---
type: concept
title: Nextcloud Data Protection
tags: [privacy, gdpr, data-retention]
related: [nextcloud, gdpr-compliance, zentraler-nutzeraccount]
created: 2026-07-01
updated: 2026-07-01
sources: ["output/rz_uni_greifswald_de_dienste_webdienste_nextcloud_datenschutz.md"]
---

# Nextcloud Data Protection

The data protection framework for the [[nextcloud]] service at Universität Greifswald ensures compliance with the [[gdpr-compliance]] and local university statutes.

## Legal Framework
The processing of data within Nextcloud is legally justified by:
- **Art. 6(1)(e) GDPR**: Processing is necessary for the performance of a task carried out in the public interest.
- **Local Statutes**: Specifically § 6(2) of the Data Protection Statutes and § 8(6) of the URZ Regulations.

## Data Lifecycle and Retention
The service distinguishes between technical metadata and user-generated content:

| Data Type | Retention Period | Trigger for Deletion |
|-----------|-------------------|------------------------|
| Technical Logs (IPs) | Max. 7 days | Automatic expiration |
| User Profile & Files | Duration of account | Removal from [[zentraler-nutzeraccount]] |

## Privacy Guarantees
- **No Third-Party Transfer**: User data is not shared with external third parties.
- **User Sovereignty**: Users maintain rights to access, correct, and delete their data, as well as the right to data portability.
