Privacy information

Example Institute, Example Street 1, 12345 Example

Data-protection officer, privacy@example.org

User name, name, e-mail address, the password in hashed form, the role, the time of the last login, and whether the lists show you what is yours or everything.

Kept As long as the account exists; an account is deactivated when you leave, and your name stays on the records you worked on.

For every passkey you add: its public key and ID, the make of the device that holds it, the name you give it, whether the device syncs it, when it was made and last used, and a counter against copies. No fingerprint, face or PIN leaves your device; boxdb never sees them. The password stays beside the passkeys.

Kept Until you remove the passkey on your profile, or an administrator revokes it — after a lost device, or with a new set-up link.

Every account has a person's record: your name and, where they were entered, work-related e-mail addresses, phone numbers, your office, your organisation, work-related addresses and the groups you are in. Every user of boxdb sees them on the Persons pages, and finds them by name, organisation, e-mail address or phone number in the search. You change your own record yourself; apart from you, only an administrator can.

Kept Without a time limit; when you leave, the record is marked as retired and kept, like your name on the records you worked on.

A box or a piece of equipment can name you as responsible for it, and you or a group you are in as the one who maintains its record. Every user of boxdb sees both on the record's page and, by name, in the CSV export of the lists; the lists of boxes and assets show who maintains a record and can be filtered by it. Your entry among the persons says how many boxes and assets name you, and leads to the lists of them. By default the lists and the search show every user what is theirs; one click shows everything, a colleague's things among it, and the lists can be switched to what a colleague or a group is shown. The history says who entered and who changed them.

Kept With the records; when you leave, you stay entered until somebody else takes the record over.

The inventory database that boxdb replaces named people: its users with their work contact details, who borrowed equipment, who created a record, and who was the user of a box or a piece of equipment. They are taken over as persons, the user of a box or a piece of equipment as the person responsible for it, marked as old data, and shown as having left unless they work here today. If you are among them and something is wrong, change your record or ask the section.

Kept Without a time limit, like every person's record.

Every login and every failed attempt, with the user name, the network address, the browser and the time.

Kept 30 days in the database, and in the nightly backups for as long as those are kept — up to three years with the standard settings.

Who created, changed, verified, moved, merged, renamed or retired which record, and who added or removed a picture or a document, with the time and any note typed. A change is kept with what the field held before and after, a text included: what somebody takes out of a note stays readable in the history.

A retirement is kept with its reason, the day the thing left, a reference and the note typed; a reference or a note may name somebody, as in “handed over to”.

The history of the inventory database that boxdb replaces is taken over with it: who created a piece of equipment there, and who recorded a box or a piece of equipment where, on which day, from 2015 on — named as the person the old data names, also where that person has no account here.

What was changed on a box or a piece of equipment there comes with it, with what the field held before and after — a name, a comment, an information text — and such a text may name somebody.

Its loans come with it: who borrowed a piece of equipment, from when to when, whether it came back, and the loan slip's number — shown in the equipment's history.

Shown to every user of boxdb on the record's page and on the page History, which lists every event and can be filtered by user or by the person of the old history. Of a person's record the history says that the name was changed, by whom and when, not the names.

Kept With the records.

Every request with your network address, the page asked for and the browser. Readable by whoever runs the host.

Kept By size only: five files of 10 MB per service, older lines dropped.

When an administrator links a place to its Wikidata entry, the server fetches that entry and its photograph. What is sent is the entry's ID and the operator's contact address, never your name and never the inventory.

The certificate for the site's address is issued by this certificate authority, which receives the site's name and the operator's e-mail address.

The scan button beside the search field asks the browser for the camera, and the browser asks you. The picture is read for a code on your device and nothing of it is sent or stored; only the code's text goes to the server, as if you had typed it.

The name, e-mail address and phone number you type into the header of a freight list go into the files you download and hand to logistics. Today's freight page is a demo that stores nothing of it. A freight module that keeps the freights, with the contacts and the delivery addresses they name, is planned; this page is updated when it comes.