Overview
This Policy explains what personal data we process when you visit YOURDOMAIN.TLD, use our services (e.g., game servers, panel, web hosting), or contact us. It also explains your rights and how to exercise them.
- We process only what we need, for clear purposes, on valid legal bases.
- We don’t sell personal data.
- We secure data with encryption, access control, and audits.
- You can access, delete, port, or object to processing where applicable.
Data Controller
Key Definitions
- Personal data: any information relating to an identified or identifiable person.
- Processing: any operation performed on personal data (e.g., collection, storage, use, deletion).
- Controller: decides why and how personal data is processed.
- Processor: processes data on behalf of the controller.
What We Collect
- Name, username, email
- Billing address, VAT, invoice metadata
- Payment tokens/IDs (card data with provider only)
- Server IPs/ports, subusers, SFTP/SSH access logs
- Panel actions (create/stop server, configs)
- Uptime/health telemetry
- HTTP/server logs (IP, UA, timestamps, status)
- DDoS/Firewall events
- Fraud/abuse indicators
- Tickets, emails, chats
- Attachments (error logs, configs, screenshots)
Where Data Comes From
- Directly from you: account signup, orders, tickets.
- Automatically: logs, cookies/consent, uptime checks.
- Third parties: payment, email delivery, analytics (if enabled).
Purposes & Legal Bases (Art. 6 GDPR)
| Purpose | Examples | Legal Basis |
|---|
Where we rely on legitimate interests, we balance them against your rights and expectations.
Recipients / Processors
| Processor | Purpose | Region | Safeguards |
|---|
We sign Data Processing Agreements (DPAs). A detailed, current list is available on request.
International Transfers
If data is transferred outside the EEA/UK/CH, we use appropriate safeguards (e.g., EU Standard Contractual Clauses, UK IDTA/Addendum). Copies are available upon request.
Retention
| Category | Typical Retention |
|---|
We keep data only as long as needed or required by law.
Marketing Communications
We send newsletters or offers only with your explicit consent. You can unsubscribe anytime using the link in the email or by contacting us.
Automated Decisions / Profiling
We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. We also do not conduct profiling for marketing without consent.
Security Measures
- Encryption in transit (HTTPS/TLS) and at rest where applicable
- Role-based access, least privilege, MFA for staff
- Backups, monitoring, DDoS protection
- Vendor DPAs and periodic security reviews
Your GDPR Rights (Arts. 12–23)
- Request a copy of your data
- Receive it in a portable format
- Fix inaccurate data
- Request deletion (“right to be forgotten”)
- Limit processing in certain cases
- Object to processing based on legitimate interests
- Withdraw consent at any time
- Complain to your supervisory authority
How to Exercise Rights
Email us at privacy@YOURDOMAIN.TLD or use our contact form.
We may need to verify your identity. We aim to respond within 30 days (extendable by 60 days for complex requests).
Complaints
You have the right to lodge a complaint with your local supervisory authority (EEA/UK/CH), in your place of residence or work.
Changes & Contact
We may update this Policy to reflect legal, technical or business changes. We will publish the new version with an updated date.