Controller
Picologic GmbH
Weyertal 5
50937 Köln
Germany
Phone: 0221 66942877
Fax: 0221 66942870
Email: info@picologic.de
Privacy
Privacy Policy
Access data and server logs
When this website is accessed, technical access data is processed so the website can be delivered securely and reliably.
- IP-Adresse
- date and time of access
- requested URL and HTTP method
- status code and transferred data volume
- referrer, if transmitted by the browser
- browser and operating system information from the user agent
The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is secure operation, troubleshooting and abuse prevention. Log data is normally deleted or anonymised after a short technical retention period, unless longer storage is required to investigate security incidents.
Required cookies and sessions
The website may use technically required cookies or session identifiers, for example for CSRF protection, language handling, form security or authenticated internal views. These are not used for advertising tracking.
The legal basis is Art. 6(1)(f) GDPR and, where required, the rules for strictly necessary access to terminal equipment.
Forms, comments and uploads
If forms, comments, private messages or file uploads are used, the submitted content and technical metadata required for processing are stored and processed. This can include names, contact details, message text, uploaded files, timestamps and moderation status.
The legal basis is Art. 6(1)(b) GDPR where processing is necessary for requested communication or services, Art. 6(1)(f) GDPR for moderation, security and abuse prevention, and Art. 6(1)(a) GDPR where consent is requested.
Technical tools and counters
Interactive tools, calculators or system interfaces may process the entered values in the browser and on the server where needed. Aggregate counters may store only a number of uses and the last execution time. They are not intended to store IP addresses or user identifiers in the counter file.
Independent of this, regular server logs can still contain IP addresses as described above.
EU AI Act compliant AI infrastructure
Our AI systems are developed, operated and assessed in accordance with the requirements of Regulation (EU) 2024/1689, the EU Artificial Intelligence Act.
Where permitted for the relevant AI system under the EU AI Act, we perform conformity assessment through the internal control procedure under Annex VI of the EU AI Act.
The assessment includes in particular:
- classification of the AI system and its intended purpose
- risk management and documented risk assessment
- technical documentation
- data and information flows
- logging and traceability
- human oversight
- accuracy, robustness and cybersecurity
- transparency towards users
- quality management
- monitoring during operation and throughout the full lifecycle
- documentation of substantial changes to the system
Our long-standing experience in software development, IT and AI infrastructure and the setup and operation of productive systems forms the professional basis for these internal audit and assessment processes.
For us, conformity is not a one-time check, but part of the system architecture and the full lifecycle of an AI system.
Where required by the applicable risk classification or other EU legislation, external conformity assessment or involvement of a notified body is incorporated into the compliance process.
Recipients and hosting
Data may be processed by technical service providers used for hosting, server operation, email delivery, backups, maintenance and security. These providers process data only as far as technically or contractually necessary.
Your rights
You have the right to request access, rectification, erasure, restriction of processing and data portability where the legal requirements are met. You may object to processing based on legitimate interests and withdraw consent with effect for the future.
You also have the right to lodge a complaint with a data protection supervisory authority.
No advertising tracking
This website is not intended to use advertising trackers, profiling cookies or third-party advertising networks.