This privacy policy explains which personal data the FIFTY2 Customer Portal (portal.fifty2.eu) processes, why, and which rights you have. It applies to this portal only. For our website www.fifty2.eu, see the privacy policy of www.fifty2.eu.

1. Controller and data protection officer

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
FIFTY2 Technology GmbH
Tullastrasse 80
79108 Freiburg
Germany
Phone: +49 761 4589238
Email: info@fifty2.eu

Our data protection officer is:
Gero Wilke
datalegis GmbH
Bismarckallee 10
79098 Freiburg
Germany
Phone: +49 761 45892723
Email: privacy@fifty2.eu

2. Server log files

Whenever a page or file of the portal is requested, whether by your browser, by a command line tool such as curl or pip, or by PreonLab itself (which downloads the latest changelog), our web server records: the IP address, the date and time, the requested address, the HTTP status, the amount of data sent, the referring page (referrer), the browser or program and its version (user agent), and, for downloads with a username and password (HTTP Basic authentication), the username.

We need this data to deliver the portal, to detect and fend off attacks and misuse, and to fix errors. The legal basis is our legitimate interest in a secure and working service (Art. 6(1)(f) GDPR). The log files are deleted after fourteen days.

3. Your user account

The portal is only available to our customers. Accounts are created by our staff, there is no self-registration. For each account, we store:

• the username, which can be your email address,
• your first and last name,
• your password, only as a salted hash, never in plain text,
• which content you may access (groups and permissions),
• when the account was created and when you last logged in.

We usually receive this data from the company you work for, as our customer, when it asks us to give you access. If you are our customer yourself, we receive it from you. Your name and a username are necessary to create an account. Without them, we cannot give you access to the portal.

We use this data to give you access to the tutorials and PreonLab downloads that are part of your license. If you are our customer yourself, the legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR). If the company you work for is our customer, the legal basis is our legitimate interest in providing the agreed services to our customer (Art. 6(1)(f) GDPR). Which pages you view and which files you download is not stored in your account. It only appears in the server log files (section 2), where downloads with a username and password can be attributed to your account for fourteen days.

We keep the account as long as you need access to the portal. If you no longer need it, or when the business relationship ends, we delete it. You can ask us to delete it at any time. Copies in our backups are not used for any other purpose than restoring the portal after a failure, and are deleted after one year at the latest. If we ever have to restore a backup, data that was deleted in the meantime is deleted again.

4. Emails

If you have an email address as your username, the portal sends you an email with a link to set your password when your account is created, and when you request a password reset. The emails are sent via Microsoft 365 (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland), which processes them on our behalf. The legal basis is the same as for your account (section 3). Microsoft processes the data within the EU (EU Data Boundary). If, in exceptional cases, data is transferred to countries outside the EU, for example for support, this is based on the EU–U.S. Data Privacy Framework and the EU Standard Contractual Clauses.

5. Cookies

The portal only uses cookies that are strictly necessary for its operation:

• sessionid: keeps you logged in. It is deleted when you log out, and expires after two weeks at the latest.
• csrftoken: protects the forms of the portal (e.g. the login form) against cross-site request forgery. It expires after one year.

As these cookies are strictly necessary for the service you requested, no consent is needed for them (§ 25(2) no. 2 TDDDG). The processing is based on our legitimate interest in a secure portal (Art. 6(1)(f) GDPR). The portal does not use any analytics, tracking or advertising cookies, and no cookies of third parties. You can delete cookies in your browser at any time. Without them, you cannot log in.

6. Links to social networks

The links to LinkedIn, Facebook and YouTube at the bottom of each page are ordinary links. No data is sent to these networks unless you click them.

7. Recipients

The portal runs on our own servers, no hosting provider is involved. Apart from the email service (section 4), we do not pass on your data, unless we are legally obliged to.

8. Your rights

You have the right

• to obtain information about the personal data we process about you (Art. 15 GDPR),
• to have incorrect data corrected (Art. 16 GDPR),
• to have your data erased (Art. 17 GDPR),
• to restrict the processing of your data (Art. 18 GDPR),
• to receive your data in a structured, machine-readable format (Art. 20 GDPR).

Right to object: You have the right to object to processing based on our legitimate interests, on grounds relating to your particular situation (Art. 21 GDPR).

To exercise these rights, contact our data protection officer (section 1) or write to privacy@fifty2.eu.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the one responsible for us: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg.

9. No automated decision-making

We do not use automated decision-making or profiling.

Last updated: October 2026