Privacy policy

PRIVACY POLICY VYLORNODE

Article 1. Who are we?

1.1VylorNode is a Dutch hosting provider.

1.2Controller: VylorNode, sole proprietorship of Djamiro Nijhuis · Chamber of Commerce: 42105657 · VAT: NL005497092B28 · Email: djamiro@vylornode.com · Privacy contact: support@vylornode.com · Website: https://vylornode.com

Article 2. Which personal data do we process?

2.1Account data: name, email address, username, password hash, account ID, language preference, settings.

2.2Contact data: email address, phone number, Discord ID, support details.

2.3Invoice and payment data: billing address, VAT number, order details, payment status, Stripe customer ID, payment method details to the extent made available by Stripe.

2.4Technical data: IP addresses, login logs, server logs, browser data, device information, cookies, session IDs, API logs.

2.5Service data: hosting packages, server names, configurations, resource usage, backups, tickets, abuse reports.

2.6Communication data: support tickets, emails, chat messages, Discord communications to the extent business-related.

2.7Security data: fraud scores, blocks, MFA status, audit logs, abuse investigations.

Article 3. Why do we process personal data?

3.1We process personal data for:

• a. creating and managing accounts
• b. delivering hosting services
• c. processing orders and payments
• d. invoicing and administration
• e. customer service and support
• f. security, logging and fraud prevention
• g. handling abuse
• h. compliance with legal obligations
• i. improving services
• j. marketing to existing customers where permitted
• k. partner programs and discount codes.

Article 4. Legal bases

4.1Performance of contract: account management, delivery, support, invoicing.

4.2Legal obligation: tax administration, retention obligations, cooperation with competent authorities.

4.3Legitimate interest: security, fraud prevention, network stability, abuse investigations, product improvement.

4.4Consent: optional cookies, newsletters, certain marketing or Discord integrations where required.

4.5Vital or public interests normally do not apply.

Article 5. Payments via Stripe

5.1Payments are processed via Stripe.

5.2VylorNode receives payment statuses, transaction IDs, customer IDs and limited payment information.

5.3Full card details are not stored by VylorNode.

5.4Stripe may be an independent controller for certain payment processing activities. Please also consult Stripe’s privacy policy.

Article 6. Customer hosting data

6.1Customers may store their own data on servers.

6.2For data that customers upload or process through hosting services, the customer may be the controller and VylorNode the processor.

6.3In that case, VylorNode’s Data Processing Agreement may apply.

6.4VylorNode does not actively view customer data, except where necessary for support, security, abuse, legal compliance or at the customer’s request.

Article 7. Retention periods

7.1Account data is retained while the account is active and thereafter as long as necessary for administration, disputes or legal obligations.

7.2Invoice data is generally retained for at least 7 years due to tax retention obligations.

7.3Support tickets are retained as long as necessary for support history, disputes and quality improvement.

7.4Security and login logs are retained as long as necessary for security and abuse investigations.

7.5Backups are retained according to backup cycles and then overwritten or deleted.

7.6Data is not retained longer than necessary.

Article 8. Sharing with third parties

8.1VylorNode only shares personal data where necessary.

8.2Possible recipients:

• a. payment provider Stripe
• b. hosting/data center providers
• c. email provider
• d. accounting/invoicing software
• e. support and ticket systems
• f. analytics provider if used
• g. legal/administrative advisors
• h. competent authorities where legally required.

8.3VylorNode does not sell personal data.

Article 9. International transfers

9.1Some suppliers may be located outside the European Economic Area or process data there.

9.2VylorNode uses appropriate safeguards where required, such as standard contractual clauses or equivalent mechanisms.

9.3Customers may request information about subprocessors and transfers.

Article 10. Security

10.1VylorNode takes appropriate technical and organizational measures.

10.2Examples:

• a. password hashing
• b. access control
• c. logging
• d. MFA where possible
• e. network security
• f. DDoS protection
• g. restricted access to customer data
• h. backups where applicable.

10.3The customer remains responsible for their own passwords, users and server configuration.

Article 11. Rights of data subjects

11.1Data subjects have, under conditions, the right to:

• a. access
• b. rectification
• c. deletion
• d. restriction
• e. data portability
• f. objection
• g. withdraw consent
• h. lodge a complaint with the Dutch Data Protection Authority.

11.2Requests may be sent to support@vylornode.com.

11.3VylorNode may verify identity before carrying out a request.

11.4Some data cannot be deleted immediately due to statutory retention obligations, security or open disputes.

Article 12. Cookies

12.1VylorNode uses cookies and similar technologies.

12.2More information is available in the Cookie Policy.

Article 13. Minors

13.1VylorNode does not specifically target children under 16.

13.2Where consent of a parent/legal representative is required, the customer must obtain that consent.

Article 14. Data breaches

14.1VylorNode has an internal procedure for security incidents.

14.2If a data breach is notifiable, VylorNode will notify the Dutch Data Protection Authority and/or data subjects to the extent legally required.

14.3Customers must immediately report suspected data breaches.

Article 15. Changes

15.1VylorNode may amend this Privacy Policy.

15.2In case of material changes, VylorNode informs customers via the website, email or panel.

Article 16. Contact

Privacy questions: support@vylornode.com

Complaint authority: Dutch Data Protection Authority https://www.autoriteitpersoonsgegevens.nl