Description and scope of data processing

When you visit our website, data is collected by the web server for data transmission (information from the computer system of the requesting computer) and partly stored in log files on the web server. These files provide information about the device used, the browser used, the time of access, the referrer, and the amount of data transferred. The following data is collected:

IP address of the requesting computer
Date and time of the request
Name and URL of the retrieved file
Access status/http status code
Amount of data transferred
Website from which the request originates (referrer URL)
Browser used, language and version of the browser software, the operating system and its interface
Name of the access provider

The data is stored in our system's server log files. This data is not stored together with other personal data of the user.

Data retrieval / Download
Each time a file is downloaded, data about this process is stored in a log file. Specifically, the following data is additionally stored for each download:

Name of the retrieved file
Notification of whether the retrieval was successful

Data retrieval and download are stored in the normal log files.

Legal basis for data processing
The legal basis for the temporary storage of the data and log files is Article 6(1)(f) GDPR.

Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session. Storage in log files is carried out to ensure the functionality of the website. Furthermore, the data helps us to optimize the website and to guarantee the security of our IT systems. The data is not used for marketing purposes in this context. We reserve the right to subsequently review server log files should there be concrete indications of unlawful use. These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR.

Storage duration
The data is deleted as soon as it is no longer needed for the purpose for which it was collected. In the case of data collected to provide the website, this is the case when the respective session ends. In the case of data stored in log files, this is the case after a maximum of 14 days. Storage beyond this period is possible. In this case, the users' IP addresses are deleted or anonymized so that it is no longer possible to identify the requesting client.

Opportunity to object and have the matter rectified
The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Therefore, there is no possibility for the user to object.