Hi to all,
Example: Webhosting Company xyz we use.
Webhosting Company xyz has a customer he stop his contract for his webpage till 11/30/2006, the webhosting company xyz is a nice company and store his data (html files/mysql db's and Lofiles) for 1 month, if somthing the cutomer still need. At the 3.1.2007 the Webhosting Company xyz erase all datas of this customer including all Backup's. Then some day's later the police or dba come and ask for the logfiles from the 29.11.2006, but you have this date not, the reason is you erase the data by the 3.1.2007.
Now my question, Is Webhsoting Company xyz responsible to store Webserver logfiles also 180days after quit the contract with this customer like DialIN/ADSL and Maillog files ?
For me webserver logfiles also connection Information like email (SMTP/POP3/IMAP4) and DialIN/ADSL and ther we need to store connection Information for 180days.
Yours sincerely
Mit freundlichen Grüssen
Marcel Stutz System Engineer
-------------------------------------------------------------------
Genotec Internet Consulting AG - Internetdienste ohne Kompromisse Stutz Marcel System Engineer Hegenheimermattweg 119a 4123 Allschwil
Telefon 0848 321 123 Fax 0842 321 123
http://www.genotec.ch/ marcel.stutz@genotec.ch
-------------------------------------------------------------------
This e-mail message is for the sole use of the intended recipient(s) and may contain confidential or privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please immediately contact the sender by reply e-mail and delete the original message including any attachments and destroy all copies thereof. Thank you.
Diese Meldung ist nur für den/die Empfänger/in bestimmt und kann vertrauliche oder persönliche Informationen enthalten. Nur der/die Empfänger/in ist berechtigt, die Meldung zu speichern, zu kopieren oder weiter zu verwenden. Wenn Sie die Meldung infolge eines Fehlers empfangen haben, treten Sie bitte mit dem Absender in Verbindung und vernichten Sie die Mitteilung sowie alle Anhänge und Kopien. Besten Dank.
Hi Marcel!
AFAIK, the company has to store all "Elektronische Randdaten" for 180 days, no matter if there is an active contract or not. However, we at mhs.ch do so.
Best wishes, Matthias
----- Original Message ----- From: "Marcel Stutz" marcel.stutz@genotec.ch To: swinog@swinog.ch Sent: Tuesday, January 09, 2007 11:52 AM Subject: [swinog] Question about Webserver Logfiles and LAW
Hi to all,
Example: Webhosting Company xyz we use.
Webhosting Company xyz has a customer he stop his contract for his webpage till 11/30/2006, the webhosting company xyz is a nice company and store his data (html files/mysql db's and Lofiles) for 1 month, if somthing the cutomer still need. At the 3.1.2007 the Webhosting Company xyz erase all datas of this customer including all Backup's. Then some day's later the police or dba come and ask for the logfiles from the 29.11.2006, but you have this date not, the reason is you erase the data by the 3.1.2007.
Now my question, Is Webhsoting Company xyz responsible to store Webserver logfiles also 180days after quit the contract with this customer like DialIN/ADSL and Maillog files ?
For me webserver logfiles also connection Information like email (SMTP/POP3/IMAP4) and DialIN/ADSL and ther we need to store connection Information for 180days.
Yours sincerely
Mit freundlichen Grüssen
Marcel Stutz System Engineer
-------------------------------------------------------------------
Genotec Internet Consulting AG - Internetdienste ohne Kompromisse Stutz Marcel System Engineer Hegenheimermattweg 119a 4123 Allschwil
Telefon 0848 321 123 Fax 0842 321 123
http://www.genotec.ch/ marcel.stutz@genotec.ch
-------------------------------------------------------------------
This e-mail message is for the sole use of the intended recipient(s) and may contain confidential or privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please immediately contact the sender by reply e-mail and delete the original message including any attachments and destroy all copies thereof. Thank you.
Diese Meldung ist nur für den/die Empfänger/in bestimmt und kann vertrauliche oder persönliche Informationen enthalten. Nur der/die Empfänger/in ist berechtigt, die Meldung zu speichern, zu kopieren oder weiter zu verwenden. Wenn Sie die Meldung infolge eines Fehlers empfangen haben, treten Sie bitte mit dem Absender in Verbindung und vernichten Sie die Mitteilung sowie alle Anhänge und Kopien. Besten Dank. _______________________________________________ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
On Tue, Jan 09, 2007 at 12:04:56PM +0100, Matthias Hertzog wrote:
Hi Marcel!
AFAIK, the company has to store all "Elektronische Randdaten" for 180 days, no matter if there is an active contract or not. However, we at mhs.ch do so.
I think you're wrong. There is no law/regulation that covers webserver logs. BüPF only covers mail envelopes and IP address allocation. The only reason to store webserver logs is for accounting. So normal data privacy rules should be considered. In other words delete logs as soon as they are no longer needed.
-
Claudio Jeker -
Marcel Stutz -
Matthias Hertzog