Controller

The controller for the collection, processing and use of your personal data within the meaning of Art. 4 (7) GDPR is

Lars Vonhof-Hunold
Terrassenweg 6
34212 Melsungen
Germany

This policy covers permitra.de and the demo instance at demo.permitra.de. Both are operated by the same controller but process different things — the section on the demo says what is added there.

Your rights: access, rectification, restriction, erasure and objection

You have the right to request information about the personal data we hold about you, free of charge, and/or to demand its rectification, restriction or erasure. Restriction or erasure cannot take place where statutory provisions prevent it.

Please contact the controller named above at datenschutz@vonhof-hunold.de

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the Hessian Commissioner for Data Protection and Freedom of Information.

Data minimisation

Following the principles of data avoidance and data minimisation, we store personal data only for as long as it is necessary or required by law.

Collection of general information

When you access this website, the web server writes an entry to a log file. The legal basis is our legitimate interest in the secure and uninterrupted operation of the service (Art. 6 (1)(f) GDPR).

The following is recorded: truncated IP address, date and time, requested address, HTTP status code, volume of data transferred, referring page and user agent.

The IP address is truncated as the entry is written — for IPv4 the last octet is dropped, for IPv6 all but the first two groups. A complete IP address therefore never appears in the access log. The error log, which the server writes only on faults and which cannot technically be truncated, may contain the full IP address.

Both logs are deleted automatically after 14 days. This data is not combined with other sources and is not evaluated per person.

No cookies, no third parties, no tracking

This website sets no cookies, embeds no third-party content and uses no analytics or tracking services. It consists of static files; fonts and images are served from the same server, and no connection to any external server is made.

Hosting

The pages are served from a server operated by netcup GmbH, Karlsruhe, in Germany. The provider processes the data arising from this on our instructions, as a processor under Art. 28 GDPR.

Demo instance demo.permitra.de

An example installation of Permitra runs at demo.permitra.de. The firewall rules, applications, zones and names shown there are entirely fictional and describe no real network.

The demo requires a sign-in. For an account we store the user name, name, e-mail address and the hash of the password, plus the configuration of a second factor (TOTP or passkey) where one has been set up. The legal basis is the performance of the usage relationship you enter into when requesting an account (Art. 6 (1)(b) GDPR).

Like every Permitra installation, the demo keeps an audit log: sign-ins, changes and data access are recorded with a timestamp and the acting account. That is the purpose of the application — it is an evidence tool — and rests on our legitimate interest in traceable operation that is safe from misuse (Art. 6 (1)(f) GDPR).

The application sets no cookies. Your sign-in token and the interface language you chose are held in your browser's local storage. This is technically necessary for the sign-in you requested and therefore requires no consent under § 25 (2) no. 2 TDDDG; signing out removes it.

Demo accounts and the log entries belonging to them are deleted when the account is no longer needed, and at the latest when the demo is next reset. You may request deletion at any time at datenschutz@vonhof-hunold.de.

Please do not enter real data into the demo. It is there to be tried out, not to keep a productive rule documentation in.

If you run Permitra yourself

Permitra is open-source software for installation in your own network. If you run your own instance, you are the controller for the data processed there — we have no access to it and receive no data from your installation. The software calls no servers of ours and reports no usage.