Privacy Policy

Privacy Policy

Privacy policy of Server Galactic Private limited. (“SERVERGALACTIC”).

For (” SERVERGALACTIC”), protecting your personal data is a priority. We comply with all relevant data protection legislation and the following privacy notice is intended to provide transparency about how we handle your personal data.

Personal data and the provision of services

When you order one of our products, we only ask for information that is essential to deliver our products and services to you or for invoicing reasons. In most cases this is limited to name, address, contact data and bank details.

Contract and invoicing data

Prior to sign up
On the SERVERGALACTIC web pages we offer prospective and actual customers practical tools and services, for example, to check how easy it is to locate your website or company on the Internet. The tool needs only some basic address data. For the best results and continuous improvement of our services, your entries are recorded anonymously.

Sign up
Upon ordering our products, we ask for data we need to provision the services. Your data is stored securely on our systems and you are able to access and change your data in our control panel. Information on how you access the control panel will usually be sent by email or alternatively by post.

Billing
In order to provide you with transparent billing, it is necessary to temporarily store certain usage data. Examples include your configurations of our Cloud-Server or performance of our Webhosting products, if those are the basis for billing. Whether your product usage data is recorded, will be in the respective product chapter in this privacy notice.

Usage and content data

Usage data
We aim to provide quality and reliability but on occasion, issues may arise. In order to react quickly, it may be necessary to temporarily record usage and traffic data to provide to our Support staff. We do this to ensure we fulfil our obligations to you and to design products and services aligned to your needs

Content data
We offer certain products, for example, online storage or email accounts, where personal files may be stored. These files are automatically encrypted and may only be viewed by individuals with access rights. In order to protect your data and for maintenance purposes, we create and file encrypted backups. The file contents of these backups cannot be decrypted or viewed by us.

Usage of your data

The usage of your personal data
Some of your personal data we need for processing your order and for providing customer focused services.

Data processing upon receiving your order
Our commitment to you is to provide value for money top products and services to our customers. In order to ensure smooth and trouble-free order processes, your order is thoroughly vetted and invest in fraud prevention before confirming your contract.

Contract and customer information
You will receive the order confirmation and information by email. We use the email address you have provided to order the product. You will also receive your invoices and helpful information in the same manner.

Product information
In order to fully capture the benefits of our products, we send you tips, tricks and useful complementing product solutions by email and control panel. We may also inform you about interesting new products via telephone, provided that you have consented to receive such information. . If
you wish to stop receiving information of this kind, you can always revoke your consent in the control panel.

Usage data as part of our services and products
Certain data is recorded during the use of our products and services to enable us to identify issues with our products and to continuously improve our products and services. We implement a range of technological and organizational measures to protect your privacy and ensure the safety of your personal data.

Personal data managed by you
Our customers use our services to host, transmit or process data on our hosting platforms, which may include personal data of their own customers.
In this scenario, it is our customers who stipulate the process for collecting their customer’s data. Most importantly, we do not have knowledge of or view, share or collect this specific customer data.

In accordance with our Privacy Notice, it is our customers who are responsible for managing the security of their customers’ data which they upload onto our platforms. Customers are responsible for encrypting data that is uploaded to our network and ensuring access to our platforms are secure.

Our relationship is with our customers directly and there is no agreement in place between us and our customers’ customers.

Additionally:
We merely process such data on your behalf, subject to our Terms and Conditions and you are responsible for any applicable legal requirements in respect of your content. Therefore, any video, image, or other content posted, uploaded or otherwise made available by you onto your website, whether published content or not, is not subject to our Privacy Notice.

Opinion polls
In order to offer you the best possible products and services, we do need your support. Therefore, we send out surveys to our customers from time to time via email or provide them on our websites. Participation in these surveys is optional and you may revoke your consent to receiving opinion polls from us after the first email.

Improving our products and services
We have a legitimate interest to analyze the data we collect to improve our products and services. We use a variety of methods and tools to do this. As described in this policy, we collect data that relates to you; your usage of our products and services; and your interactions with us, for example when we send you correspondence, you contact our Customer Care department, or complete a survey. We also collect public data and data from third-parties to better understand our customers‘ needs. We protect your privacy through a range of technical and organizational measures tailored to each situation and respect your choices about how we use your data.

Transferring data to third parties


External partner companies
As we work with selected partners to offer you a wide range of products and sometimes act as an intermediary for our partners, it is necessary to transfer certain personal data to third parties, for example, registering domain names or issuing SSL certificates.

Law enforcement
Occasionally, we are obliged to disclose personal data to prosecution authorities and courts for law enforcement purposes. We always ask for the correct paperwork before disclosing any information.

Reporting of faulty products and fraud
In case of faulty products or disagreements and we are committed to seek amicable solutions. Is this not possible, we evaluate the situation carefully, when and to whom we report faulty products or fraudulent usage.

Cookies

Service specific data protection information

Website Live-chat

Purpose of processing
Quality Assurance

Categories of personal data
Content data, usage data, traffic data

Legal basis
Legitimate Interests, Art 6(1) lit. f GDPR

Retention period
Up to 90 days



Domain Check

Purpose of processing
Domain name requests are stored and processed to improve the domain name suggestion and products. This requests will never be used by SERVERGALACTIC to register domains on own behalf.

Categories of personal data
Processed domain name data are not linked to any customer or contract.

Product specific data protection information

List of our current subprocessors

With some of our products we rely on the expertise of specialised partner companies to ensure that we provide the best possible products and services experience. In the event you cease to use our products and services, we will delete your personal data within a given timeframe.

Address Book

Purpose of processing
Provide central contact management functionality for creating, managing, and synchronizing contact information

Categories of personal data
Contact data, content data, traffic data

Legal basis
Performance of a contract, Art. 6(1) lit b GDPR

Retention period
30 days after termination of contract

Webhosting

Content Delivery Network CDN

Purpose of processing
Distribute website assets through multiple data centres to increase website performance.

Categories of personal data
Content data, traffic data

Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR

Subprocessors
Cloudflare, San Francisco, USA
https://www.cloudflare.com/privacypolicy/


SiteLock

Purpose of processing
Protect and clean your website from malware.

Categories of personal data
Content data, traffic data

Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR

Retention period
SiteLock stores the webspace of customer for 30 days (the grace period). Deletion of personal data is within 90 days after cleanup.

Subprocessors
SiteLock, Scottsdale, USA

MyWebsite

Current product generation



MyWebsite Now

Purpose of processing
The processing and publication of the website, and hosting of the website.

Categories of personal data
Content data, traffic data

Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR

Subprocessors
Infotechna Ltd., Budapest, Hungary


Content Delivery Network (CDN)

Purpose of processing
Hosting of website; distribute website assets through multiple data centres to maximize website performance.

Categories of personal data
Content data, traffic data

Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR

Subprocessors
AWS – Amazon Web Services ‘Cloud Front’, Datacentre Frankfurt, Germany
Amazon Web Services, Inc., Seattle WA, United States


Online Business Card

Purpose of processing
Fast publishing of an online business card. You have the choice of which information will be displayed on this business card. User data will be sent to Google and Facebook in order to display publicly available information.

Categories of personal data
Contact data, content data, traffic data

Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR

Subprocessors
Google LLC, Mountain View CA, USA
Facebook, Menlo Park CA, USA



Website Translator

Purpose of processing
If you set up multilanguage texts: MyWebsite sends the text content of the website to Google Translate in order to translate the content to one or several other languages.

Categories of personal data
Content data, traffic data

Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR

Subprocessors
Google LLC, Mountain View CA, USA


Webfonts

Purpose of processing
Load google webfonts to accelerate loading the website and to enable consistent presentation of the website on various platforms and applications.

Categories of personal data
Usage data, traffic data

Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR

Subprocessors
Google LLC, Mountain View CA, USA


Multi Location

Purpose of processing
MyWebsite uses address data to mark one or several locations of a company on a map. Data is sent to the map company Mapbox. This takes place automatically when adding this widget and with additional locations.

Categories of personal data
Address data, content data

Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR

Subprocessors
Mapbox, Washington D.C., USA

MyWebsite (Vers. 8)

Google Maps

Purpose of processing
MyWebsite 8 transfers address data of the customer to Google in order to prefill address data in the Google maps module or if selected sends another stored address to Google.

Categories of personal data
Address data, traffic data

Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR

Subprocessors
Google LLC, Mountain View, USA


My Data

Purpose of processing
On the publishing of the MyWebsite homepage customer and other user defined data will be added to the website in schema.org format, in order to support search engines and improve SEO results.

Categories of personal data
Contact data, content data

Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR






Domain & SSL Certificate

Domain

Purpose of processing
Registering, transfer, configuration, maintenance and deletion of the domain name

Categories of personal data
Subscriber data

Legal basis
Performance of a contract or at your request prior to entering into a contract, Art. 6 (1) lit. b GDPR

Retention period
Differs for the various top level domains (TLDs) depending on the Registrar Accreditation Agreement (RAA) of the registry.

Subprocessors
A dedicated overview for regitries and escrow provider is available here.


SSL certificate

Purpose of processing
Registering, transfer, configuration, maintenance and deletion of SSL certificates. Automatic processing in MyWebsite products when connecting the domain with the website project.

Categories of personal data
Subscriber data

Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR

Subprocessors
DigiCert, Lehi UT, USA

Note
In the process of acquisition and maintenance of SSL certificates, SERVERGALACTIC is only an intermediary between the customer and the respective issuer of the SSL certificate. SERVERGALACTIC has no influence on the issuance of certificates and does not accept any liability that the certificate is assigned to the customer and that it will permanently exist.



Microsoft Office 365

Purpose of processing
Usage of Microsoft Office 365, including setting up, configuring and deletion of accounts and users

Categories of personal data
Subscriber data, content data, traffic data

Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR

Retention period
User data will be stored up to one year after termination of the license.

Subprocessors
Microsoft, Redmond WA, USA
T-Systems International, Frankfurt am Main, Germany








SERVERGALACTIC WebAnalytics

Purpose of processing
Statistical analysis and technical optimization of your website.

Categories of personal data
Anonymized usage and traffic data

Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR


Server

The following information applies to Managed Cloud, Virtual Private Servers (VPS), Cloud Servers, Dedicated Servers, Dynamic Cloud Servers and Virtual Server products:

With the listed products, you as our custonmer solely control which personal data is beeing processed in which way.

Categories of personal data
In your sole discretion

Retention period
In your sole discretion

Legal basis
In your sole discretion

Subprocessors
In your sole discretion



Additionally, the following instructions apply to the use of certain (partial) functions for these products:
Virtual Private Servers (VPS), Cloud Servers, Dedicated Servers, Dynamic Cloud Servers, Virtual Server and Cloud Backup.



Cloud Backup

Purpose of processing
Provisioning and the use of Cloud Backup.
Customer service and operation of the platform.

Categories of personal data
Subscriber data, content data, usage data

Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR

Retention period
Time that the data was stored according to the settings you assigned.
Latest by the end of the contract lifetime.

Subprocessors
Infotechna Ltd, Budapest.





Transparency is our aim

All data we receive from you during the lifetime of your contract is used primarily to provide the level of service you would expect. We carry out statistical analyses to improve products and services. These analyses are conducted in compliance with data protection legislation and our internal privacy policies and processes.

Your rights
In respect of Art. 15 GDPR you have the right to obtain information as to whether or not your personal data are being processed. You also have the right to have your personal data rectified if it is inaccurate in accordance with Art. 16 GDPR, a right to be forgotten (Art. 17 GDPR), a right to obtain restriction of processing under given circumstances (Art. 18 GDPR) and the right to data portability stated in Art. 20 GDPR. You have the right to
object to the processing of your personal data, as to where the processing is based on Art. 6(1) lit f GDPR.

If you wish to exercise one of these rights, please contact our data protection officer and we get this done for you.

Please email:

[email protected]

Supervisory authorities

You have the right to file a complaint with any supervisory authority.