Privacy Policy

1. Introduction

At GermanyCloudServer, we take the protection of your personal data very seriously. This Privacy Policy outlines how we collect, process, and secure your information in compliance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). All client data is hosted exclusively on servers located within Germany to ensure maximum data sovereignty.

2. Data We Collect

We collect only the necessary data required to provide high-quality hosting services:

Contact Information: Name, email, phone number, and German/International billing address.
Account Credentials: Usernames and securely hashed passwords.
Technical Log Data: IP addresses (anonymized where possible), browser types, and server access logs (stored for a maximum of 30 days for security audits).
Payment Metadata: Transaction IDs and payment method details (processed via encrypted PCI-DSS compliant gateways).

3. Legal Basis for Processing

In accordance with Art. 6 GDPR, we process data based on:

Contractual Necessity (Art. 6(1)(b)): To set up and manage your hosting environment.
Legal Obligation (Art. 6(1)(c)): For tax and accounting purposes under German law.
Legitimate Interest (Art. 6(1)(f)): For network security, DDoS prevention, and service optimization.

4. Data Localization & Sharing

Data Sovereignty: All customer data is stored in Tier III Data Centers within Germany (e.g., Frankfurt or Munich).
No Third-Party Sale: We never sell or trade your data.
Sub-processors: We only share data with essential service providers (e.g., payment processors or domain registries) who have signed a Data Processing Agreement (DPA/AVV) with us.

5. Security Measures

GermanyCloudServer employs industry-leading technical and organizational measures (TOMs):

Encryption: SSL/TLS encryption for all data transfers.
Physical Security: Biometric access and 24/7 surveillance at our German data centers.
ISO Standards: Our infrastructure aligns with ISO 27001 security standards.

6. Your Rights (GDPR)

Under German and EU law, you have the following rights:

Right to Access: Know what data we store about you.
Right to Rectification: Correct any inaccurate information.
Right to Erasure: Request deletion of your data (unless legal retention periods apply).
Right to Data Portability: Receive your data in a machine-readable format.
Right to Lodge a Complaint: Contact the German Federal Commissioner for Data Protection (BfDI).

7. Data Retention

We retain personal data only as long as the account is active. Upon termination, billing records are kept for 10 years as required by German tax and commercial laws (GoBD), after which they are permanently deleted.

8. Data Protection Officer (DPO)

As per German law (BDSG), we have appointed a Data Protection Officer to oversee compliance. For any privacy-related queries, contact: [email protected].