The purpose of us using this software is to understand our website traffic in the most privacy-friendly way possible so that we can continually improve our website and service. The lawful basis as per the GDPR is “f); where our legitimate interests are to improve our website and business continually.” As per the explanation, no personal data is stored over time.
The content delivery network (CDN) service that hosts our webpages, images and assets uses a bot detection and prevention system to protect our website against a large number of bots and website crawlers. The system keep track of Internet protocol (IP) addresses that access this website over the last 3 hours and automatically block any malicious attempts to view the website. We have no way to access this raw data and only have the ability to preview a sample of requests.
To gain better insight into our search engine usage, our logging software anonymously keeps track of search phrases for 3 days, after which they are archived into secure long-term storage. We only keep a log of the search phrase and timestamp, and do not store any information that may be used to identify our users in any way. The purpose of storing the timestamp is to understand search phrases over time, or aggregate this data to find popular search trends. We have no intention or ability to combine this data with other logging information in order to extract any identifiable information from this timestamp.