With regards to GDPR, we received the following questions regarding the use of IIS with DataMiner:
Does this web server log incoming requests and errors in a regular log file or similar?
How long are these records kept, and can this be configured?
By default, IIS on Windows Server versions log site activity into log files. This can be configured in IIS Manager, by clicking on "Logging":
These log files are by default kept forever, but it's possible to set-up a scheduled task to delete older files.
It's a common practice that web servers log activity, Apache on Linux systems will do just the same. If there would be any abusive use, which could lead to the server to go down, at least you'll still have some logging that will give some ideas of what has happened.