§ 51 ThürDSG
Logging
(1)(Article 25 of Directive (EU) 2016/680)
(2)In automated processing systems, the controller and the processor shall log at least the following processing operations: 1. collection, 2. alteration, 3. consultation, 4. disclosure including transmission, 5. combination, and 6. erasure.
(3)The logs of consultations and disclosures must make it possible to establish the justification, the date and time of those operations and, as far as possible, the identity of the person who consulted or disclosed the personal data and the identity of the recipients of the data.
(4)The logs may be used exclusively for the verification of the lawfulness of the data processing by the data protection officer, the State Commissioner for Data Protection and the data subject, as well as for self-monitoring, for ensuring the integrity and security of the personal data and for criminal proceedings.
(5)The log data shall be erased at the end of the year following the year in which they were generated.
(6)The controller and the processor shall make the logs available to the State Commissioner for Data Protection upon request. zur Einzelansicht § 51