Are unaudited server logs admissible in a court of law? Are internal server logs produced by a firm that has no standards compliance certification and does not conduct any third party audits admissible as evidence? If not, what certification is generally sufficient?
Whether evidence is admissible in court or not doesn't depend on whether it conforms to any standard, compliance, or certification. Those factors may affect how strong the evidence is (i.e how convincing it is), but those factors don't determine whether the evidence may be used at all. Different jurisdictions have different rules, but in most places, as long as the evidence is relevant to the case in trial, then it is admissible. There are usually rules which may render evidence inadmissible, such as if it was obtained illegally, or if it would have such a prejudicial effect on proceedings that it would undermine the fairness of the trial. If you are wondering if evidence is relevent or not, an easy way to determine so is asking yourself: does this evidence help a party's case? Does this evidence undermine a party's case? If yes to either question, then it is relevant.
No contract can limit a court's jurisdiction An NDA is a contract: it cannot prevent the application of the judicial process. Should your dispute reach a courtroom, the NDA and the documents it seeks to protect are all admissible and you should subpoena them from the defendant and submit those copies to the court (that way you are not breaking the terms of the NDA). What is not admissible is bona fide "without prejudice" documents: that is documents that contain admissions and offers made in a genuine attempt to settle a dispute. This privilege is established by the context of the document, not by if it does or does not have the words "without prejudice" on it (except, of course, that their presence/absence is part of the context).
You do not have to. The burden of proof is on the prosecution to prove that you made the threat. Reasonable doubt exists in the circumstances that you describe, that there are no logs of who accessed what when and how. Your attorney may have to introduce expert witnesses who can explain how it is possible that text from your computer can end up on a web page, and they can testify that there are many ways that data can be entered into the database, only a few of which actually involve you.
It's not clear exactly what you're asking, when you say "the company I work for" – i.e. are you asking "can they fire me?" (almost certainly they can, even if their TOS thinking is legally misguided – unless in your country there are laws that prevent firing employees). To be certain, you need to hire an attorney who is sufficiently savvy about web page technology that they can accurately judge what you are doing, and whether you can fruitfully resist their demands. You seem to be skeptical of their position because you are "not affecting their servers in any way". The TOS is not about affecting their servers, it is about affecting their intellectual property. It appears that your code does a number of the prohibited actions such as and perhaps most importantly "modify". If you have distributed a program that allows users to modify company content on their own computers, then the user might be in violation of the TOS, but not you (since you're not running a server that redistributes). However, I am betting that in order to create and test the program you had to violate the TOS. Additionally, you could be vicariously liable for the infringements of others, especially if this program can only be used to infringe on copyright, and you know this fact. That is pretty much the end of the legal part. As for how you should respond, your attorney, and not Law SE, deals in recommendations.
The only real recourse you have is to contact the webhost and try to convince them your content is really yours and file a DMCA Takedown request. How you convince them might be an issue; do you have any old screenshots? Original photos? Any proof that the content and photos are yours? The webhost appears to be https://datacamp.co.uk/ , unless the DNS is being proxied, since DNS points to CloudDNS https://mxtoolbox.com/SuperTool.aspx?action=dns:marksmayo.com NZ and UK are members of the Berne Convention and the Universal Copyright Convention, so there don't appear to be any arguments about not applying copyright law. You willingly gave up the domain, so you have no recourse or valid reason to try and regain ownership of the domain. You could try and contact the new owner of the domain by filing a complaint via the abuse email listed by the domain registar at https://www.godaddy.com/whois/results.aspx?&amp;domain=marksmayo.com But they may not do anything, even if you can prove a copyright violation, since they only handle the domain registration and not the webhosting. How they got the content is another question: who was your webhost when you owned the site? Datacamp? Did they not delete it when you closed your account? How did the new owner come to get it?
Given a large database of email addresses that you can't prove have given consent to receive email, the only legal thing to do with it, is to (securely) delete it. (I am going to switch your question about a larger company to a bank: in the UK, big pharma is forbidden from advertising to individuals.) In principle the rules are the same for a huge bank and everything down to a self-employed plumber. In practice the plumber will be told "don't do that again" rather than fined. This case was treated under the Data Protection Act, which has a maximum fine of £500,000&nbsp;&ndash; so a big bank would probably have been fined more, but not necessarily much more. Under GDPR, fines are related to turnover, so the fine would be a lot bigger for a large bank. The incident is a year old now. Details here.
In the UK and USA (and I imagine other jurisdictions) there have been laws that explicitly provide for orders obliging entities to (A) provide access or information and (B) keep the order secret. For example, in the USA the Stored Communications Act, Fair Credit Reporting Act and Right to Financial Privacy Act authorise the FBI to issue National Security Letters (Wikipedia, EFF, EPIC, Lawfare). These are an administrative subpoena, without prior approval from a judge, for meta-information (e.g. phone numbers dialed or email recipients addressed but not the content) of communications relevant to national security investigations. They typically contain a non-disclosure requirement prohibiting the recipient of the NSL from disclosing its existence or the FBI's demands. There have been challenges on First Amendment grounds to the non-disclosure aspect but, so far as I'm aware, they have all ultimately failed. Some of their non-disclosure requirements may eventually expire under other laws. In response, so-called 'warrant canaries' (Wikipedia) have been developed (and gone a bit further than the original idea) - these are intended to allow entities to relatively passively warn of such an order having been received if not the detail of the order. However, they can be legally risky in that they might be seen by a court as trying to circumvent the non-disclosure requirement and therefore breaking it.
To do so I used some images and Gifs which may be under copyright but since I don't earn money for myself and there is no company backing me I was hoping that there is some protection for private persons like me who just want to showcase the project. Sorry. If your website is public facing (i.e. not password protected and available only to family and close friends), you need to follow copyright law. There is no exception to copyright just because a project is run by an individual for non-commercial purposes. I am also insecure about the GDPR regulations since I give users the ability to create an account and try it out. Your profile says you're in the EU. Then you need to comply with the GDPR. Is there any way to protect me against greedy lawyers and companies? Could I write something like: "This website is a peace of art" and save myself with arguments like "artistic freedom" or "free speech"? Nope. A controversial website run by Peter Sunde had at one point a "free speech" disclaimer (similar to the one you propose) posted. However, Sunde did never use this defense in court: Finnish court slaps Peter Sunde with €350k fine. If he had shown up in court, I am pretty sure the court would have told him that such a disclaimer has no legal merit. The only protection that will make you completely safe is to adhere to the law.