| Website delivery and security logs | IP address, timestamps, URL, referrer, browser, operating system, status code and technical connection data. | Website delivery, IT security, troubleshooting and abuse prevention on the basis of Art. 6(1)(f) GDPR; where terminal-device access is involved, the TDDDG may also apply. | Only for as long as required for security, troubleshooting and system operation. |
| Cookies, consent and optional measurement | Consent status, technical identifiers, local storage information and, where consent is given, usage or interaction data. | Website operation, consent documentation and optional internal analytics or marketing measurement on the basis of the TDDDG, Art. 6(1)(a) or Art. 6(1)(f) GDPR. | Only for as long as required to document choices, operate the site or perform legitimate evaluation. |
| Interactive calculators and website widgets | Entered calculator values, selected options, free-text fields and calculated results. This telemetry is stored without visitor id, session id, IP hash, user agent, name, company or email address; free text can still contain personal data if you enter it. | Functional checks, improving clarity, understanding typical inputs and internal scorecard reporting on the basis of Art. 6(1)(f) GDPR. | Operational telemetry is retained only for as long as needed for evaluation, quality assurance and website improvement; raw-data access is restricted internally. |
| Contact forms, downloads and consultation enquiries | Name, company, email, phone number, role, message, topic, requested resource and voluntary project information. | Handling enquiries, providing requested resources, preparing conversations and initiating business relationships on the basis of Art. 6(1)(b), Art. 6(1)(f) or Art. 6(1)(a) GDPR. | Enquiry and lead data is reviewed and deleted or anonymised when no longer needed and no statutory reason prevents this. |
| Account portal, account and protected downloads | Account and login data, sessions, permissions, download entitlements, activity and security logs, support information. | Secure access, contract performance, access control, download delivery, support and documentation on the basis of Art. 6(1)(b) and Art. 6(1)(f) GDPR. | Only for as long as the account, contract, entitlement, security interest or statutory obligation requires. |
| Checkout, payments and invoices | Name, company, billing address, email, product, order, payment status, transaction metadata and invoice data. | Purchase processing, digital delivery, invoicing, tax obligations, support and fraud prevention on the basis of Art. 6(1)(b), Art. 6(1)(c) and Art. 6(1)(f) GDPR. | Purchase and invoice data is retained in line with statutory commercial, tax and documentation obligations. |
| Email, CRM and lead management | Contact details, communication content, enquiry and status information, project notes, consent or communication preferences. | Communication, follow-up, customer relationship management and internal documentation on the basis of Art. 6(1)(b) and Art. 6(1)(f) GDPR. | Data is periodically reviewed and deleted, anonymised or restricted when no longer required. |
