Legitimate Interest Assessment (LIA) – kontra.tel Date: 2026-02-14

Legal Basis: Article 6(1)(f) GDPR – Legitimate Interest

1.  Purpose Processing is conducted for:

-   Service security
-   Abuse prevention
-   Infrastructure protection
-   General company-level interest analytics

3.  Necessity IP logging is necessary to detect attacks, prevent abuse,
    and maintain service reliability. There are no equally effective
    less-intrusive alternatives.

4.  Balancing Test Data processed includes IP addresses and technical
    metadata only. No personal identification or profiling of
    individuals is performed. Benign IP data is automatically deleted
    after 90 days.

4.  Safeguards

-   HTTPS encryption
-   Restricted log access
-   Automated retention enforcement
-   Periodic review of flagged IPs

Conclusion: Processing is proportionate, necessary, and does not
override data subject rights.