Legal
Privacy policy
1. Controller
The controller responsible for the processing of personal data on this website is:
Artur Damer
Karl-Laux-Str. 16
01219 Dresden
Germany
2. Website delivery and server logs
When this website is accessed, the web server processes technically required connection data. This may include the IP address, date and time of access, requested URL, HTTP status code, referrer and information about the browser or user agent.
The data is processed to provide the website securely and reliably, analyse technical errors and detect or defend against abusive or harmful access.
The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure, stable and reliable operation of this website.
NGINX log files are rotated daily. Fourteen rotations are retained; older rotated logs are then removed automatically.
3. Contact by email
If you contact me by email, the information you provide, such as your email address, message content and related communication data, is processed in order to respond to your request.
Where communication concerns the preparation or performance of a contract, processing is based on Article 6(1)(b) GDPR. In other cases it is based on Article 6(1)(f) GDPR and the legitimate interest in responding to enquiries.
Data is retained only for as long as necessary to process the request and, where applicable, to comply with statutory retention obligations.
4. Cookies and browser storage
The current version of this website does not use analytics, marketing or tracking cookies.
No persistent language cookie is used. Language selection is handled through /de, /en and /ru URLs and, for the root URL, may use the language preference supplied by the browser.
According to the current technical configuration, localStorage and sessionStorage are not used for analytics or marketing purposes.
5. Cybersecurity news and external sources
The Cybersecurity News section uses publicly available security information from CISA, Microsoft Security Response Center and BSI/CERT-Bund.
This information is retrieved and processed server-side by AsseOS. Normal use of the AsseOS website therefore does not establish a direct browser connection from the visitor to these news sources.
6. Recipients and technical service providers
Hosting or server service providers may have technically necessary access to connection data as part of operating the website.
When contact is made by email, data is also processed by the technical service providers used for email communication.
Personal data is not sold.
7. Your rights
Subject to the requirements of the GDPR, you have rights including access, rectification, erasure, restriction of processing, data portability and objection to processing.
You also have the right to lodge a complaint with a data protection supervisory authority.
8. Data protection supervisory authority
Sächsische Datenschutz- und Transparenzbeauftragte
Maternistraße 17
01067 Dresden
Germany
Email: post@sdtb.sachsen.de
9. Encrypted transmission
The website is provided over HTTPS, which encrypts transport between the browser and the web server.
10. CyberNews Daily and YouTube Data API
CyberNews Daily is a locally operated Windows application for producing cybersecurity and artificial intelligence news videos.
After voluntary Google OAuth 2.0 authorization, the application can use the YouTube Data API to retrieve the identifier and name of the selected YouTube channel. Planned functions also include uploading videos with titles and descriptions and scheduling their publication. Automatic publication is not yet enabled.
The requested YouTube authorization technically permits broader account management operations. CyberNews Daily is intended to use this authorization only for the described functions.
OAuth credentials and authorization tokens are stored locally on the Windows computer and are not transmitted through the asseos.com website. Video files and necessary metadata are transmitted to Google or YouTube when YouTube functions are used.
Authorization can be revoked at any time at https://myaccount.google.com/connections. Locally stored tokens can also be deleted. Revoking authorization does not automatically remove videos already uploaded.
Processing by Google is also subject to the Google Privacy Policy. The application does not use Google credentials for advertising.
11. Last updated
Last updated: 2 November 2026.