Rechtliches / Datenschutz
Datenschutz bleibt eng gefasst, solange der Atlas nur interne Admins nutzt.
Phase 2A beschränkt personenbezogene Daten auf interne Admins, Sitzungen, Sicherheitslogs und freiwillige Beiträge.
Startübersetzung / Phase 2A notice
No public accounts yet. No advertising profiles. No non-essential cookies.
This page documents the current operating stance. It is not a substitute for final legal review before public contributor registration.
Current personal data scope
Phase 2A does not offer public contributor accounts. Personal data processing is limited to internal admin users, admin sessions, security logs, and voluntary contribution records reviewed by the project team.
Lawful basis and minimization
Public contribution review is based on voluntary submission and legitimate nonprofit editorial review. Contributors should avoid sensitive personal data; editors keep only the fields needed to assess and contextualize the note.
Admin accounts and sessions
Internal admins use email, optional name, role, hashed password, DB-backed session records, and strictly necessary secure cookies for login and CSRF protection.
Security and audit logs
Admin actions are stored in audit logs. IP addresses may be hashed before storage where available, and user-agent strings are used only for security review.
Access, correction, and erasure
Admins and public contributors can request access, correction, restriction, or deletion of personal data by contacting [email protected]. Requests are reviewed within 30 days unless a legal or security retention reason applies.
Retention
Rejected or archived public contribution records should be reviewed for deletion or anonymization during regular editorial cleanup. Admin session records are short-lived; audit logs are kept only as long as needed for security and governance review.
Public contributors later
Public registration, public profiles, and community account features are later roadmap items. NL/FR legal translations and a fuller privacy package are required before that launch.
Media, maps, and AR
The current AR layer is a web map scan experience. Future camera/WebXR or media upload features need privacy-by-design review, explicit media permissions, and a takedown workflow before launch.
NL / FR readiness
English is the working notice. Dutch and French legal pages must be reviewed before public contributor accounts, public profiles, or broader Belgian/EU community onboarding.