instructions

    -

    (c) In - addition to the processor’s obligation to assist the controller pursuant +

    (c) In addition to the processor’s obligation to assist the controller pursuant to Clause 8(b), the processor shall furthermore assist the controller in ensuring compliance with the following obligations, taking into account the nature of the data processing and the information available to the @@ -480,8 +490,7 @@

    (d) The Parties shall set out in Annex III the appropriate technical and organisational measures by which the processor is required to assist the controller in the application of this Clause as well as the scope and the extent of the assistance required.

    -

    Clause 8

    -

    Notification of personal data breach

    +

    Clause 8 — Notification of personal data breach

    In the event of a personal data breach, the processor shall cooperate with and assist the controller for the controller to comply with its obligations under Articles 33 and 34 @@ -519,7 +528,8 @@ with the obligation to communicate without undue delay the personal data breach to the data subject, when the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons.

    -
    8.2 Data breach concerning data processed by the processor
    + +
    8.2 Data breach concerning data processed by the processor

    In the event of a personal data breach concerning data processed by the processor, the processor shall notify the controller without undue delay after the @@ -530,7 +540,7 @@ data records concerned);

    (b)the details of a contact point where more information concerning the personal data breach can be obtained;

    -

    (c)its likely consequences and the measures taken or proposed to be +

    (c) its likely consequences and the measures taken or proposed to be taken to address the breach, including to mitigate its possible adverse effects.

    Where, and insofar as, it is not possible to provide all this @@ -542,10 +552,14 @@ processor when assisting the controller in the compliance with the controller’s obligations under Articles 33 and 34 of Regulation (EU) 2016/679.

    -

    SECTION III

    -

    FINAL PROVISIONS

    -

    Clause 9

    -

    Non-compliance with the Clauses and termination

    + +

    + SECTION III — FINAL PROVISIONS +

    + +

    + Clause 9 — Non-compliance with the Clauses and termination +

    (a) Without prejudice to any provisions of Regulation (EU) 2016/679 and/or Regulation (EU) 2018/1725, in the event that the processor is in breach of its obligations under these Clauses, the @@ -580,28 +594,38 @@ return all the personal data to the controller and delete existing copies unless Union or Member State law requires storage of the personal data. Until the data is deleted or returned, the processor shall continue to ensure compliance with these Clauses.

    +

    ANNEX I

    List of parties
    -

    Controller(s): [Identity and contact details +

    + Controller(s): [Identity and contact details of the controller(s), and, where applicable, of the controller’s data - protection officer] -

    + protection officer]

    The User as specified in the Terms of Use.

    +

    Processor(s): [Identity and contact details of the processor(s) and, where applicable, of the processor’s data protection officer]

    Wikimedia Deutschland e. V., Tempelhofer Ufer 23-24, 10369 Berlin

    +

    ANNEX II

    Description of the processing
    +

    Categories of data subjects whose personal data is processed -

  • Any categories of data subjects - contained in the data uploaded by the User
    • . +
    • Any categories of data subjects + contained in the data uploaded by the User.
    +

    + +

    Categories of personal data processed -

  • Any categories of personal data contained in the data - uploaded by the User.
    • +
    • Any categories of personal data contained in the data + uploaded by the User.
    +

    + +

    Sensitive data processed (if applicable) and applied restrictions or safeguards that fully take into consideration the nature of the data and the risks involved, such as for instance @@ -609,53 +633,85 @@ for staff having followed specialised training), keeping a record of access to the data, restrictions for onward transfers or additional security measures. -

  • The categories of personal data may include +
    • The categories of personal data may include sensitive data depending on the Content uploaded by the User. Since Wikimedia has no knowledge of the specific categories processed it lies in the User’s responsibility to ensure that the safeguards are - sufficient to process the specific categories of personal data.
      • - Nature of the processing -
    • Any processing necessary to fulfil the contractual - purposes. Especially collection, storage, disclosure and dissemination - and making publicly available as well as anonymization and/or deletion.
      • - Purpose(s) for which the personal data is processed on behalf of the - controller -
    • Publishing the Wikibase as well as the data uploaded to and - contained in it and making it available to the public. Wikimedia does - not act as a processor for the User with regard to the processing of - personal data of persons browsing the Wikibase and any personal data - that is processed to establish the connection.
      • - Duration of the processing -
    • The rules of the Agreement regarding the - Term and Termination apply.
      • - For processing by (sub-) processors, also specify subject matter, nature - and duration of the processing + sufficient to process the specific categories of personal data.
    +

    + +

    + Nature of the processing +

    • Any processing necessary to fulfil the contractual + purposes. Especially collection, storage, disclosure and dissemination + and making publicly available as well as anonymization and/or deletion.
    +

    + +

    + Purpose(s) for which the personal data is processed on behalf of the + controller +

    • Publishing the Wikibase as well as the data uploaded to and + contained in it and making it available to the public. Wikimedia does + not act as a processor for the User with regard to the processing of + personal data of persons browsing the Wikibase and any personal data + that is processed to establish the connection.
    +

    + +

    + Duration of the processing +

    • The rules of the Agreement regarding the + Term and Termination apply.
    +

    + +

    + For processing by (sub-) processors, also specify subject matter, nature + and duration of the processing +

    +

    ANNEX III

    - Technical and organisational measures including technical - and organisational measures to ensure the security of the data

    - You may - obtain a copy of our technical and organisational measures on request, - to do so please send an email to: datenschutz@wikimedia.de. +

    Technical and organisational measures including technical + and organisational measures to ensure the security of the data

    + +

    + You may obtain a copy of our technical and organisational measures on request, + to do so please send an email to: datenschutz@wikimedia.de. +

    +

    ANNEX IV

    - List of sub-processors - EXPLANATORY NOTE: +

    List of sub-processors

    +

    EXPLANATORY NOTE:

    +

    This Annex needs to be completed in case of specific authorisation of sub-processors (Clause - 7.7(a), Option 1). The controller has authorised the use of the + 7.7(a), Option 1).

    The controller has authorised the use of the following sub-processors:

    +
      -
    • 1. Name: Google Ireland Ltd.
      • Address: Gordon - House, Barrow Street, Dublin 4 Contact person’s name, position and - contact details: Please contact Wikimedia for the contact information - Description of the processing (including a clear delimitation of +
    • +

      1. Name: Google Ireland Ltd.

      +

      Address: Gordon House, Barrow Street, Dublin 4

      + +

      Contact person’s name, position and contact details: Please contact Wikimedia for the contact information

      + +

      Description of the processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Hosting of the Wikibase.cloud service

      -
    • 2. Name: Mailgun Technologies, Inc
      • - Address: 112 E Pecan St #1135, San Antonio, TX 78205 Contact person’s - name, position and contact details: Please contact Wikimedia for the - contact information Description of the processing : Email service - provisioning + + +
    • +

      2. Name: Mailgun Technologies, Inc

      + +

      Address: 112 E Pecan St #1135, San Antonio, TX 78205

      +

      Contact person’s name, position and contact details: Please contact Wikimedia for the + contact information

      + +

      Description of the processing: Email service + provisioning

      +
    + + +

    Appendix 2: International Standard Contractual Clauses : MODULE FOUR: Transfer processor to controller

    SECTION I

    From a6eb223620b34c3f8002c9337a43e544213e8807 Mon Sep 17 00:00:00 2001 From: dena Date: Tue, 2 Jun 2026 13:40:25 +0200 Subject: [PATCH 06/18] format html --- src/components/Pages/TermsOfUseUpcoming.vue | 111 +++++++++++--------- 1 file changed, 63 insertions(+), 48 deletions(-) diff --git a/src/components/Pages/TermsOfUseUpcoming.vue b/src/components/Pages/TermsOfUseUpcoming.vue index 276bc76f..fb161f90 100644 --- a/src/components/Pages/TermsOfUseUpcoming.vue +++ b/src/components/Pages/TermsOfUseUpcoming.vue @@ -198,7 +198,7 @@ termination of the User’s Account, the User’s right to use the Platform will immediately cease.

    -

    9. Availability and Maintenance

    +

    9. Availability and Maintenance

    9.1 Wikimedia shall implement appropriate measures to ensure the availability and error free functionality of the Platform. However, the User acknowledges that for technical reasons and due to the dependence on external @@ -210,7 +210,7 @@ Insofar Wikimedia shall carry out the maintenance work during periods of low use.

    -

    10. Liability

    +

    10. Liability

    10.1 Wikimedia provides a free service that allows the User to create their own Wikibase Instance. Wikimedia assumes no responsibility for any material posted by the User. However, in @@ -529,7 +529,7 @@ breach to the data subject, when the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons.

    -
    8.2 Data breach concerning data processed by the processor
    +
    8.2 Data breach concerning data processed by the processor

    In the event of a personal data breach concerning data processed by the processor, the processor shall notify the controller without undue delay after the @@ -554,7 +554,7 @@ 2016/679.

    - SECTION III — FINAL PROVISIONS + SECTION III — FINAL PROVISIONS

    @@ -598,9 +598,10 @@

    ANNEX I

    List of parties

    - Controller(s): [Identity and contact details - of the controller(s), and, where applicable, of the controller’s data - protection officer]

    + Controller(s): [Identity and contact details + of the controller(s), and, where applicable, of the controller’s data + protection officer] +

    The User as specified in the Terms of Use.

    Processor(s): @@ -612,55 +613,67 @@

    ANNEX II

    Description of the processing

    - Categories of data subjects - whose personal data is processed -

    • Any categories of data subjects - contained in the data uploaded by the User.
    + Categories of data subjects + whose personal data is processed +
      +
    • Any categories of data subjects + contained in the data uploaded by the User.
      • +

    - Categories of personal data - processed -

    • Any categories of personal data contained in the data - uploaded by the User.
    + Categories of personal data + processed +
      +
    • Any categories of personal data contained in the data + uploaded by the User.
      • +

    - Sensitive data processed (if applicable) and - applied restrictions or safeguards that fully take into consideration - the nature of the data and the risks involved, such as for instance - strict purpose limitation, access restrictions (including access only - for staff having followed specialised training), keeping a record of - access to the data, restrictions for onward transfers or additional - security measures. -

    • The categories of personal data may include - sensitive data depending on the Content uploaded by the User. Since - Wikimedia has no knowledge of the specific categories processed it lies - in the User’s responsibility to ensure that the safeguards are - sufficient to process the specific categories of personal data.
    -

    + Sensitive data processed (if applicable) and + applied restrictions or safeguards that fully take into consideration + the nature of the data and the risks involved, such as for instance + strict purpose limitation, access restrictions (including access only + for staff having followed specialised training), keeping a record of + access to the data, restrictions for onward transfers or additional + security measures. +
      +
    • The categories of personal data may include + sensitive data depending on the Content uploaded by the User. Since + Wikimedia has no knowledge of the specific categories processed it lies + in the User’s responsibility to ensure that the safeguards are + sufficient to process the specific categories of personal data.
      • +
    +

    Nature of the processing -

    • Any processing necessary to fulfil the contractual +
        +
      • Any processing necessary to fulfil the contractual purposes. Especially collection, storage, disclosure and dissemination - and making publicly available as well as anonymization and/or deletion.
      + and making publicly available as well as anonymization and/or deletion.
      • +

    Purpose(s) for which the personal data is processed on behalf of the controller -

    • Publishing the Wikibase as well as the data uploaded to and +
        +
      • Publishing the Wikibase as well as the data uploaded to and contained in it and making it available to the public. Wikimedia does not act as a processor for the User with regard to the processing of personal data of persons browsing the Wikibase and any personal data - that is processed to establish the connection.
      + that is processed to establish the connection.
      • +

    Duration of the processing -

    • The rules of the Agreement regarding the - Term and Termination apply.
    +
      +
    • The rules of the Agreement regarding the + Term and Termination apply.
      • +

    @@ -669,13 +682,13 @@

    ANNEX III

    -

    Technical and organisational measures including technical - and organisational measures to ensure the security of the data

    +

    Technical and organisational measures including technical + and organisational measures to ensure the security of the data

    -

    - You may obtain a copy of our technical and organisational measures on request, - to do so please send an email to: datenschutz@wikimedia.de. -

    +

    + You may obtain a copy of our technical and organisational measures on request, + to do so please send an email to: datenschutz@wikimedia.de. +

    ANNEX IV

    List of sub-processors

    @@ -683,7 +696,8 @@

    This Annex needs to be completed in case of specific authorisation of sub-processors (Clause - 7.7(a), Option 1).

    The controller has authorised the use of the + 7.7(a), Option 1).

    +

    The controller has authorised the use of the following sub-processors:

      @@ -691,22 +705,23 @@

      1. Name: Google Ireland Ltd.

      Address: Gordon House, Barrow Street, Dublin 4

      -

      Contact person’s name, position and contact details: Please contact Wikimedia for the contact information

      +

      Contact person’s name, position and contact details: Please contact Wikimedia for the contact + information

      -

      Description of the processing (including a clear delimitation of - responsibilities in case several sub-processors are authorised): Hosting - of the Wikibase.cloud service

      - +

      Description of the processing (including a clear delimitation of + responsibilities in case several sub-processors are authorised): Hosting + of the Wikibase.cloud service

      +

    • 2. Name: Mailgun Technologies, Inc

      Address: 112 E Pecan St #1135, San Antonio, TX 78205

      Contact person’s name, position and contact details: Please contact Wikimedia for the - contact information

      + contact information

      Description of the processing: Email service - provisioning

      + provisioning

    From cbb56dc81396f41268d50604fb28366ec23f0e0a Mon Sep 17 00:00:00 2001 From: dena Date: Tue, 2 Jun 2026 14:08:25 +0200 Subject: [PATCH 07/18] headlines, lists, footnote --- src/components/Pages/TermsOfUseUpcoming.vue | 219 +++++++++++--------- 1 file changed, 120 insertions(+), 99 deletions(-) diff --git a/src/components/Pages/TermsOfUseUpcoming.vue b/src/components/Pages/TermsOfUseUpcoming.vue index fb161f90..2bf6e407 100644 --- a/src/components/Pages/TermsOfUseUpcoming.vue +++ b/src/components/Pages/TermsOfUseUpcoming.vue @@ -730,12 +730,11 @@

    Appendix 2: International Standard Contractual Clauses : MODULE FOUR: Transfer processor to controller

    SECTION I

    -

    Clause 1

    -

    Purpose and scope

    +

    Clause 1 — Purpose and scope

    (a) The purpose of these standard contractual clauses is to ensure compliance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data - (General Data Protection Regulation)[1] for the transfer of personal data to a third country.

    + (General Data Protection Regulation)[1] for the transfer of personal data to a third country.

    (b) The Parties:

    (i) the natural or legal person(s), public authority/ies, agency/ies or other body/ies (hereinafter @@ -750,208 +749,233 @@

    (d) The Appendix to these Clauses containing the Annexes referred to therein forms an integral part of these Clauses.

    -

    Clause 2 Effect and invariability of the Clauses

    -
      + +

      Clause 2 — Effect and invariability of the Clauses

      +
      • - 
           These Clauses set out appropriate safeguards, including enforceable data subject rights and effective legal remedies, pursuant to Article 46(1) and Article 46 (2)(c) of Regulation (EU) 2016/679 and, with respect to data transfers from controllers to processors and/or processors to processors, standard contractual clauses pursuant to Article 28(7) of Regulation (EU) 2016/679, provided they are not modified, except to select the appropriate Module(s) or to add or update information in the Appendix. This does not prevent the Parties from including the standard contractual clauses laid down in these Clauses in a wider contract and/or to add other clauses or additional safeguards, provided that they do not contradict, directly or indirectly, these Clauses or prejudice the fundamental rights or freedoms of data subjects.
        + (a) These Clauses set out appropriate safeguards, including enforceable data subject rights and effective legal remedies, pursuant to Article 46(1) and Article 46 (2)(c) of Regulation (EU) 2016/679 and, with respect to data transfers from controllers to processors and/or processors to processors, standard contractual clauses pursuant to Article 28(7) of Regulation (EU) 2016/679, provided they are not modified, except to select the appropriate Module(s) or to add or update information in the Appendix. This does not prevent the Parties from including the standard contractual clauses laid down in these Clauses in a wider contract and/or to add other clauses or additional safeguards, provided that they do not contradict, directly or indirectly, these Clauses or prejudice the fundamental rights or freedoms of data subjects.
      • - 
           These Clauses are without prejudice to obligations to which the data exporter is subject by virtue of Regulation (EU) 2016/679.
        + (b) These Clauses are without prejudice to obligations to which the data exporter is subject by virtue of Regulation (EU) 2016/679.
        • -
    -

    Clause 3 Third-party beneficiaries

    -
      + + +

      Clause 3 — Third-party beneficiaries

      +
      • - 
           Data subjects may invoke and enforce these Clauses, as third-party beneficiaries, against the data exporter and/or data importer, with the following exceptions:
        + (a) Data subjects may invoke and enforce these Clauses, as third-party beneficiaries, against the data exporter and/or data importer, with the following exceptions:
        • +
        • - 
             Clause 1, Clause 2, Clause 3, Clause 6, Clause 7;
          + (i) Clause 1, Clause 2, Clause 3, Clause 6, Clause 7;
          • -
    -
    1. - 
         Clause 8 - Module One: Clause 8.5 (e) and Clause 8.9(b); Module Two: Clause 8.1(b), 8.9(a), (c), (d) and (e); Module Three: Clause 8.1(a), (c) and (d) and Clause 8.9(a), (c), (d), (e), (f) and (g); Module Four: Clause 8.1 (b) and Clause 8.3(b);
      + (ii) Clause 8 - Module One: Clause 8.5 (e) and Clause 8.9(b); Module Two: Clause 8.1(b), 8.9(a), (c), (d) and (e); Module Three: Clause 8.1(a), (c) and (d) and Clause 8.9(a), (c), (d), (e), (f) and (g); Module Four: Clause 8.1 (b) and Clause 8.3(b);
    2. - 
         Clause 9 - Module Two: Clause 9(a), (c), (d) and (e); Module Three: Clause 9(a), (c), (d) and (e);
      + (iii) Clause 9 - Module Two: Clause 9(a), (c), (d) and (e); Module Three: Clause 9(a), (c), (d) and (e);
    3. - 
         Clause 12 - Module One: Clause 12(a) and (d); Modules Two and Three: Clause 12(a), (d) and (f);
      + (iv) Clause 12 - Module One: Clause 12(a) and (d); Modules Two and Three: Clause 12(a), (d) and (f);
    4. - 
         Clause 13;
      + (v) Clause 13;
    5. - 
         Clause 15.1(c), (d) and (e);
      + (vi) Clause 15.1(c), (d) and (e);
    6. - 
         Clause 16(e);
      + (vii) Clause 16(e);
    7. - 
         Clause 18 - Modules One, Two and Three: Clause 18(a) and (b); Module Four: Clause 18.
      + (viii) Clause 18 - Modules One, Two and Three: Clause 18(a) and (b); Module Four: Clause 18.
      8. -
    -
      +
    1. - 
         Paragraph (a) is without prejudice to rights of data subjects under Regulation (EU) 2016/679.
      + (b) Paragraph (a) is without prejudice to rights of data subjects under Regulation (EU) 2016/679.
      2. -
    -

    Clause 4 Interpretation

    -
      + + +

      Clause 4 — Interpretation

      +
      • - 
           Where these Clauses use terms that are defined in Regulation (EU) 2016/679, those terms shall have the same meaning as in that Regulation.
        + (a) Where these Clauses use terms that are defined in Regulation (EU) 2016/679, those terms shall have the same meaning as in that Regulation.
      • - 
           These Clauses shall be read and interpreted in the light of the provisions of Regulation (EU) 2016/679.
        + (b) These Clauses shall be read and interpreted in the light of the provisions of Regulation (EU) 2016/679.
      • - 
           These Clauses shall not be interpreted in a way that conflicts with rights and obligations provided for in Regulation (EU) 2016/679.
        + (c) These Clauses shall not be interpreted in a way that conflicts with rights and obligations provided for in Regulation (EU) 2016/679.
        • -
    -

    Clause 5 Hierarchy

    + + +

    Clause 5 — Hierarchy

    In the event of a contradiction between these Clauses and the provisions of related agreements between the Parties, existing at the time these Clauses are agreed or entered into thereafter, these Clauses shall prevail.

    -

    Clause 6 Description of the transfer(s)

    + +

    Clause 6 — Description of the transfer(s)

    The details of the transfer(s), and in particular the categories of personal data that are transferred and the purpose(s) for which they are transferred, are specified in Annex I.B.

    -

    Clause 7 - Optional Docking clause

    -
      + +

      Clause 7 — Optional Docking clause

      +
      • - 
           An entity that is not a Party to these Clauses may, with the agreement of the Parties, accede to these Clauses at any time, either as a data exporter or as a data importer, by completing the Appendix and signing Annex I.A.
        + (a) An entity that is not a Party to these Clauses may, with the agreement of the Parties, accede to these Clauses at any time, either as a data exporter or as a data importer, by completing the Appendix and signing Annex I.A.
      • - 
           Once it has completed the Appendix and signed Annex I.A, the acceding entity shall become a Party to these Clauses and have the rights and obligations of a data exporter or data importer in accordance with its designation in Annex I.A.
        + (b) Once it has completed the Appendix and signed Annex I.A, the acceding entity shall become a Party to these Clauses and have the rights and obligations of a data exporter or data importer in accordance with its designation in Annex I.A.
      • - 
           The acceding entity shall have no rights or obligations arising under these Clauses from the period prior to becoming a Party.
        + (c) The acceding entity shall have no rights or obligations arising under these Clauses from the period prior to becoming a Party.
        • -
    -

    SECTION II – OBLIGATIONS OF THE PARTIES Clause 8 Data protection - safeguards

    + + + +

    SECTION II — OBLIGATIONS OF THE PARTIES

    + +

    + Clause 8 — Data protection + safeguards +

    +

    The data exporter warrants that it has used reasonable efforts to determine that the data importer is able, through the implementation of appropriate technical and organisational measures, to satisfy its obligations under these Clauses.

    +

    8.1 Instructions

    -
      +
      • - 
           The data exporter shall process the personal data only on documented instructions from the data importer acting as its controller.
        + (a) The data exporter shall process the personal data only on documented instructions from the data importer acting as its controller.
      • - 
           The data exporter shall immediately inform the data importer if it is unable to follow those instructions, including if such instructions infringe Regulation (EU) 2016/679 or other Union or Member State data protection law.
        + (b) The data exporter shall immediately inform the data importer if it is unable to follow those instructions, including if such instructions infringe Regulation (EU) 2016/679 or other Union or Member State data protection law.
      • - 
           The data importer shall refrain from any action that would prevent the data exporter from fulfilling its obligations under Regulation (EU) 2016/679, including in the context of sub-processing or as regards cooperation with competent supervisory authorities.
        + (c) The data importer shall refrain from any action that would prevent the data exporter from fulfilling its obligations under Regulation (EU) 2016/679, including in the context of sub-processing or as regards cooperation with competent supervisory authorities.
      • - 
           After the end of the provision of the processing services, the data exporter shall, at the choice of the data importer, delete all personal data processed on behalf of the data importer and certify to the data importer that it has done so, or return to the data importer all personal data processed on its behalf and delete existing copies.
        + (d) After the end of the provision of the processing services, the data exporter shall, at the choice of the data importer, delete all personal data processed on behalf of the data importer and certify to the data importer that it has done so, or return to the data importer all personal data processed on its behalf and delete existing copies.
        • -
    + +

    8.2 Security of processing

    -
      +
      • - 
           The Parties shall implement appropriate technical and organisational measures to ensure the security of the data, including during transmission, and protection against a breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access (hereinafter “personal data breach”). In assessing the appropriate level of security, they shall take due account of the state of the art, the costs of implementation, the nature of the personal data[2], the nature, scope, context and purpose(s) of processing and the risks involved in the processing for the data subjects, and in particular consider having recourse to encryption or pseudonymisation, including during transmission, where the purpose of processing can be fulfilled in that manner.
        + (a) The Parties shall implement appropriate technical and organisational measures to ensure the security of the data, including during transmission, and protection against a breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access (hereinafter “personal data breach”). In assessing the appropriate level of security, they shall take due account of the state of the art, the costs of implementation, the nature of the personal data[2], the nature, scope, context and purpose(s) of processing and the risks involved in the processing for the data subjects, and in particular consider having recourse to encryption or pseudonymisation, including during transmission, where the purpose of processing can be fulfilled in that manner.
      • - 
           The data exporter shall assist the data importer in ensuring appropriate security of the data in accordance with paragraph (a). In case of a personal data breach concerning the personal data processed by the data exporter under these Clauses, the data exporter shall notify the data importer without undue delay after becoming aware of it and assist the data importer in addressing the breach.
        + (b) The data exporter shall assist the data importer in ensuring appropriate security of the data in accordance with paragraph (a). In case of a personal data breach concerning the personal data processed by the data exporter under these Clauses, the data exporter shall notify the data importer without undue delay after becoming aware of it and assist the data importer in addressing the breach.
      • - 
           The data exporter shall ensure that persons authorised to process the personal data   have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality.
        + (c) The data exporter shall ensure that persons authorised to process the personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality.
        • -
    + +

    8.3 Documentation and compliance

    -
      +
      • - 
           The Parties shall be able to demonstrate compliance with these Clauses.
        + (a) The Parties shall be able to demonstrate compliance with these Clauses.
      • - 
           The data exporter shall make available to the data importer all information necessary to demonstrate compliance with its obligations under these Clauses and allow for and contribute to audits.
        + (b) The data exporter shall make available to the data importer all information necessary to demonstrate compliance with its obligations under these Clauses and allow for and contribute to audits.
        • -
    -

    Clause 9 [not applicable] Use of sub-processors

    -

    Clause 10 Data subject rights

    + + +

    Clause 9 [not applicable] Use of sub-processors

    + +

    Clause 10 Data subject rights

    The Parties shall assist each other in responding to enquiries and requests made by data subjects under the local law applicable to the data importer or, for data processing by the data exporter in the EU, under Regulation (EU) 2016/679.

    -

    Clause 11 Redress

    -
      + +

      Clause 11 Redress

      +
      • - 
           The data importer shall inform data subjects in a transparent and easily accessible format, through individual notice or on its website, of a contact point authorised to handle complaints. It shall deal promptly with any complaints it receives from a data subject.
        + (a) The data importer shall inform data subjects in a transparent and easily accessible format, through individual notice or on its website, of a contact point authorised to handle complaints. It shall deal promptly with any complaints it receives from a data subject.
        • -
    -

    Clause 12 Liability

    -
      + + +

      Clause 12 Liability

      +
      • - 
           Each Party shall be liable to the other Party/ies for any damages it causes the other Party/ies by any breach of these Clauses.
        + (a) Each Party shall be liable to the other Party/ies for any damages it causes the other Party/ies by any breach of these Clauses.
      • - 
           Each Party shall be liable to the data subject, and the data subject shall be entitled to receive compensation, for any material or non-material damages that the Party causes the data subject by breaching the third-party beneficiary rights under these Clauses. This is without prejudice to the liability of the data exporter under Regulation (EU) 2016/679.
        + (b) Each Party shall be liable to the data subject, and the data subject shall be entitled to receive compensation, for any material or non-material damages that the Party causes the data subject by breaching the third-party beneficiary rights under these Clauses. This is without prejudice to the liability of the data exporter under Regulation (EU) 2016/679.
      • - 
           Where more than one Party is responsible for any damage caused to the data subject as a result of a breach of these Clauses, all responsible Parties shall be jointly and severally liable and the data subject is entitled to bring an action in court against any of these Parties.
        + (c) Where more than one Party is responsible for any damage caused to the data subject as a result of a breach of these Clauses, all responsible Parties shall be jointly and severally liable and the data subject is entitled to bring an action in court against any of these Parties.
      • - 
           The Parties agree that if one Party is held liable under paragraph (c), it shall be entitled to claim back from the other Party/ies that part of the compensation corresponding to its / their responsibility for the damage.
        + (d) The Parties agree that if one Party is held liable under paragraph (c), it shall be entitled to claim back from the other Party/ies that part of the compensation corresponding to its / their responsibility for the damage.
      • - 
           The data importer may not invoke the conduct of a processor or sub-processor to avoid its own liability.
        + (e) The data importer may not invoke the conduct of a processor or sub-processor to avoid its own liability.
        • -
    -

    Clause 13 [not applicable] Supervision

    -

    SECTION III – LOCAL LAWS AND OBLIGATIONS IN CASE OF ACCESS BY PUBLIC - AUTHORITIES

    -

    Clause 14 [not applicable]

    -

    Clause 15 [not applicable]

    -

    SECTION IV – FINAL PROVISIONS

    -

    Clause 16 Non-compliance with the Clauses and termination

    -
      + + +

      Clause 13 [not applicable] Supervision

      + +

      SECTION III — LOCAL LAWS AND OBLIGATIONS IN CASE OF ACCESS BY PUBLIC + AUTHORITIES

      +

      Clause 14 [not applicable]

      +

      Clause 15 [not applicable]

      + +

      SECTION IV – FINAL PROVISIONS

      +

      Clause 16 — Non-compliance with the Clauses and termination

      +
      • - 
           The data importer shall promptly inform the data exporter if it is unable to comply with these Clauses, for whatever reason.
        + (a) The data importer shall promptly inform the data exporter if it is unable to comply with these Clauses, for whatever reason.
      • - 
           In the event that the data importer is in breach of these Clauses or unable to comply with these Clauses, the data exporter shall suspend the transfer of personal data to the data importer until compliance is again ensured or the contract is terminated. This is without prejudice to Clause 14(f).
        + (b) In the event that the data importer is in breach of these Clauses or unable to comply with these Clauses, the data exporter shall suspend the transfer of personal data to the data importer until compliance is again ensured or the contract is terminated. This is without prejudice to Clause 14(f).
      • - 
           The data exporter shall be entitled to terminate the contract, insofar as it concerns the processing of personal data under these Clauses, where:
        + (c) The data exporter shall be entitled to terminate the contract, insofar as it concerns the processing of personal data under these Clauses, where:
        • + + +
        • - 
             the data exporter has suspended the transfer of personal data to the data importer pursuant to paragraph (b) and compliance with these Clauses is not restored within a reasonable time and in any event within one month of suspension;
          + (i) the data exporter has suspended the transfer of personal data to the data importer pursuant to paragraph (b) and compliance with these Clauses is not restored within a reasonable time and in any event within one month of suspension;
          • -
    -
    1. - 
         the data importer is in substantial or persistent breach of these Clauses; or
      + (ii) the data importer is in substantial or persistent breach of these Clauses; or
    2. - 
         the data importer fails to comply with a binding decision of a competent court or supervisory authority regarding its obligations under these Clauses.
      + (iii) the data importer fails to comply with a binding decision of a competent court or supervisory authority regarding its obligations under these Clauses. In these cases, it shall inform the competent supervisory authority of such non-compliance. Where the contract involves more than two Parties, the data exporter may exercise this right to termination only with respect to the relevant Party, unless the Parties have agreed otherwise.
      3. +
    3. - 
         Personal data collected by the data exporter in the EU that has been transferred prior to the termination of the contract pursuant to paragraph (c) shall immediately be deleted in its entirety, including any copy thereof. The data importer shall certify the deletion of the data to the data exporter. Until the data is deleted or returned, the data importer shall continue to ensure compliance with these Clauses. In case of local laws applicable to the data importer that prohibit the return or deletion of the transferred personal data, the data importer warrants that it will continue to ensure compliance with these Clauses and will only process the data to the extent and for as long as required under that local law.
      + (d) Personal data collected by the data exporter in the EU that has been transferred prior to the termination of the contract pursuant to paragraph (c) shall immediately be deleted in its entirety, including any copy thereof. The data importer shall certify the deletion of the data to the data exporter. Until the data is deleted or returned, the data importer shall continue to ensure compliance with these Clauses. In case of local laws applicable to the data importer that prohibit the return or deletion of the transferred personal data, the data importer warrants that it will continue to ensure compliance with these Clauses and will only process the data to the extent and for as long as required under that local law.
      4. -
    -
    1. - 
         Either Party may revoke its agreement to be bound by these Clauses where (i) the European Commission adopts a decision pursuant to Article 45(3) of Regulation (EU) 2016/679 that covers the transfer of personal data to which these Clauses apply; or (ii) Regulation (EU) 2016/679 becomes part of the legal framework of the country to which the personal data is transferred. This is without prejudice to other obligations applying to the processing in question under Regulation (EU) 2016/679.
      + (e) Either Party may revoke its agreement to be bound by these Clauses where (i) the European Commission adopts a decision pursuant to Article 45(3) of Regulation (EU) 2016/679 that covers the transfer of personal data to which these Clauses apply; or (ii) Regulation (EU) 2016/679 becomes part of the legal framework of the country to which the personal data is transferred. This is without prejudice to other obligations applying to the processing in question under Regulation (EU) 2016/679.
      2. -
    -

    Clause 17 Governing law

    + + +

    Clause 17 — Governing law

    These Clauses shall be governed by the law of a country allowing for third-party beneficiary rights. The Parties agree that this shall be the law of Germany (specify country).

    -

    Clause 18 Choice of forum and jurisdiction

    + +

    Clause 18 — Choice of forum and jurisdiction

    Any dispute arising from these Clauses shall be resolved by the courts of Germany (specify country).

    -
    -

    [1] Where the data exporter is a processor subject to Regulation (EU) + + + +

    [1] Where the data exporter is a processor subject to Regulation (EU) 2016/679 acting on behalf of a Union institution or body as controller, reliance on these Clauses when engaging another processor (sub-processing) not subject to Regulation (EU) 2016/679 also ensures @@ -988,13 +1012,10 @@ From 03fe4d829c9b4285ff078d02263e0ef017dfb00e Mon Sep 17 00:00:00 2001 From: dena Date: Tue, 2 Jun 2026 14:09:05 +0200 Subject: [PATCH 08/18] cleanup --- src/components/Pages/TermsOfUseUpcoming.vue | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/components/Pages/TermsOfUseUpcoming.vue b/src/components/Pages/TermsOfUseUpcoming.vue index 2bf6e407..d5449c60 100644 --- a/src/components/Pages/TermsOfUseUpcoming.vue +++ b/src/components/Pages/TermsOfUseUpcoming.vue @@ -858,7 +858,7 @@ (c) The data importer shall refrain from any action that would prevent the data exporter from fulfilling its obligations under Regulation (EU) 2016/679, including in the context of sub-processing or as regards cooperation with competent supervisory authorities.

  • - (d) After the end of the provision of the processing services, the data exporter shall, at the choice of the data importer, delete all personal data processed on behalf of the data importer and certify to the data importer that it has done so, or return to the data importer all personal data processed on its behalf and delete existing copies. + (d) After the end of the provision of the processing services, the data exporter shall, at the choice of the data importer, delete all personal data processed on behalf of the data importer and certify to the data importer that it has done so, or return to the data importer all personal data processed on its behalf and delete existing copies.
    • @@ -868,7 +868,7 @@ (a) The Parties shall implement appropriate technical and organisational measures to ensure the security of the data, including during transmission, and protection against a breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access (hereinafter “personal data breach”). In assessing the appropriate level of security, they shall take due account of the state of the art, the costs of implementation, the nature of the personal data[2], the nature, scope, context and purpose(s) of processing and the risks involved in the processing for the data subjects, and in particular consider having recourse to encryption or pseudonymisation, including during transmission, where the purpose of processing can be fulfilled in that manner.
  • - (b) The data exporter shall assist the data importer in ensuring appropriate security of the data in accordance with paragraph (a). In case of a personal data breach concerning the personal data processed by the data exporter under these Clauses, the data exporter shall notify the data importer without undue delay after becoming aware of it and assist the data importer in addressing the breach. + (b) The data exporter shall assist the data importer in ensuring appropriate security of the data in accordance with paragraph (a). In case of a personal data breach concerning the personal data processed by the data exporter under these Clauses, the data exporter shall notify the data importer without undue delay after becoming aware of it and assist the data importer in addressing the breach.
  • (c) The data exporter shall ensure that persons authorised to process the personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality. From dbc52f5b727bafaedfc630d416189e019711ad73 Mon Sep 17 00:00:00 2001 From: dena Date: Tue, 2 Jun 2026 14:19:30 +0200 Subject: [PATCH 09/18] footnote 2, headings, lists, formatting --- src/components/Pages/TermsOfUseUpcoming.vue | 288 ++++++++++++-------- 1 file changed, 180 insertions(+), 108 deletions(-) diff --git a/src/components/Pages/TermsOfUseUpcoming.vue b/src/components/Pages/TermsOfUseUpcoming.vue index d5449c60..0a8e479c 100644 --- a/src/components/Pages/TermsOfUseUpcoming.vue +++ b/src/components/Pages/TermsOfUseUpcoming.vue @@ -734,7 +734,8 @@

    (a) The purpose of these standard contractual clauses is to ensure compliance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data - (General Data Protection Regulation)[1] for the transfer of personal data to a third country.

    + (General Data Protection Regulation)[1] for the + transfer of personal data to a third country.

    (b) The Parties:

    (i) the natural or legal person(s), public authority/ies, agency/ies or other body/ies (hereinafter @@ -753,44 +754,55 @@

    Clause 2 — Effect and invariability of the Clauses

    • - (a) These Clauses set out appropriate safeguards, including enforceable data subject rights and effective legal remedies, pursuant to Article 46(1) and Article 46 (2)(c) of Regulation (EU) 2016/679 and, with respect to data transfers from controllers to processors and/or processors to processors, standard contractual clauses pursuant to Article 28(7) of Regulation (EU) 2016/679, provided they are not modified, except to select the appropriate Module(s) or to add or update information in the Appendix. This does not prevent the Parties from including the standard contractual clauses laid down in these Clauses in a wider contract and/or to add other clauses or additional safeguards, provided that they do not contradict, directly or indirectly, these Clauses or prejudice the fundamental rights or freedoms of data subjects. + (a) These Clauses set out appropriate safeguards, including enforceable data subject rights and effective + legal remedies, pursuant to Article 46(1) and Article 46 (2)(c) of Regulation (EU) 2016/679 and, with + respect to data transfers from controllers to processors and/or processors to processors, standard + contractual clauses pursuant to Article 28(7) of Regulation (EU) 2016/679, provided they are not modified, + except to select the appropriate Module(s) or to add or update information in the Appendix. This does not + prevent the Parties from including the standard contractual clauses laid down in these Clauses in a wider + contract and/or to add other clauses or additional safeguards, provided that they do not contradict, + directly or indirectly, these Clauses or prejudice the fundamental rights or freedoms of data subjects.
    • - (b) These Clauses are without prejudice to obligations to which the data exporter is subject by virtue of Regulation (EU) 2016/679. + (b) These Clauses are without prejudice to obligations to which the data exporter is subject by virtue of + Regulation (EU) 2016/679.

    Clause 3 — Third-party beneficiaries

    • - (a) Data subjects may invoke and enforce these Clauses, as third-party beneficiaries, against the data exporter and/or data importer, with the following exceptions: + (a) Data subjects may invoke and enforce these Clauses, as third-party beneficiaries, against the data + exporter and/or data importer, with the following exceptions:
      • -
        -
      • - (i) Clause 1, Clause 2, Clause 3, Clause 6, Clause 7; -
        • -
      • - (ii) Clause 8 - Module One: Clause 8.5 (e) and Clause 8.9(b); Module Two: Clause 8.1(b), 8.9(a), (c), (d) and (e); Module Three: Clause 8.1(a), (c) and (d) and Clause 8.9(a), (c), (d), (e), (f) and (g); Module Four: Clause 8.1 (b) and Clause 8.3(b); -
        • -
      • - (iii) Clause 9 - Module Two: Clause 9(a), (c), (d) and (e); Module Three: Clause 9(a), (c), (d) and (e); -
        • -
      • - (iv) Clause 12 - Module One: Clause 12(a) and (d); Modules Two and Three: Clause 12(a), (d) and (f); -
        • -
      • - (v) Clause 13; -
        • -
      • - (vi) Clause 15.1(c), (d) and (e); -
        • -
      • - (vii) Clause 16(e); -
        • -
      • - (viii) Clause 18 - Modules One, Two and Three: Clause 18(a) and (b); Module Four: Clause 18. -
        • -
      +
        +
      • + (i) Clause 1, Clause 2, Clause 3, Clause 6, Clause 7; +
        • +
      • + (ii) Clause 8 - Module One: Clause 8.5 (e) and Clause 8.9(b); Module Two: Clause 8.1(b), 8.9(a), (c), + (d) and (e); Module Three: Clause 8.1(a), (c) and (d) and Clause 8.9(a), (c), (d), (e), (f) and (g); + Module Four: Clause 8.1 (b) and Clause 8.3(b); +
        • +
      • + (iii) Clause 9 - Module Two: Clause 9(a), (c), (d) and (e); Module Three: Clause 9(a), (c), (d) and (e); +
        • +
      • + (iv) Clause 12 - Module One: Clause 12(a) and (d); Modules Two and Three: Clause 12(a), (d) and (f); +
        • +
      • + (v) Clause 13; +
        • +
      • + (vi) Clause 15.1(c), (d) and (e); +
        • +
      • + (vii) Clause 16(e); +
        • +
      • + (viii) Clause 18 - Modules One, Two and Three: Clause 18(a) and (b); Module Four: Clause 18. +
        • +
    • (b) Paragraph (a) is without prejudice to rights of data subjects under Regulation (EU) 2016/679.
      • @@ -799,13 +811,16 @@

      Clause 4 — Interpretation

      • - (a) Where these Clauses use terms that are defined in Regulation (EU) 2016/679, those terms shall have the same meaning as in that Regulation. + (a) Where these Clauses use terms that are defined in Regulation (EU) 2016/679, those terms shall have the + same meaning as in that Regulation.
      • - (b) These Clauses shall be read and interpreted in the light of the provisions of Regulation (EU) 2016/679. + (b) These Clauses shall be read and interpreted in the light of the provisions of Regulation (EU) + 2016/679.
      • - (c) These Clauses shall not be interpreted in a way that conflicts with rights and obligations provided for in Regulation (EU) 2016/679. + (c) These Clauses shall not be interpreted in a way that conflicts with rights and obligations provided + for in Regulation (EU) 2016/679.
      @@ -823,13 +838,18 @@

      Clause 7 — Optional Docking clause

      • - (a) An entity that is not a Party to these Clauses may, with the agreement of the Parties, accede to these Clauses at any time, either as a data exporter or as a data importer, by completing the Appendix and signing Annex I.A. + (a) An entity that is not a Party to these Clauses may, with the agreement of the Parties, accede to these + Clauses at any time, either as a data exporter or as a data importer, by completing the Appendix and + signing Annex I.A.
      • - (b) Once it has completed the Appendix and signed Annex I.A, the acceding entity shall become a Party to these Clauses and have the rights and obligations of a data exporter or data importer in accordance with its designation in Annex I.A. + (b) Once it has completed the Appendix and signed Annex I.A, the acceding entity shall become a Party to + these Clauses and have the rights and obligations of a data exporter or data importer in accordance with + its designation in Annex I.A.
      • - (c) The acceding entity shall have no rights or obligations arising under these Clauses from the period prior to becoming a Party. + (c) The acceding entity shall have no rights or obligations arising under these Clauses from the period + prior to becoming a Party.
      @@ -846,121 +866,175 @@ appropriate technical and organisational measures, to satisfy its obligations under these Clauses.

      -

      8.1 Instructions

      +
      8.1 Instructions
      • - (a) The data exporter shall process the personal data only on documented instructions from the data importer acting as its controller. + (a) The data exporter shall process the personal data only on documented instructions from the data + importer acting as its controller.
      • - (b) The data exporter shall immediately inform the data importer if it is unable to follow those instructions, including if such instructions infringe Regulation (EU) 2016/679 or other Union or Member State data protection law. + (b) The data exporter shall immediately inform the data importer if it is unable to follow those + instructions, including if such instructions infringe Regulation (EU) 2016/679 or other Union or Member + State data protection law.
      • - (c) The data importer shall refrain from any action that would prevent the data exporter from fulfilling its obligations under Regulation (EU) 2016/679, including in the context of sub-processing or as regards cooperation with competent supervisory authorities. + (c) The data importer shall refrain from any action that would prevent the data exporter from fulfilling + its obligations under Regulation (EU) 2016/679, including in the context of sub-processing or as regards + cooperation with competent supervisory authorities.
      • - (d) After the end of the provision of the processing services, the data exporter shall, at the choice of the data importer, delete all personal data processed on behalf of the data importer and certify to the data importer that it has done so, or return to the data importer all personal data processed on its behalf and delete existing copies. + (d) After the end of the provision of the processing services, the data exporter shall, at the choice of + the data importer, delete all personal data processed on behalf of the data importer and certify to the + data importer that it has done so, or return to the data importer all personal data processed on its + behalf and delete existing copies.
      -

      8.2 Security of processing

      +
      8.2 Security of processing
      • - (a) The Parties shall implement appropriate technical and organisational measures to ensure the security of the data, including during transmission, and protection against a breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access (hereinafter “personal data breach”). In assessing the appropriate level of security, they shall take due account of the state of the art, the costs of implementation, the nature of the personal data[2], the nature, scope, context and purpose(s) of processing and the risks involved in the processing for the data subjects, and in particular consider having recourse to encryption or pseudonymisation, including during transmission, where the purpose of processing can be fulfilled in that manner. + (a) The Parties shall implement appropriate technical and organisational measures to ensure the security + of the data, including during transmission, and protection against a breach of security leading to + accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access (hereinafter + “personal data breach”). In assessing the appropriate level of security, they shall take due account of + the state of the art, the costs of implementation, the nature of the personal data[2], the nature, scope, context and purpose(s) of + processing and the risks involved in the processing for the data subjects, and in particular consider + having recourse to encryption or pseudonymisation, including during transmission, where the purpose of + processing can be fulfilled in that manner.
      • - (b) The data exporter shall assist the data importer in ensuring appropriate security of the data in accordance with paragraph (a). In case of a personal data breach concerning the personal data processed by the data exporter under these Clauses, the data exporter shall notify the data importer without undue delay after becoming aware of it and assist the data importer in addressing the breach. + (b) The data exporter shall assist the data importer in ensuring appropriate security of the data in + accordance with paragraph (a). In case of a personal data breach concerning the personal data processed by + the data exporter under these Clauses, the data exporter shall notify the data importer without undue + delay after becoming aware of it and assist the data importer in addressing the breach.
      • - (c) The data exporter shall ensure that persons authorised to process the personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality. + (c) The data exporter shall ensure that persons authorised to process the personal data have committed + themselves to confidentiality or are under an appropriate statutory obligation of confidentiality.
      -

      8.3 Documentation and compliance

      +
      8.3 Documentation and compliance
      • (a) The Parties shall be able to demonstrate compliance with these Clauses.
      • - (b) The data exporter shall make available to the data importer all information necessary to demonstrate compliance with its obligations under these Clauses and allow for and contribute to audits. + (b) The data exporter shall make available to the data importer all information necessary to demonstrate + compliance with its obligations under these Clauses and allow for and contribute to audits.
      -

      Clause 9 [not applicable] Use of sub-processors

      +

      Clause 9 [not applicable] — Use of sub-processors

      -

      Clause 10 Data subject rights

      +

      Clause 10 — Data subject rights

      The Parties shall assist each other in responding to enquiries and requests made by data subjects under the local law applicable to the data importer or, for data processing by the data exporter in the EU, under Regulation (EU) 2016/679.

      -

      Clause 11 Redress

      +

      Clause 11 — Redress

      +

      • - (a) The data importer shall inform data subjects in a transparent and easily accessible format, through individual notice or on its website, of a contact point authorised to handle complaints. It shall deal promptly with any complaints it receives from a data subject. + (a) The data importer shall inform data subjects in a transparent and easily accessible format, through + individual notice or on its website, of a contact point authorised to handle complaints. It shall deal + promptly with any complaints it receives from a data subject.
      +

      -

      Clause 12 Liability

      +

      Clause 12 — Liability

      +

      • - (a) Each Party shall be liable to the other Party/ies for any damages it causes the other Party/ies by any breach of these Clauses. + (a) Each Party shall be liable to the other Party/ies for any damages it causes the other Party/ies by any + breach of these Clauses.
      • - (b) Each Party shall be liable to the data subject, and the data subject shall be entitled to receive compensation, for any material or non-material damages that the Party causes the data subject by breaching the third-party beneficiary rights under these Clauses. This is without prejudice to the liability of the data exporter under Regulation (EU) 2016/679. + (b) Each Party shall be liable to the data subject, and the data subject shall be entitled to receive + compensation, for any material or non-material damages that the Party causes the data subject by breaching + the third-party beneficiary rights under these Clauses. This is without prejudice to the liability of the + data exporter under Regulation (EU) 2016/679.
      • - (c) Where more than one Party is responsible for any damage caused to the data subject as a result of a breach of these Clauses, all responsible Parties shall be jointly and severally liable and the data subject is entitled to bring an action in court against any of these Parties. + (c) Where more than one Party is responsible for any damage caused to the data subject as a result of a + breach of these Clauses, all responsible Parties shall be jointly and severally liable and the data + subject is entitled to bring an action in court against any of these Parties.
      • - (d) The Parties agree that if one Party is held liable under paragraph (c), it shall be entitled to claim back from the other Party/ies that part of the compensation corresponding to its / their responsibility for the damage. + (d) The Parties agree that if one Party is held liable under paragraph (c), it shall be entitled to claim + back from the other Party/ies that part of the compensation corresponding to its / their responsibility + for the damage.
      • - (e) The data importer may not invoke the conduct of a processor or sub-processor to avoid its own liability. + (e) The data importer may not invoke the conduct of a processor or sub-processor to avoid its own + liability.
      +

      -

      Clause 13 [not applicable] Supervision

      +

      Clause 13 [not applicable] — Supervision

      SECTION III — LOCAL LAWS AND OBLIGATIONS IN CASE OF ACCESS BY PUBLIC AUTHORITIES

      Clause 14 [not applicable]

      Clause 15 [not applicable]

      -

      SECTION IV – FINAL PROVISIONS

      +

      SECTION IV — FINAL PROVISIONS

      Clause 16 — Non-compliance with the Clauses and termination

      • - (a) The data importer shall promptly inform the data exporter if it is unable to comply with these Clauses, for whatever reason. + (a) The data importer shall promptly inform the data exporter if it is unable to comply with these + Clauses, for whatever reason.
      • - (b) In the event that the data importer is in breach of these Clauses or unable to comply with these Clauses, the data exporter shall suspend the transfer of personal data to the data importer until compliance is again ensured or the contract is terminated. This is without prejudice to Clause 14(f). + (b) In the event that the data importer is in breach of these Clauses or unable to comply with these + Clauses, the data exporter shall suspend the transfer of personal data to the data importer until + compliance is again ensured or the contract is terminated. This is without prejudice to Clause 14(f).
      • - (c) The data exporter shall be entitled to terminate the contract, insofar as it concerns the processing of personal data under these Clauses, where: + (c) The data exporter shall be entitled to terminate the contract, insofar as it concerns the processing + of personal data under these Clauses, where:
        • -
          +
            +
          • + (i) the data exporter has suspended the transfer of personal data to the data importer pursuant to + paragraph (b) and compliance with these Clauses is not restored within a reasonable time and in any + event within one month of suspension; +
            • +
          • + (ii) the data importer is in substantial or persistent breach of these Clauses; or +
            • +
          • + (iii) the data importer fails to comply with a binding decision of a competent court or supervisory + authority regarding its obligations under these Clauses. + In these cases, it shall inform the competent supervisory authority of + such non-compliance. Where the contract involves more than two Parties, + the data exporter may exercise this right to termination only with + respect to the relevant Party, unless the Parties have agreed + otherwise. +
            • +
        • - (i) the data exporter has suspended the transfer of personal data to the data importer pursuant to paragraph (b) and compliance with these Clauses is not restored within a reasonable time and in any event within one month of suspension; + (d) Personal data collected by the data exporter in the EU that has been transferred prior to the + termination of the contract pursuant to paragraph (c) shall immediately be deleted in its entirety, + including any copy thereof. The data importer shall certify the deletion of the data to the data exporter. + Until the data is deleted or returned, the data importer shall continue to ensure compliance with these + Clauses. In case of local laws applicable to the data importer that prohibit the return or deletion of the + transferred personal data, the data importer warrants that it will continue to ensure compliance with + these Clauses and will only process the data to the extent and for as long as required under that local + law.
        • - (ii) the data importer is in substantial or persistent breach of these Clauses; or -
          • -
        • - (iii) the data importer fails to comply with a binding decision of a competent court or supervisory authority regarding its obligations under these Clauses. - In these cases, it shall inform the competent supervisory authority of - such non-compliance. Where the contract involves more than two Parties, - the data exporter may exercise this right to termination only with - respect to the relevant Party, unless the Parties have agreed - otherwise. -
          • -
        -
      • - (d) Personal data collected by the data exporter in the EU that has been transferred prior to the termination of the contract pursuant to paragraph (c) shall immediately be deleted in its entirety, including any copy thereof. The data importer shall certify the deletion of the data to the data exporter. Until the data is deleted or returned, the data importer shall continue to ensure compliance with these Clauses. In case of local laws applicable to the data importer that prohibit the return or deletion of the transferred personal data, the data importer warrants that it will continue to ensure compliance with these Clauses and will only process the data to the extent and for as long as required under that local law. -
        • -
      • - (e) Either Party may revoke its agreement to be bound by these Clauses where (i) the European Commission adopts a decision pursuant to Article 45(3) of Regulation (EU) 2016/679 that covers the transfer of personal data to which these Clauses apply; or (ii) Regulation (EU) 2016/679 becomes part of the legal framework of the country to which the personal data is transferred. This is without prejudice to other obligations applying to the processing in question under Regulation (EU) 2016/679. + (e) Either Party may revoke its agreement to be bound by these Clauses where (i) the European Commission + adopts a decision pursuant to Article 45(3) of Regulation (EU) 2016/679 that covers the transfer of + personal data to which these Clauses apply; or (ii) Regulation (EU) 2016/679 becomes part of the legal + framework of the country to which the personal data is transferred. This is without prejudice to other + obligations applying to the processing in question under Regulation (EU) 2016/679.
      @@ -975,35 +1049,25 @@ -

      [1] Where the data exporter is a processor subject to Regulation (EU) - 2016/679 acting on behalf of a Union institution or body as controller, - reliance on these Clauses when engaging another processor - (sub-processing) not subject to Regulation (EU) 2016/679 also ensures - compliance with Article 29(4) of Regulation (EU) 2018/1725 of the - European Parliament and of the Council of 23 October 2018 on the - protection of natural persons with regard to the processing of personal - data by the Union institutions, bodies, offices and agencies and on the - free movement of such data, and repealing Regulation (EC) No 45/2001 and - Decision No 1247/2002/EC (OJ L 295 of 21.11.2018, p. 39), to the extent - these Clauses and the data protection obligations as set out in the - contract or other legal act between the controller and the processor - pursuant to Article 29(3) of Regulation (EU) 2018/1725 are aligned. This - will in particular be the case where the controller and processor rely - on the standard contractual clauses included in Decision 2021/915. [2] - This includes whether the transfer and further processing involves - personal data revealing racial or ethnic origin, political opinions, - religious or philosophical beliefs, or trade union membership, genetic - data or biometric data for the purpose of uniquely identifying a natural - person, data concerning health or a person’s sex life or sexual - orientation, or data relating to criminal convictions or offences.

      -

      [a]This should only be visible when the policy becomes enforced - [b]This will only be included if we have to include minor immaterial - changes to an existing version [c]Such changes can also be appended to - ‘what changed’ with a note like:

      -

      Revisions marked with an asterisk reflect minor clarifications that - do not affect your rights or obligations and did not require - re-acceptance. [d]shown only for outdated or upcoming versions

      +

      + [1] Where the data exporter is a processor subject to Regulation (EU) 2016/679 acting on behalf of a Union + institution or body as controller, reliance on these Clauses when engaging another processor + (sub-processing) not subject to Regulation (EU) 2016/679 also ensures compliance with Article 29(4) of + Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection + of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices + and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No + 1247/2002/EC (OJ L 295 of 21.11.2018, p. 39), to the extent these Clauses and the data protection + obligations as set out in the contract or other legal act between the controller and the processor pursuant + to Article 29(3) of Regulation (EU) 2018/1725 are aligned. This will in particular be the case where the + controller and processor rely on the standard contractual clauses included in Decision 2021/915. +

      +

      + [2] This includes whether the transfer and further processing involves personal data revealing racial or + ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic + data or biometric data for the purpose of uniquely identifying a natural person, data concerning health or a + person’s sex life or sexual orientation, or data relating to criminal convictions or offences. +

      @@ -1018,4 +1082,12 @@ export default { From 2e5c5e9d6050f06490dc46cb15076bcf2e152c35 Mon Sep 17 00:00:00 2001 From: dena Date: Tue, 2 Jun 2026 14:50:18 +0200 Subject: [PATCH 10/18] add footnote backlinks --- src/components/Pages/TermsOfUseUpcoming.vue | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/src/components/Pages/TermsOfUseUpcoming.vue b/src/components/Pages/TermsOfUseUpcoming.vue index 0a8e479c..36743a44 100644 --- a/src/components/Pages/TermsOfUseUpcoming.vue +++ b/src/components/Pages/TermsOfUseUpcoming.vue @@ -734,7 +734,7 @@

      (a) The purpose of these standard contractual clauses is to ensure compliance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data - (General Data Protection Regulation)[1] for the + (General Data Protection Regulation)[1] for the transfer of personal data to a third country.

      (b) The Parties:

      @@ -898,7 +898,7 @@ accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access (hereinafter “personal data breach”). In assessing the appropriate level of security, they shall take due account of the state of the art, the costs of implementation, the nature of the personal data[2], the nature, scope, context and purpose(s) of + :to="{ hash: '#tou-footnote-2' }" id="tou-footnote-link-2">[2], the nature, scope, context and purpose(s) of processing and the risks involved in the processing for the data subjects, and in particular consider having recourse to encryption or pseudonymisation, including during transmission, where the purpose of processing can be fulfilled in that manner. @@ -1050,7 +1050,7 @@

      - [1] Where the data exporter is a processor subject to Regulation (EU) 2016/679 acting on behalf of a Union + [1] Where the data exporter is a processor subject to Regulation (EU) 2016/679 acting on behalf of a Union institution or body as controller, reliance on these Clauses when engaging another processor (sub-processing) not subject to Regulation (EU) 2016/679 also ensures compliance with Article 29(4) of Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection @@ -1063,7 +1063,7 @@

      - [2] This includes whether the transfer and further processing involves personal data revealing racial or + [2] This includes whether the transfer and further processing involves personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data or biometric data for the purpose of uniquely identifying a natural person, data concerning health or a person’s sex life or sexual orientation, or data relating to criminal convictions or offences. From 046a60c2603a35c8f872abd4c6d561844b9d1da2 Mon Sep 17 00:00:00 2001 From: dena Date: Tue, 2 Jun 2026 15:05:24 +0200 Subject: [PATCH 11/18] formatting --- src/components/Pages/TermsOfUseUpcoming.vue | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/src/components/Pages/TermsOfUseUpcoming.vue b/src/components/Pages/TermsOfUseUpcoming.vue index 36743a44..f6b5fb67 100644 --- a/src/components/Pages/TermsOfUseUpcoming.vue +++ b/src/components/Pages/TermsOfUseUpcoming.vue @@ -734,7 +734,8 @@

      (a) The purpose of these standard contractual clauses is to ensure compliance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data - (General Data Protection Regulation)[1] for the + (General Data Protection Regulation)[1] for the transfer of personal data to a third country.

      (b) The Parties:

      @@ -898,7 +899,8 @@ accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access (hereinafter “personal data breach”). In assessing the appropriate level of security, they shall take due account of the state of the art, the costs of implementation, the nature of the personal data[2], the nature, scope, context and purpose(s) of + :to="{ hash: '#tou-footnote-2' }" id="tou-footnote-link-2">[2], the nature, scope, context + and purpose(s) of processing and the risks involved in the processing for the data subjects, and in particular consider having recourse to encryption or pseudonymisation, including during transmission, where the purpose of processing can be fulfilled in that manner. @@ -1050,7 +1052,8 @@

      - [1] Where the data exporter is a processor subject to Regulation (EU) 2016/679 acting on behalf of a Union + [1] Where the data exporter is a processor + subject to Regulation (EU) 2016/679 acting on behalf of a Union institution or body as controller, reliance on these Clauses when engaging another processor (sub-processing) not subject to Regulation (EU) 2016/679 also ensures compliance with Article 29(4) of Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection @@ -1063,7 +1066,8 @@

      - [2] This includes whether the transfer and further processing involves personal data revealing racial or + [2] This includes whether the transfer and + further processing involves personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data or biometric data for the purpose of uniquely identifying a natural person, data concerning health or a person’s sex life or sexual orientation, or data relating to criminal convictions or offences. From f7729cc689981771944fe9b466aa0418e5a0fc09 Mon Sep 17 00:00:00 2001 From: Perside Rosalie Date: Tue, 2 Jun 2026 20:20:29 +0200 Subject: [PATCH 12/18] Add what changed from previous version card --- src/components/Pages/TermsOfUseUpcoming.vue | 55 ++++++++++++++++++++- src/router/index.js | 2 +- 2 files changed, 55 insertions(+), 2 deletions(-) diff --git a/src/components/Pages/TermsOfUseUpcoming.vue b/src/components/Pages/TermsOfUseUpcoming.vue index f6b5fb67..cce3b8f9 100644 --- a/src/components/Pages/TermsOfUseUpcoming.vue +++ b/src/components/Pages/TermsOfUseUpcoming.vue @@ -3,6 +3,51 @@ + + + What changed from previous version + + + +

      The Terms of Use were revised to ensure compliance with the European Union’s + Digital Services Act (DSA) and to improve transparency about how Wikibase Cloud + operates.

      + +
      + Key updates: +
        +
      • + We have clarified when and how user accounts or individual instances may + be suspended or terminated, including notice periods and proportionality + principles. +
        • +
      • + The new version explains more clearly how decisions are made, including + how users can raise concerns or file complaints about moderation actions. +
        • +
      • + The responsibilities of instance managers and contributors are described + in more detail. +
        • +
      • + The Terms now explicitly reference applicable GDPR requirements. +
        • +
      • + The document has been reorganized and clarified. +
        • +
      +
      +       + + + + {{ show ? 'See less' : 'See more' }} + + +

      Terms Of Use

      1. Definitions

      In addition to terms defined elsewhere in this @@ -1081,7 +1126,15 @@ diff --git a/src/router/index.js b/src/router/index.js index 3fefe9ca..8e0be6a1 100644 --- a/src/router/index.js +++ b/src/router/index.js @@ -20,7 +20,7 @@ import User from '@/components/Pages/User' import Discovery from '@/components/Pages/Discovery/Discovery' import Complaint from '@/components/Pages/Complaint.vue' import HostingPolicy from '@/components/Pages/HostingPolicy.vue' -import TermsOfUseUpcoming from "@/components/Pages/TermsOfUseUpcoming.vue"; +import TermsOfUseUpcoming from '@/components/Pages/TermsOfUseUpcoming.vue' Vue.use(Router) From 2d0a5780498193e067d8f403d84a4d0c1efb10df Mon Sep 17 00:00:00 2001 From: Perside Rosalie Date: Thu, 4 Jun 2026 11:16:38 +0200 Subject: [PATCH 13/18] Move all ToU versions to a ToU folder --- .../Pages/{TermsOfUse.vue => TermsOfUse/Current.vue} | 0 .../Pages/{TermsOfUseUpcoming.vue => TermsOfUse/Upcoming.vue} | 0 src/router/index.js | 4 ++-- 3 files changed, 2 insertions(+), 2 deletions(-) rename src/components/Pages/{TermsOfUse.vue => TermsOfUse/Current.vue} (100%) rename src/components/Pages/{TermsOfUseUpcoming.vue => TermsOfUse/Upcoming.vue} (100%) diff --git a/src/components/Pages/TermsOfUse.vue b/src/components/Pages/TermsOfUse/Current.vue similarity index 100% rename from src/components/Pages/TermsOfUse.vue rename to src/components/Pages/TermsOfUse/Current.vue diff --git a/src/components/Pages/TermsOfUseUpcoming.vue b/src/components/Pages/TermsOfUse/Upcoming.vue similarity index 100% rename from src/components/Pages/TermsOfUseUpcoming.vue rename to src/components/Pages/TermsOfUse/Upcoming.vue diff --git a/src/router/index.js b/src/router/index.js index 8e0be6a1..4af22226 100644 --- a/src/router/index.js +++ b/src/router/index.js @@ -14,13 +14,13 @@ import ResetPassword from '@/components/Pages/ResetPassword' import EmailVerification from '@/components/Pages/EmailVerification' import CreateWiki from '@/components/Pages/CreateWiki' import TabSettings from '@/components/Pages/ManageWiki/TabSettings' -import TermsOfUse from '@/components/Pages/TermsOfUse' +import TermsOfUse from '@/components/Pages/TermsOfUse/Current.vue' import Privacy from '@/components/Pages/Privacy/Privacy' import User from '@/components/Pages/User' import Discovery from '@/components/Pages/Discovery/Discovery' import Complaint from '@/components/Pages/Complaint.vue' import HostingPolicy from '@/components/Pages/HostingPolicy.vue' -import TermsOfUseUpcoming from '@/components/Pages/TermsOfUseUpcoming.vue' +import TermsOfUseUpcoming from '@/components/Pages/TermsOfUse/Upcoming.vue' Vue.use(Router) From a072ef1a5f1d8d1eb32bb319a6a972dc52baee81 Mon Sep 17 00:00:00 2001 From: Perside Rosalie Date: Thu, 4 Jun 2026 12:43:55 +0200 Subject: [PATCH 14/18] fix card style and color --- src/components/Pages/TermsOfUse/Upcoming.vue | 29 +++++++++++--------- 1 file changed, 16 insertions(+), 13 deletions(-) diff --git a/src/components/Pages/TermsOfUse/Upcoming.vue b/src/components/Pages/TermsOfUse/Upcoming.vue index cce3b8f9..946bc1df 100644 --- a/src/components/Pages/TermsOfUse/Upcoming.vue +++ b/src/components/Pages/TermsOfUse/Upcoming.vue @@ -1,19 +1,22 @@ -