What kind of data does estos collect and why?
1. Data Controller
The data controller responsible for the processing of diagnostic and log data is:
estos GmbH
Petersbrunner Str. 13
82319 Starnberg, Deutschland
Phone: +49 (8151) 36856-177
E-mail:  info@estos.de
2. Purpose of Data Collection
We collect diagnostic and error data from our applications in order to:
- Identify and analyze application crashes that make the application unusable 
- Detect and investigate bugs or performance issues that may partially impair functionality 
The purpose of this data processing is to maintain and improve the stability, performance, and user experience of our applications.
3. Legal Basis for Processing
The processing of diagnostic and error data is based on:
- Article 6(1)(f) GDPR – Legitimate interest. 
 Our legitimate interest lies in ensuring the security, functionality, and continuous improvement of our software.
4. Tools and Recipients of the Data
We use the following tools and processors to collect and process diagnostic data:
| Tool | Purpose | Endpoint | Port | 
|---|---|---|---|
| Sentry | Crash reporting | https://errorreporting.unified-cloud.eu | 443 | 
| Loki | Log collection and bug analysis | https://writelogs.uccloud.de/loki/api/v1/push | 443 | 
The following software components are logging diagnostics data:
| Application | Sentry | Loki | 
|---|---|---|
| ProCall Web | ||
| ProCall for Microsoft Teams | ||
| ProCall Mobile for iOS | ||
| ProCall Mobile for Android | ||
| ProCall Desktop for Windows | ||
| UCServer | 
All tools are operated within the European Union. All data is transmitted securely and stored in compliance with applicable data protection regulations.
5. Data Categories Processed
The following metadata may be transmitted together with logs and crash reports:
- Version of the client and server 
- Environment information (browser, operating system) 
- Language setting 
- Server ID used by the client 
- OEM ID (in case of OEM-branded versions) 
- Anonymized user ID (no personally identifiable information is included) 
No directly identifiable personal data (such as name, email address, or IP address) is collected or processed.
6. Data Retention Period
- Sentry: Data is retained for a maximum of 30 days. 
- Loki: Data is retained for a maximum of 90 days. 
After these periods, the data is automatically deleted.
7. Data Transfers
No data is transferred to countries outside the European Union (EU) or the European Economic Area (EEA).
All processing takes place within the EU on secure servers.
8. Rights of Data Subjects
As a data subject, you have the following rights under the GDPR:
- Right of access (Art. 15 GDPR) 
- Right to rectification (Art. 16 GDPR) 
- Right to erasure (Art. 17 GDPR) 
- Right to restriction of processing (Art. 18 GDPR) 
- Right to data portability (Art. 20 GDPR) 
- Right to object to processing (Art. 21 GDPR) 
To exercise any of these rights, please contact us at:
info@estos.de
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or where the alleged infringement occurred.
9. Security
We take appropriate technical and organizational measures to ensure that your data is protected against unauthorized access, loss, or misuse. All transmitted data is encrypted and used solely for diagnostic and improvement purposes.