Hosted in Germany

Hosted in Germany refers to data. More specifically, it refers to websites, software and information whose data is stored on German servers. In other words, ‘hosted in Germany’ means ‘stored in Germany’.

 

What does ‘hosted in Germany’ mean in detail?

Data stored in Germany is subject to German law – the comparatively strict German data protection law, the BGB and HBG. The data in question is stored on German servers, i.e. in a data centre in Germany. This data does not leave Germany unless you, as the client, request this. Third parties do not have access to your data. This also includes foreign authorities, as long as no criminal offence has been committed. In the event of a criminal offence, foreign authorities must request administrative assistance from Germany and may be granted access to the necessary data in accordance with German law. The situation is different for data hosted in the USA, for example, where authorities are permitted access.

Under the GDPR, there are also some very strict rules governing the protection of personal data and its storage in a third country. In this respect, it is easier for German companies to store such data in Germany. Even as physical objects, German data centres are subject to German regulations. These include, for example, the comparatively strict fire protection measures that also apply to residential buildings.

 

Where do I encounter this issue in my everyday work?

You may not encounter this issue at all in your everyday work. For example, if your company network, servers and company website are already set up. But perhaps your company network servers are located on your premises – this is also hosted in Germany. Company websites are often hosted externally by a specialised provider, which is also a good option for backups. Cloud solutions can be hosted on site or by an external provider.

 

What can I do to improve my security?

You can further improve the security of your data hosted in Germany by paying attention to the following:

  • Multiple backups by the provider. This is often referred to as RAID, short for Redundant Array of Independent Disks.
  • Daily or even multiple daily backups by the provider, including backups of databases.
  • Round-the-clock support, e.g. by telephone. This allows you to resolve problems as quickly as possible if necessary.
  • Maximum availability, e.g. 99.99%. As these percentages refer to a year, a 1% reduction in availability corresponds to an outage of 3.5 days.
  • So-called intrusion prevention systems. These are systems designed to prevent cybercriminals from gaining access.
  • TÜV certification in accordance with ISO 27001, which confirms particularly high security standards.