Privacy Policy

The data controller responsible for processing your personal data is GB Systems UG (haftungsbeschränkt), Spitalhofstraße 82, 94032 Passau, Germany.

Email: admin@gb-hosting.de
Phone: +49 1575 1448698

Further company details are in our Imprint.

We process personal data only where we need it to run this website and to provide our services. We use no analytics, no tracking and no advertising cookies, and we do not sell your data.

Fonts, images and scripts on our pages are all served from our own server, so visiting them does not send your data to other providers. We do not use automated decision-making or profiling.

When you open one of our pages, our web server logs your IP address, the date and time, the page requested, the status code, the amount of data transferred, the page you came from and your browser's identification (user agent). We need this to deliver the website and to detect and fix errors and attacks.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure, working website). The log files are deleted automatically after 15 days at the latest.

Browsing our pages sets no cookies. When you use the domain search, the contact form, a voucher code or the order form, our server sets a session cookie. It holds only a random identifier and lets us limit how many requests can be sent in a short time, which protects these forms against abuse. The cookie is deleted when you close your browser.

On the order status page, your browser counts in its session storage how often the page has reloaded itself while waiting for your payment, so that it stops after a few attempts. This counter never leaves your browser.

Both are strictly necessary to provide the service you asked for (§ 25(2) no. 2 TDDDG), so we do not ask for consent. Legal basis for the processing: Art. 6(1)(f) GDPR.

If you send us a message through our contact form, we store your name, email address, the topic and plan you chose and your message, together with the time, your IP address and your browser's identification. We use the message only to answer your request; the IP address and browser identification help us detect abuse of the form. If you email or call us, we process the details you give us in the same way.

Legal basis: Art. 6(1)(b) GDPR where your request concerns a contract with us or one you are considering, otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries and protecting the form).

When you order, we process the details you enter in the cart:

• your name, email address, company name (optional), billing address and country;
• the plan, billing cycle and any domain you order, and a voucher code if you use one;
• your payment method, and for SEPA Direct Debit also the account holder and IBAN.

We also store the time of the order, your IP address and your browser's identification to document the order and the SEPA mandate and to prevent fraud.

We use this data to conclude and perform the contract, to collect payments and to meet our accounting and tax obligations. You need to provide the required details; without them we cannot accept your order.

Legal basis: Art. 6(1)(b) GDPR (contract), Art. 6(1)(c) GDPR (retention obligations under commercial and tax law) and Art. 6(1)(f) GDPR (documentation and fraud prevention).

We process payments through Mollie B.V., Amsterdam, Netherlands. For each order we send Mollie your name and email address, the amount, and the order reference with the plan and domain ordered; for SEPA Direct Debit also the account holder and IBAN.

If you pay by card, you enter your card details on Mollie's payment page. They never reach our servers. Mollie uses the data to carry out the first payment and the automatic renewals, and to meet its own legal obligations such as anti-money-laundering checks. Details are in Mollie's privacy statement.

Legal basis: Art. 6(1)(b) and (c) GDPR.

When you search for a domain, we send only the name you entered to our registrar Openprovider (Hosting Concepts B.V., Rotterdam, Netherlands) to check whether it is available.

When you order a domain, we pass the holder details the registration requires (name, address, email address and company if given) to Openprovider and to the registry for the extension: DENIC eG, Frankfurt am Main, for .de domains, and VeriSign, Inc., USA, for .com domains. Registries may publish some holder details in their public WHOIS/RDAP directories under their own rules.

Legal basis: Art. 6(1)(b) GDPR. The transfer to VeriSign in the USA is necessary to register a .com domain for you (Art. 49(1)(b) GDPR).

This website and the data described here are stored on our servers in Germany. Websites, databases and mailboxes you host with us are stored in our datacenter in Falkenstein; backups are kept in Nuremberg.

Apart from the .com domain registration described above, your data is not transferred to countries outside the EU.

We delete personal data as soon as we no longer need it for the purpose it was collected for, unless the law requires us to keep it.

• Contract and billing records, including payment data, are kept for up to ten years under commercial and tax law (§ 257 HGB, § 147 AO).
• Contact messages are kept as long as we need them to deal with your request and any follow-up.
• Server log files are deleted after 15 days at the latest, the session cookie when you close your browser.

Under the GDPR, you have the right to access your personal data (Art. 15), to have it rectified (Art. 16) or deleted (Art. 17), to restrict its processing (Art. 18) and to receive it in a portable format (Art. 20).

Please contact admin@gb-hosting.de to exercise your rights.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.