Zum Hauptinhalt
Textseite

Personal data in the broader sense

Abschlussbedingungen

GDPR - Recital 30 

Natural persons may be associated with online identifiers provided by their devices, applications, tools and protocols, such as internet protocol addresses, cookie identifiers or other identifiers such as radio frequency identification tags. This may leave traces which, in particular when combined with unique identifiers and other information received by the servers, may be used to create profiles of the natural persons and identify them.



What does that mean?

For some data, a reference to a person can only be established with a great deal of effort or technical expertise. Nevertheless, this data is also subject to the provisions of the GDPR. This includes, for example, the so-called "IP address".

IP... what?

When we access the internet with a device, our internet provider assigns us a number, the so-called "IP address". Our device can be reached on the internet with this address. For example, a search engine can return a search result to us. Our internet provider knows which IP address we are using on the internet at what time, so that we can be identified as a person on the internet.

The websites we visit also store this IP address on their servers in so-called "logs". In theory, this makes it possible to find out which website we have visited. This is why IP addresses also count as personal data.

It's that simple...

Your IP address can be used to determine your approximate location without much effort. This website uses your IP address to determine your approximate location.

Localisation in a map based on IP address



Cookies

So-called "cookies" also fall into this category. These are small files in which data about your online activities are stored, e.g. which products you have viewed on a website or what you have searched for. You will therefore often find corresponding "cookie banners" on websites that inform you about the use of your data. Unfortunately, cookie banners are often deliberately poorly designed so that you consent to the use of your data as far as possible (Source)