Privacy Policy

01Controller

The controller responsible for the processing of personal data on this website within the meaning of the EU General Data Protection Regulation (GDPR) is:

02Scope of this policy

This policy applies to the website germansserver.com and any service or sub-domain operated under it. We process personal data only to the extent necessary to provide a functional website and to deliver the services you request.

We do not knowingly process data of children under the age of 16. We do not engage in automated decision-making or profiling.

03Hosting & server log files

This website is hosted on our own infrastructure in Germany. The web server automatically collects and stores information that your browser transmits in so-called server log files:

• IP address of the requesting device
• Date and time of the request
• Requested URL and HTTP method
• HTTP response status and transferred data volume
• Referring URL (if any)
• Browser user agent string

These data are processed for the purpose of operating the website securely, detecting and preventing attacks, and ensuring system stability. Legal basis is Art. 6 (1) (f) GDPR (legitimate interests). Log entries are retained for a maximum of 14 days and then automatically deleted, unless an incident requires longer retention for evidence purposes.

04Contact requests

If you contact us by email or via any contact form, the data you provide (name, email address, message content) are processed for the purpose of handling your inquiry and any follow-up communication.

Legal basis is Art. 6 (1) (b) GDPR where the inquiry relates to a contract or pre-contractual measures, otherwise Art. 6 (1) (f) GDPR based on our legitimate interest in responding to inquiries. Data are retained for as long as required to handle the inquiry and any statutory retention obligations.

05Cookies

This website does not set tracking, advertising or analytics cookies. Strictly necessary technical cookies (for example a session token) may be set when you use authenticated areas; these are based on Art. 6 (1) (f) GDPR and are essential for service delivery.

If we introduce analytics or marketing technologies in the future that require consent, a cookie banner will be displayed before any such cookies are set, and consent will be the legal basis pursuant to § 25 (1) TDDDG and Art. 6 (1) (a) GDPR.

06Web fonts

This site uses fonts from Google Fonts (Inter and JetBrains Mono) delivered via Google's CDN. When loading the website, your browser establishes a connection to Google servers, transmitting your IP address. Google is based in the United States; the EU–US Data Privacy Framework provides an adequacy decision.

Legal basis is Art. 6 (1) (f) GDPR (legitimate interest in consistent typography). We are in the process of self-hosting these fonts to eliminate this third-party transfer.

07Customer data (service provisioning)

When you become a customer and order a hosting service, we process the following categories of personal data:

• Contact and billing details (name, company, address, email, phone)
• Authentication credentials and access logs to administrative interfaces
• Service usage metadata required for operating and billing the service
• Communication content with our support team

Legal basis is Art. 6 (1) (b) GDPR (contract performance) and, with respect to statutory retention obligations, Art. 6 (1) (c) GDPR (legal obligation).

Customer data are stored exclusively on infrastructure located in Germany. We do not sell, rent, or transfer customer data to third parties for marketing purposes.

08Payment processors

To process payments we may use external service providers. Depending on the payment method you choose, payment data is transmitted directly to the respective provider. We only receive information about the transaction status. Where payment data is handled, the providers act as separate controllers under their own privacy policies. Legal basis is Art. 6 (1) (b) GDPR.

09Data retention

We retain personal data only as long as necessary for the purpose for which it was collected, or as required by statutory retention obligations (typically 6 to 10 years under German commercial and tax law for invoicing and accounting data). After expiry of these periods, the corresponding data are routinely deleted.

10Your rights as a data subject

Under the GDPR you have the following rights with regard to your personal data:

• Right of access — Art. 15 GDPR
• Right to rectification — Art. 16 GDPR
• Right to erasure — Art. 17 GDPR
• Right to restriction of processing — Art. 18 GDPR
• Right to data portability — Art. 20 GDPR
• Right to object — Art. 21 GDPR
• Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal
• Right to lodge a complaint with a supervisory authority — for North Rhine-Westphalia: Landesbeauftragte für Datenschutz und Informationsfreiheit NRW

To exercise any of these rights please contact us by email at info@germansserver.com. We will respond within one month, in line with Art. 12 (3) GDPR.

11Technical & organisational security

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Measures include TLS encryption in transit, encryption at rest where applicable, network segmentation, access controls based on the principle of least privilege, logging and monitoring, and regular review of these measures.

12Changes to this policy

We may update this privacy policy to reflect changes to our services or legal requirements. The current version is always available at this URL. Material changes will be communicated to active customers via email.