|
|
| Line 1: |
Line 1: |
| Here you will find the most important information on the topics of data protection and information security relating to the BlueSpice software.
| | ==DescriptionMsg== |
| | {{AutoDocDescriptionMsg |
| | |name = BlueSpiceFilterableTables |
| | |desc = {{int:bs-filterabletables-extension-description |
| | }} |
| | }} |
| | ==License== |
| | {{AutoDocLicense |
| | |name = GPL-3.0-only |
| | }} |
| | ==Requirements== |
| | {{AutoDocRequirements |
| | |mediawiki = {{AutoDocVersion |
| | |name = MediaWiki |
| | |version = 1.36.0 |
| | }} |
| | |extensions = {{AutoDocVersion |
| | |name = BlueSpiceFoundation |
| | |version = 4.1 |
| | }} |
| | }} |
| | ==IntegratesInto== |
| | {{AutoDocIntegratesInto |
| | |into = {{AutoDocListItem |
| | |item = BlueSpiceVisualEditorConnector |
| | }} |
| | }} |
| | ==Hooks== |
| | {{AutoDocHooks |
| | |Hooks = {{AutoDocCallback |
| | |name = [https://www.mediawiki.org/wiki/Manual:Hooks/BeforePageDisplay BeforePageDisplay] |
| | |callback = \BlueSpice\FilterableTables\Hook\BeforePageDisplay\AddResources::callback |
| | }} |
| | }} |
|
| |
|
| == Declarations, contracts and directories ==
| |
| Hallo Welt! ensures compliance with the relevant '''data protection laws'''. For a company in Germany, these are the '''EU General Data Protection Regulation''' (EU-GDPR) as well as supplementary regulations in the '''Federal Data Protection Act''' (BDSG) as well as other data protection regulations when handling personal data (including the fundamental right to informational self-determination). These regulations require the provision of these documents:
| |
|
| |
| * '''[https://bluespice.com/privacy/ Data protection declaration]''' for the use of our websites and online services
| |
| * '''[https://bluespice.com/legal/ Data processing agreement]''' for our clients with the '''declaration on technical-organisational measures''' (TOM) and the '''list of sub-processors'''.
| |
|
| |
| You can find out how Hallo Welt! deals with other guidelines, certifications and standards on the [[Info:Trust and Safety/Certification and compliance|Certification and Compliance]] page.
| |
|
| |
| == Technical features of the BlueSpice software ==
| |
| In addition, BlueSpice offers a number of features that ensure data protection and information security:
| |
|
| |
| '''Authentication'''
| |
|
| |
| BlueSpice supports various authentication mechanisms to meet your security requirements. In addition to the connection of user directories via LDAP, single sign-on via Kerberos or SAML can also be implemented. The use of two-factor authentication is also possible. Learn more about user authentication under: [[Info:Trust and Safety/Software - security and reliability|Software - Security & Reliability]].
| |
|
| |
| '''Rights management'''
| |
|
| |
| BlueSpice allows the differentiation of users, groups, roles and rights. A basic distinction is made between anonymous wiki visitors without an account and logged-in wiki users with an account. Typical roles of wiki users are:
| |
|
| |
| * '''Readers''' may read and comment on content.
| |
| * '''Editors''' may additionally edit content.
| |
| * '''Reviewers''' may additionally release content.
| |
| * '''Administrators''' may additionally make settings in the wiki.
| |
|
| |
| Groups, roles and rights can be configured in principle. The handling is described in our admin manual.
| |
|
| |
| '''Privacy Center'''
| |
|
| |
| In general, a wiki software like BlueSpice logs all user actions, including read accesses, write accesses and administrative actions. In order to meet the requirements of the EU DSGVO, BlueSpice now has the Privacy Center function. This gives wiki users these options:
| |
|
| |
| * anonymisation, e.g. by making the name unrecognisable,
| |
| * request all stored data,
| |
| * information about the data recorded in the system and the possibility of exporting it,
| |
| * (dis)agreement with the privacy policy and the cookie policy,
| |
| * deletion of the user account.
| |
|
| |
| A more detailed description of the functions can be found in the [[Manual:Extension/BlueSpicePrivacy|BlueSpice Helpdesk]].
| |
|
| |
| '''Stand-alone capability'''
| |
|
| |
| BlueSpice can be operated without access to external sources. Thus, no information flows to external service providers. BlueSpice can therefore also be used in intranets that are closed to the outside world. Internet access is recommended for the operation of BlueSpice, but not absolutely necessary.{{Textbox|boxtype=important|header=|text=Please note that the Free Edition has a reduced range of functions.|icon=yes}}
| |
|
| |
| == Technical access to client systems ==
| |
| '''Systems hosted in the cloud'''
| |
|
| |
| In our cloud infrastructure, only users with the rights assigned by the client have access to the data in the wiki. Access to the server by the client or third parties is not possible. The access restrictions for Hallo Welt! or their service providers are explained here: [[Info:Trust and Safety/Cloud - security and reliability|Cloud - Security and Reliability]].
| |
|
| |
| '''On-premises systems hosted by the customer'''
| |
|
| |
| With on-premises systems, the data is stored in the infrastructure of the customer, who is therefore also responsible for all data protection and information security issues. When working on on-premises systems, we largely follow the requirements of our customers and use their infrastructure. Hallo Welt! itself uses SSH access, VPN and Teamviewer as technologies. In addition, access is possible via interfaces provided to us by the customer.
| |
| *Common remote access tools that can be used by us:
| |
| **VPN+SSH/VPN+RDP
| |
| **Teamviewer
| |
| **Microsoft Teams
| |
| **Webex
| |
| **Fastviewer
| |
| *Common VPN clients are:
| |
| **OpenVPN
| |
| **SecurePulse
| |
| **FortiNet
| |
| *Data transmission: For the transfer of larger amounts of data, for example for migrations or backups, Hallo Welt! GmbH provides a [https://nextcloud.com/ Nextcloud] instance.
| |
| '''Employees and subcontractors'''
| |
|
| |
| The employees of Hallo Welt! GmbH provide their services in Germany and Poland. In addition, we work with external service providers in Ukraine, India and New Zealand, who are, however, only involved in product development (not in customer systems or in the processing of data). There may be exceptions to this after consultation with the customer.
| |
|
| |
| == External links ==
| |
| For more information on data protection and information security, please visit the product website:
| |
|
| |
| * [https://bluespice.com/products/frequently-asked-questions/cloud/ Frequently Asked Questions: Cloud]
| |
| * [https://bluespice.com/products/frequently-asked-questions/technical-questions/ Frequently asked questions: Technology]
| |
| * [https://bluespice.com/products/frequently-asked-questions/privacy/ Frequently asked questions: Data protection]
| |
|
| |
| [[de:Info:Trust_and_Safety/Datenschutz_und_Informationssicherheit]]
| |
Discussions