Privacy Policy

Definitions

Personal Data: Any information relating to an identified or identifiable natural person (“data subject”); a natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Data Processing: Any operation or set of operations performed on personal data or on sets of personal data, whether by automated or non-automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction. “Restriction of data processing” refers to the marking of stored personal data with the aim of limiting their future processing.

Data Controller: The natural or legal person, public authority, agency, or any other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the data controller or the specific criteria for its nomination may be provided for by Union or Member State law.

Data Processing Operations: The execution of technical tasks related to data processing operations, regardless of the methods and tools used to perform these operations, and the location of their application, provided that the technical task is carried out on the data.

Data Processor: The natural or legal person, public authority, agency, or any other body that processes personal data on behalf of the data controller.

Data Transfer: Making data available to a specified third party.

Third Party: Any natural or legal person, public authority, agency, or any other body other than the data subject, data controller, data processor, or persons who, under the direct authority of the data controller or data processor, are authorised to process personal data.

Data Subject’s Consent: The data subject’s voluntary, specific, informed, and unambiguous indication of their wishes, by a statement or by a clear affirmative action, by which the data subject signifies agreement to the processing of their personal data.

Disclosure: Making data available to anyone.

Data Rectification: The modification of the data subject’s personal data by the Service Provider upon the data subject’s written request.

Data Restriction: The marking of data with an identifier to limit its processing either permanently or for a specified period.

Objection: The data subject’s declaration in which they object to the processing of their personal data and request the cessation of processing or the deletion of the processed data.

Data Erasure: The act of rendering data unrecognisable in such a way that it can no longer be restored.

Data Destruction: The complete physical destruction of the data-carrying medium.

Service Provider Information

Name:

Rackhost, Inc. (hereinafter referred to as the Service Provider)

Registered office:

169 Madison Ave #2600 New York, NY 10016

Email:

[email protected]

Website:

www.rackhost.uk

Scope of the Policy

This privacy policy applies to all individuals and entities, including organisations without legal personality, who engage with the Service Provider as users, registered users, or service recipients.

Data Management

1. Scope of the data processed

   1. Personal data related to the user for the purpose of the technical operation of the website:

      • IP address of the computer
      • Domain name (URL)
      • Access data
      • Client file request (file name and URL)
      • HTTP response code
      • Website from which the request was made
      • Amount of bytes transmitted during the visit
      • Date and time of the visit
      • Duration of the visit
      • Information about the pages viewed
      • Name of the browser used
      • Cookies

   2. Data processed during newsletter subscription (The newsletters contain promotions and updates related to the Service Provider's own products; the User can unsubscribe at any time via email or through the admin interface.):

      • Personal data related to the user
      • Full name
      • Email address

   3. Data processed for users of the ticketing function:

      • Email address
      • Name displayed during communication
      • Date and time of function use
      • Messages exchanged via the ticketing system

   4. Personal data processed for registered users:

      • Personal information related to the User
      • Natural person
        • Birth name
        • Address
        • Email address
        • Phone number
        • Date and time of registration and account usage
      • Non-natural person:
        • Company name
        • Address
        • Tax number
        • Email address
        • Phone number
        • Date and time of registration and account usage

   5. Data processed for users of domain services:

      • Personal data processed for registered users
      • Natural person
        • Birth name
        • Address
        • ID card number
        • Email address
        • Phone number
      • Non-natural person
        • Company name
        • Address
        • Tax number
        • Email address
        • Phone number

2. Data processed regarding subscribed services:

   • Files uploaded by the subscriber on the hosting service
   • Storage of incoming emails and email services used by the subscriber
   • Backups of the subscriber's files and data
   • Log files generated from the subscriber's activities
   • Documents uploaded for domain service orders

3. Duration of data storage

   The processing of data related to the use of services by the Service Provider begins from the date of submission of the service request and continues until the service is maintained. The Service Provider only processes personal data necessary for the delegation and maintenance of services. The Service Provider does not process sensitive data. The Service Provider keeps the following types of log files for the specified periods:

   • Incoming emails log: 4 weeks
   • Outgoing email log: 4 weeks
   • Web server usage traffic log: 1 year
   • FTP upload/download traffic log: 4 weeks

4. Legal basis for personal data processing

   The provision of data is voluntary. By ordering or using the service, or by entering into a contract, the User consents to the processing of their data as specified in this policy.

5. Rights related to data processing

   The User may request information regarding the processing of their data in writing, using the contact details provided in Section 2. The User may request the correction of their personal data, except in cases of mandatory data processing. Additionally, the User may request the restriction or deletion of their data and may object to the processing of their data.

Scope of Persons Who May Access Data, Data Transfer, Data Processing

The data may primarily be accessed by Rackhost, Inc. and its internal staff. The data will not be made public and will not be disclosed to third parties unless justified.

However, in justified cases, Rackhost, Inc. may engage data processors (e.g., system operators, accountants) for the operation of the IT system providing the service, order fulfilment, or settlement of accounts. Rackhost, Inc. is not responsible for the data processing practices of such external parties.

Furthermore, the transfer of data related to the User may only occur in cases explicitly mandated by law (e.g., upon request from an authorised authority) or with the User's consent.

The Service Provider is obliged to provide personal data to the organisation responsible for the registration in the case of .hu domain registration and international domain registration.

In the case of registering .hu domains, once the order has been placed and the payment has been made, the Service Provider is obliged to forward the domain application to the central domain registrar (Hureg), where the accuracy of the provided data and the legal compliance of the requested domain will be verified. Additionally, all Registrars are required to provide mandatory data to the Council of Internet Service Providers, the official .hu domain registry (hereinafter referred to as the Registrar). The Registrar makes the data for identifying the domain user publicly accessible in the "WHOIS" database solely for the purpose of resolving technical issues related to domains registered under the .hu ccTLD, as well as enabling the identification of the individual responsible for the use of the registered domain names and their use in relation to legitimate interests. The Registrar's data processing policy can be accessed at https://www.domain.hu/adatkezeles/.

For .com and other international domain names, the disclosure of domain names and ownership information is governed by the international regulations set forth by https://www.icann.org.

Data Security

Rackhost, Inc. takes all necessary steps to ensure the security of Users' personal data. In this regard, the Service Provider continuously keeps its staff updated. Access to personal data is strictly limited to prevent unauthorised access, unlawful alteration of personal data, and unauthorised use.

The servers supporting data processing are owned by Rackhost, Inc., which ensures confidentiality during data processing: it protects the information so that only authorised individuals can access it; ensures integrity by safeguarding the completeness and accuracy of the information and the processing process; and guarantees availability by ensuring that authorised users can access the necessary information and that the required tools are available when needed.

In the event of a potential data breach or system abuse, Rackhost, Inc. will take all necessary steps, including:

• Preventing the leak
• Gathering all available information regarding the incident
• Informing the relevant authorities
• Notifying affected Users

However, the User must acknowledge that, despite the security measures described above, Rackhost, Inc. cannot be held liable for unforeseen circumstances, environmental disasters, unauthorised system intrusions, disruptions caused by third parties, intentional damage, etc., that result in personal data being accessed by a third party. In such cases, the User cannot make a claim for compensation.

Right to Amend the Privacy Policy

The Service Provider reserves the right to unilaterally amend this Privacy Policy, with prior notice to Users. By visiting the website even once or using the service after the amendments take effect, the User accepts the modified Privacy Policy, including any changes and updates contained therein.

Cookie Policy

The website stores small text files, known as cookies, on any computing device when visited. These cookies allow, for example, the username to be remembered for a certain period. Several similar convenience features depend on the Visitor enabling the use of cookies.

The Service Provider uses cookies on the website; however, it is not possible to identify an individual Visitor based on the information stored in the cookies. The data collected is not disclosed to any third party. The information gathered through cookies includes whether the Visitor has visited the website before and which pages they viewed. Based on this, it can be determined which services the Visitor is interested in. The Visitor has the option to reject these cookies through their browser settings; however, in this case, it cannot be guaranteed that all website services will function properly.

The Service Provider's website tracks the following using cookies:

• Display settings, e.g., font size preferences
• Browser type and version
• Operating system
• Referring URL (previously visited website)
• IP address of the computer used for access
• Date and time of the visit
• Consent to cookie usage
• Items added to the shopping cart
• Visitor traffic and user behaviour patterns to improve services and the website

The service provider records the aforementioned data exclusively for internal and statistical purposes.

The service provider may use two types of cookies:

• Session cookies: These are temporary cookies that are stored only for the duration of your browsing session. They are essential for certain website functions to work properly.
• Persistent cookies: These cookies are stored for a longer period in the browser, depending on the browser settings. Persistent cookies enable the server to recognise the Visitor during future visits based on the device's unique identifier.

Third-party cookies:

- Google Analytics
_utma; _utmb; _utmv; _utmz; _utmx:
Collects anonymous data on how Visitors use the website, which helps improve its usability. permet d'améliorer son utilisation.
For more information: https://policies.google.com/privacy?hl=en&gl=en

- capturly.com
Collects anonymous data on how Visitors use the website, which helps improve its usability.
For more information: https://capturly.com/privacy

- Facebook.com
datr; lsd; reg_ext_ref; reg_fb_gate; reg_fb_ref; wd:
Visitors can share the website's content with their friends on the Facebook social platform. This service may leave cookies on the computer over which the service provider has no control.
For more information: https://www.facebook.com/business/gdpr

- accounts.google.com
GALX; GAPS; GoogleAccountsLocale_session:
Visitors can share our website's content with their friends on the Google social platform. This service may leave cookies on the computer over which the service provider has no control.
For more information: https://policies.google.com/privacy