Privacy Policy

1. Controller

2. Hosting and Server Log Files

This website is hosted by [enter hosting provider, e.g., Hetzner Online GmbH, Gunzenhausen, Germany]. When you access these pages, the server automatically records the following data in so-called server log files:

• IP address of the requesting device
• Date and time of access
• Requested URL and HTTP status code
• Amount of data transferred
• Referrer and user agent (browser / operating system)

This data is used exclusively for the proper operation and security of the website (defense against attacks) and for statistical analysis. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest). The log files are automatically deleted after [14 days].

3. Uploaded Files (HTML Reports)

You can upload HTML files in order to generate a shareable link. We store:

• the uploaded file itself,
• the original file name,
• size in bytes,
• a random access token,
• optionally, an Argon2id hash of any password you choose,
• the chosen expiration date and the time of upload.

We do not store an IP address in connection with the upload. Files are automatically and irreversibly deleted as soon as the expiration date you selected is reached. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract, since you actively request the function).

4. Cookies

This website uses only a strictly necessary session cookie (PHPSESSID). It is set only when you open a password-protected report, so that you do not have to re-enter the password for every request. The cookie is deleted when you close your browser. There is no tracking, no profiling, and no third-party analytics. The legal basis is § 25 (2) no. 2 TTDSG and Art. 6 (1) (f) GDPR.

5. SSL / TLS Encryption

This site uses TLS encryption. You can recognize an encrypted connection by the "https://" prefix in your browser's address bar.

6. Third-Party Services

We do not use any external trackers, no Google Analytics, no third-party fonts, and no advertising. Only content from our own server is loaded.

The pages contain a link to buymeacoffee.com. That link only becomes active when you click it. Once you do, the privacy terms of that provider apply.

7. Your Rights

Under the GDPR you have, at any time, the right to:

• obtain information about the data we process about you (Art. 15 GDPR),
• have inaccurate data corrected (Art. 16 GDPR),
• have your data erased (Art. 17 GDPR),
• restrict processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing (Art. 21 GDPR),
• lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection of Lower Saxony (Landesbeauftragte für den Datenschutz Niedersachsen).

Please direct any requests to: info@iotdata.systems.

8. Removing Your Own Uploads

If you would like to remove a report you have uploaded before its expiration date, please send us the share link by email. We will delete the file promptly.

9. Changes to This Policy

This privacy policy is current as of: [enter date]. We will update this notice whenever the legal situation or our processing activities change.