Timelines Privacy Policy

Who processes the data

Timelines belongs to Germán Ezequiel Laso Andino, trading as ProfBlu. He is the data controller.

• Owner: Germán Ezequiel Laso Andino, sole trader (libero professionista).
• VAT number (Partita IVA): 04702090988. Italian tax code (codice fiscale): LSNGMN88S04Z600M.
• Professional activity not registered in the Italian Business Register (no REA number).
• Contact address: Via della Sega 1, 38080 Verdesina, Porte di Rendena (TN), Italia.
• Email for anything about the data: privacidad@profblu.com.

No data protection officer has been appointed: the law does not require one for an activity of this size.

Three groups of people

Timelines processes data about three different groups, and each has its own text:

• People who read the archive: this page.
• The people whose story the archive tells: their data does not come from them but from public sources, and what that means is in Information for the people in the archive.
• People who write the archive from the panel: the section If you use the panel on this same page.

If you read the archive

There is no account, no form and no newsletter. We do not ask you for any data.

All we receive is what any browser sends when it requests a page: your IP address, the date and time, the address you request —if you search the archive for a name, the search is part of that address— and the browser and system you use. The server writes this to its access log, which is used to keep the site running and to detect abuse. We do not use it to find out who you are, we do not combine it with anything and we do not build profiles.

The basis is our legitimate interest in the site working and being secure (Article 6(1)(f) of the General Data Protection Regulation).

We do not measure visits: there is no Google Analytics, no Google Tag Manager and no other measurement or advertising software on the site.

Images and videos requested from other servers

The photographs and clips in the archive are not copied to our server: your browser requests them directly from the server where the original was published, today Wikimedia Commons (upload.wikimedia.org). That server receives your IP address and your browser details, as with any image. Photographs are requested without cookies and without telling Wikimedia which page you are reading. Video clips are requested like any video on a web page: Wikimedia knows the request comes from timelines.profblu.com, but not from which page, and your browser sends it any Wikimedia cookies you already had, if you have them and do not block them.

When a page includes a YouTube video, before you click only its still frame is shown, which your browser requests from YouTube's image server (i.ytimg.com), also without cookies and without saying which page it comes from. The player is not loaded until you click. When you click, it loads from youtube-nocookie.com, and from that moment YouTube processes your data under its own privacy policy (policies.google.com/privacy).

What is stored in your browser is detailed in the cookie policy.

If you use the panel

The panel my.timelines.profblu.com is used only by the team that writes the archive.

• Your identity is the central ProfBlu account you use to sign in to every product on the platform. Timelines has no password of its own: it checks the session token issued by that central account, which is governed by the platform's privacy policy (profblu.com/en/privacidad).
• What you do in the panel is logged with your identifier: which source was approved, which fact was reviewed, what was published and when. That log is what makes it possible to show where each published fact came from and who approved it.

The basis is your relationship with the owner to write the archive and our legitimate interest in being able to show what was published and why.

Where the data is processed, and who else sees it

Hetzner hosts the server, the database and its backups, in Germany. No other provider receives the data of those who read or write the archive, beyond Wikimedia and YouTube on the terms above.

Today Timelines does not use any artificial intelligence service in production. If that changes, this text will change first.

We do not sell or pass on data to anyone.

For how long

• The server's access log is rotated every day and the last fourteen days are kept; after that they are deleted automatically.
• The panel's activity log is kept for as long as the archive is published, because it is the proof of what was published.
• Encrypted backups of the database are kept for 35 days.

Your rights

You can exercise the rights the General Data Protection Regulation gives you: access, rectification, erasure, portability, objection and restriction. Write to privacidad@profblu.com. We reply within the time the law sets, one month at most.

If your request is about a person in the archive, the procedure is in Information for the people in the archive.

You can complain to a supervisory authority: in Italy, the Garante per la protezione dei dati personali (www.garanteprivacy.it); in Spain, the Agencia Española de Protección de Datos (www.aepd.es); or the authority of the European Union country where you live.

Minors

The site does not ask anyone for data, minors included. The panel is a work tool for adults.

Security

Communications are encrypted (TLS). The panel requires an authorised account and access to each function depends on each person's role. If we detect a breach affecting personal data, we will notify the supervisory authority within the 72 hours the law sets, and the people affected when the law requires it.

Changes

If we change what we do with the data, we change this text and move the revision date.