Privacy Policy

This Privacy Policy applies to Cube-Hosting.net and its subsidiary AS47263.

Last updated: 10/01/2022

Provision of Personal Data

Unless stated otherwise below, providing your personal data is neither legally nor contractually required, nor necessary to conclude a contract. You are not obliged to provide data, and non-provision has no consequences. This only applies as long as no different statement is made in the processing activities described below. “Personal data” means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our website without revealing any information about yourself. Each time you access our site, usage data is transmitted by your internet browser to us or our hosting/IT provider and stored in log files (e.g., page accessed, date/time, IP address, data volume transferred, requesting provider). Processing is based on Art. 6(1)(f) GDPR and our legitimate interest in ensuring error-free operation of our website and improving our services.

Controller Contact

Controller under data protection law:
Jesse Röhsler
cube-hosting.net · Berliner Str. 1 · 97447 Gerolzhofen · Germany

Customer-initiated Email Contact

If you contact us by email on your own initiative, we process your personal data (name, email address, message text) only to the extent you provide it. If the contact is for pre-contractual steps or concerns an existing contract, processing is based on Art. 6(1)(b) GDPR. Otherwise, processing is based on Art. 6(1)(f) GDPR (our legitimate interest in handling your request). You may object at any time on grounds relating to your particular situation to processing based on Art. 6(1)(f) GDPR. We use your email address solely to handle your request; afterwards, we delete your data subject to statutory retention periods unless you have consented to further processing.

Customer Account

When you open a customer account, we process your personal data as specified in the registration form to improve your purchasing experience and simplify order processing. Processing is based on your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time; this does not affect the lawfulness of processing before withdrawal. Your account will then be deleted.

Data Collection and Disclosure for Orders

For orders, we process personal data only to the extent necessary to fulfill and handle your order and requests (Art. 6(1)(b) GDPR). Data may be shared with, for example, shipping companies/dropshipping partners, payment providers, order-processing service providers, and IT providers — strictly in accordance with legal requirements and limited to what is necessary. Providing data is required to conclude a contract; otherwise a contract cannot be concluded.

Use of Email Address for Newsletters

We use your email address exclusively for our own newsletter if you have expressly consented (Art. 6(1)(a) GDPR). You can withdraw consent at any time, e.g., via the unsubscribe link. Your address will then be removed from our mailing list.

Payment Services — PayPal / PayPal Express

All PayPal transactions are subject to PayPal’s Privacy Policy: paypal.com/de/webapps/mpp/ua/privacy-full. For PayPal Express, PayPal may collect data (e.g., IP, device type, OS, browser, device location) and set cookies when our pages load. The use of cookies or similar technologies occurs with your consent (Section 25(1) TTDSG in conjunction with Art. 6(1)(a) GDPR). Data required for payment processing is transmitted to fulfill the contract (Art. 6(1)(b) GDPR).

Cookies

Our website uses cookies. You can configure your browser to notify you before a cookie is set, allow cookies in specific cases, block them, or delete existing cookies. Help articles: Chrome, Internet Explorer / Edge, Firefox, Safari.

Strictly Necessary Cookies

Unless otherwise stated, we only use strictly necessary cookies for a user-friendly, effective, and secure service (Section 25(2) TTDSG). Processing is based on Art. 6(1)(f) GDPR (legitimate interests). You have the right to object at any time on grounds relating to your particular situation.

Google reCAPTCHA

We use reCAPTCHA (Google Ireland Limited) to distinguish human input from automated processing. IP address and other necessary data may be transmitted to Google within the EU and, where applicable, to Google LLC in the USA (Standard Contractual Clauses). Legal basis: Art. 6(1)(f) GDPR (protecting our site against abuse/SPAM). Details: google.com/recaptcha, google.com/privacy.

Google invisible reCAPTCHA

Invisible reCAPTCHA analyzes usage in the background to distinguish regular users from bots. Data processing and legal bases as above; possible third-country transfers based on Standard Contractual Clauses.

Google Fonts

For consistent typography, a connection to Google servers may be established when pages load. IP address and browser info may be processed and, where applicable, transferred to the USA (Standard Contractual Clauses). Legal basis: Art. 6(1)(f) GDPR. Info: developers.google.com/fonts/faq.

Google Tag Manager

Tag Manager manages JavaScript/HTML tags (e.g., for analytics/marketing). It does not store personal data itself, but may enable the triggering of other tags that do. See Google’s terms and privacy documentation.

Data Retention

After complete contract fulfillment, data is retained for the duration of statutory warranty periods and subsequently in accordance with statutory (especially tax/commercial) retention obligations, then deleted unless you have consented to further processing.

Google Analytics

Used for analytics, marketing, and advertising (Google Ireland Limited). Data may include IP, timestamps, click paths, browser/device info, visited pages, referrer, location, purchase activity. IP anonymization is enabled. Transfers to the USA may occur (Standard Contractual Clauses). Legal basis: Art. 6(1)(f) GDPR. Opt-out: Browser add-on. Info: Cookies, Terms.

Google Ads Conversion Tracking

When you click a Google ad, a short-lived conversion cookie is set. This serves visit action evaluation. Transfers to the USA may occur (Standard Contractual Clauses). Legal basis: Art. 6(1)(f) GDPR. You can disable personalized ads in your Google Ads settings or opt out via the NAI.

Google AdSense

We rent ad space and display interest-based ads (Google Ireland Limited). Transfers to the USA may occur (Standard Contractual Clauses). Legal basis: Art. 6(1)(f) GDPR. Opt-out options as above. Info: Technologies & Ads, Privacy.

Google Remarketing / Similar Audiences

Analyzes visitor behavior and interests to serve interest-based ads using cookies. No storage of personal data of website visitors. Transfers to the USA may occur (Standard Contractual Clauses). Legal basis: Art. 6(1)(f) GDPR. Opt-out options as above. Info: google.com/privacy/ads.

Your Rights

Subject to the statutory requirements, you have the rights under Art. 15–20 GDPR: access, rectification, erasure, restriction of processing, data portability. You also have the right to object (Art. 21(1) GDPR) to processing based on Art. 6(1)(f) GDPR and to processing for direct marketing purposes.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR if you believe your personal data is being processed unlawfully. Our competent authority:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany · Tel: +49 981 1800930 · Fax: +49 981 180093800 · E-mail: poststelle@lda.bayern.de.

Right to Object

Where processing is based on Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation with effect for the future, unless we demonstrate compelling legitimate grounds overriding your interests, rights, and freedoms or the processing serves the establishment, exercise, or defense of legal claims. If processing is for direct marketing, you may object at any time; we will then cease processing for that purpose.

“TAWK.to” (Live Chat Tool)

We use the “TAWK.to” live chat tool (Tawk.to inc., USA) to enable direct communication with our support staff. Content is provided via Tawk.to’s servers. More information: tawk.to/privacy-policy.

“Trustpilot” (Customer Reviews)

We embed Trustpilot content (Trustpilot A/S, Denmark). Content is delivered via Trustpilot’s servers. For details see: End-User Privacy Terms.

External Order Management (WHMCS)

For contract processing we use WHMCS as a processor (WHMCS Ltd., Woodside House, Broadway Avenue, Giffard Park, Milton Keynes, MK14 5QF, UK; VAT: GB 927 774 676). Personal data collected during orders is transmitted to WHMCS.