[claudiulodro]

It's my understanding that an IP address is not personal info and that nobody can, say, make a GDPR request for information associated with an IP address. An IP address is not personally identifiable information.

[dangrossman]

Under GDPR's definition and recitals, IP addresses are most definitely personal data.

[Angostura]

Only if linkable to other personal information. If your logs are collecting IP data that cannot be linked by you to a person you're fine.

[claudiulodro]

It seems that you're correct and it does indeed include IP addresses. Good catch.

[jdsnape]

It’s a little more subtle than that AIUI - they’re only personal if you have a way of linking them to a user. E.g. if someone logs in with an email and you record that with the IP, or if you’re an ISP. I don’t think the IP is personal if you are just hosting a static site say.