Privacy Policy & GDPR

1. Introduction - Our Privacy Philosophy

This Privacy Policy applies to all personal data that Wasabi Hosting processes for all services we provide. We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and Dutch privacy laws.

This policy covers everyone who has ever had contact with us or visited our website, including visitors, customers, and business contacts.

2. Data Controller Information

3. Data We Collect

We collect and process the following categories of personal data:

• Account Information: Name, username, customer ID, Discord username
• Contact Data: Email address, billing address
• Financial Data: Payment method details, transaction history, invoices
• Technical Data: IP address, browser type, operating system, login data, server logs
• Usage Data: Information about how you use our services and website
• Support Data: Support tickets, correspondence, and communications

4. How We Collect Your Data

We receive data directly from you when you:

• Create an account on our website
• Purchase our services
• Contact our support team
• Subscribe to our newsletters or announcements
• Visit our website (through cookies and analytics)

5. Legal Basis for Processing

We process your personal data under the following legal bases:

1. Contract Performance: To provide you with our hosting services and fulfill our agreement
2. Legal Obligations: To comply with tax laws, anti-money laundering regulations, and court orders
3. Legitimate Interests: For fraud prevention, network security, and service improvements
4. Consent: For marketing communications and optional services

6. How We Use Your Data

We use your personal data to:

• Provide and manage your hosting services
• Process payments and prevent fraud
• Communicate with you about your services
• Provide customer support
• Send service updates and important notifications
• Comply with legal obligations
• Improve our services and website

7. Your Rights Under GDPR

As a data subject, you have the following rights:

1. Right to Access: Request copies of your personal data
2. Right to Rectification: Request correction of inaccurate data
3. Right to Erasure: Request deletion of your data (subject to legal obligations)
4. Right to Restriction: Request limited processing of your data
5. Right to Data Portability: Receive your data in a machine-readable format
6. Right to Object: Object to certain types of processing
7. Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, email us at privacy@wasabihosting.com with proof of identity.

8. Data Retention

We retain personal data according to the following schedule:

• Active Customer Data: Duration of service agreement
• Inactive Customer Data: Deleted after 2 months of no invoice payments for inactive or closed accounts
• Financial Records: 7 years (Dutch tax law requirement)
• Support Tickets: 2 years after resolution
• Marketing Consent: Until withdrawn

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

• SSL/TLS encryption for data in transit
• Encryption of sensitive data at rest
• Regular security assessments and updates
• Access controls and authentication
• Data protection best practices and training
• Incident response procedures
• Regular backups

However, no online service is completely secure. You acknowledge the inherent risks of transmitting information over the internet.

10. Data Sharing & Third Parties

We may share your data ONLY with:

• Payment Processors: PayPal, Stripe, cryptocurrency gateways (only for processing your payments)
• Infrastructure Providers: Data center operators (only essential technical data for service delivery)
• Communication Platforms: Discord (only when you contact us for support)
• Legal Authorities: Only when legally required by court order or law enforcement

All third parties are contractually required to protect your data and use it only for the specific purpose we've shared it. We regularly audit our data sharing practices to ensure minimal exposure.

11. International Data Transfers

We process your data within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure appropriate safeguards through:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Your explicit consent for specific transfers

12. Data Breach Notification

In case of a personal data breach that poses high risk to your rights and freedoms, we will:

1. Notify the Dutch Data Protection Authority within 72 hours
2. Notify affected individuals without undue delay
3. Provide information about the breach and recommended actions
4. Document all breaches and remedial actions

13. Cookies and Tracking

We use essential cookies for website functionality and optional cookies for analytics and improvements. You can manage cookie preferences through your browser settings.

For detailed information about cookies, please contact us at privacy@wasabihosting.com.

14. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect data from children. If you are under 18, you need parental consent to use our services.

15. Complaints

If you have concerns about our data processing, you can:

1. Contact us first at privacy@wasabihosting.com
2. Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

16. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Significant changes will be announced via our Discord server or email. Please review this policy periodically.