Privacy policy

Controller

euhost.com, owner Matevz Sernc-Urban
Hochriesstr. 46, 85560 Ebersberg
E-mail: support@euhost.com

Summary

We only set technically necessary cookies (§ 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG)): a session cookie when you log in to the customer area, so that you stay logged in, and a cookie with your language choice (euhost_locale, one year) when you choose a language yourself. The website does not load any content from third parties. We do not use any analytics or tracking services such as Google Analytics, either on the website or in our e-mails. The fonts are also hosted on our own server.

Hosting and server logs

We operate the website and the boxes on servers in data centres in Germany. A data processing agreement is in place with the operator of the data centres.

Each time the website is accessed, the web server stores your IP address, the time, the address accessed (without confirmation codes from our e-mails) and the status code. This serves secure operation and error analysis. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) of the General Data Protection Regulation (GDPR). We delete the logs after 14 days.

Waiting list

If you sign up for the waiting list, we store your e-mail address, optionally your name, whether you are a freelancer, a company or a private individual, optionally your intended use, as well as the IP address and time of sign-up and confirmation.

We use this information to inform you about the launch of the euhost Box and the pilot offer. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. We log the IP address and time so that we can prove your consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR).

We use the double opt-in procedure: you are only on the list once you open the link in our confirmation e-mail. We delete unconfirmed sign-ups after 30 days.

You can withdraw your consent at any time, via the link in each of our e-mails or by e-mail to support@euhost.com. We will then delete all your information. At the latest, we delete it when we dissolve the waiting list after the launch.

Customer account and contracts

When you order from us, we process the information we need for the contract and billing: name, company and VAT identification number where applicable, address, e-mail address, telephone number, your orders and contracts as well as technical usage data of your boxes such as resource consumption. The legal basis is Art. 6(1)(b) GDPR.

We store your password only as a secure hash. When you log in, we set a session cookie without which the customer area does not work (§ 25(2) no. 2 TDDDG). For the session, we store the IP address and browser identifier in order to detect misuse of your account (Art. 6(1)(f) GDPR). The session ends when you log out, at the latest 14 days after last use; we then delete this information.

If you provide a VAT identification number as a business, we check it in the VAT Information Exchange System (VIES) of the European Commission. In doing so, we transmit only the number. We need this to apply the correct VAT on your invoices (Art. 6(1)(c) GDPR).

After the end of the contract, we delete this data unless statutory retention obligations apply. We retain invoices and accounting records for up to ten years in accordance with the provisions of commercial and tax law (§ 257 of the German Commercial Code (HGB), § 147 of the German Fiscal Code (AO)) (Art. 6(1)(c) GDPR).

Contents of your boxes

We process what you store and process in your boxes only on your behalf. For personal data contained therein, we are your processor pursuant to Art. 28 GDPR. This also applies to e-mails you send via our mail relay; in doing so, we log sender, recipient and time for 30 days in order to be able to trace delivery and misuse. We access the contents only if this is necessary to remedy faults, to prevent misuse or because of a legal obligation, or if you consent.

Payment processing

We process payments by credit card, PayPal or bank transfer via Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands. For this purpose, we transmit name, e-mail address, amount and payment reference. You enter your card details directly with Mollie; we do not receive them. Mollie processes this data as an independent controller and as a payment institution in accordance with its own privacy policy.

If you pay with PayPal, PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, additionally processes your data as an independent controller in accordance with its privacy policy. The legal basis for payment processing is Art. 6(1)(b) GDPR.

Domain registration

For the registration and management of domains, we work with InterNetX GmbH, Johanna-Dachs-Str. 55, 93055 Regensburg, as registrar. InterNetX processes the data on our behalf; a data processing agreement is in place with InterNetX.

For registration, we must transmit the data of the domain holder and the contact persons, in particular name, address, e-mail address and telephone number, to the registry responsible for the extension, for example to DENIC eG in Frankfurt am Main for .de domains. The registries process this data as independent controllers in accordance with their registration terms. Depending on the extension, a registry may be based outside the EU, for .com and .net for example in the USA. Insofar as data must be transferred there, this is done for the performance of the contract (Art. 49(1)(b) GDPR). The legal basis for the transfer is Art. 6(1)(b) GDPR.

Whether and which data can be retrieved via public lookup services (Whois, RDAP) is determined by the respective registry. For .de domains, DENIC's public lookup shows no data of the holder. We store the domain data for the duration of the domain contract and beyond that only insofar as statutory retention obligations apply.

Sending e-mails

We send our e-mails, such as confirmation e-mails and invoices, via our own mail server.

Contact by e-mail or telephone

If you write to us or call us, we process your information in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR if it concerns a contract or its initiation, otherwise our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Recipients at a glance

• Data centre operator in Germany (processor)
• InterNetX GmbH (domain registration, processor)
• Mollie B.V. (payment processing, independent controller)
• PayPal (Europe) S.à r.l. et Cie, S.C.A. (when paying with PayPal, independent controller)
• the registries responsible for your domains (independent controllers)

Beyond that, we do not pass on your data unless we are legally obliged to do so.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

You can also lodge a complaint with a supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach.

Last updated: October 2026