INTERKVM HOST SRL
01
General information
This Privacy Policy is intended to inform INTERKVM HOST SRL users and customers about how personal data is processed in connection with the use of the website, the customer account, and the hosting services provided.
ZetServers complies with Regulation (EU) 2016/679 (GDPR), Law no. 190/2018, and other applicable national legislation.
This Policy applies to:
- visitors of the ZetServers website;
- customers / potential customers;
- persons who contact ZetServers (email/phone/ticket).
02
Who is responsible for data processing
2.1. ZetServers customer data (contractual relationship) – Data Controller
For data processed for administrative, commercial, and support purposes, INTERKVM HOST SRL acts as a DATA CONTROLLER, within the meaning of Article 4(7) GDPR.
Controller identification details:
- INTERKVM HOST SRL
- Registered office: Lipova, Arad, Romania, Emanoil Gojdu Street no. 1
- Tax ID (C.U.I.): 42390138
- GDPR contact e-mail: [email protected]
2.2. Data Protection Officer (DPO)
ZetServers has not currently appointed a Data Protection Officer (DPO). For any questions regarding data protection or to exercise your rights, you may contact us at: [email protected]
If ZetServers appoints a DPO in the future, the contact details will be published by updating this Policy.
2.3. Customer data uploaded to hosting services – Processor
For personal data uploaded, stored, or processed by customers through the hosting services (e.g., databases, files, emails, applications), INTERKVM HOST SRL acts exclusively as a DATA PROCESSOR on behalf of the customer (the customer being the Data Controller).
In this situation, ZetServers processes data only on the basis of the customer’s documented instructions and within the limits of the GDPR.
The terms under which ZetServers processes this data are set out in the Data Processing Agreement, which forms part of the Terms and Conditions: zetservers.com/data-processing-agreement
03
Personal data processed by ZetServers as Controller
3.1. Categories of data
We may process, as applicable:
- identification and contact data: first name, last name, email, phone;
- billing/contract data: address, VAT ID / CNP (as applicable), invoice details;
- account data: username/customer ID, passwords, account settings;
- payment data: transaction status, payment references (without storing full card details);
- support data: requests, tickets, correspondence;
- technical/security data: IP address, authentication logs, access data and security events.
3.2. Data sources
Data may come from:
- directly from you (form, account, contract, email, phone);
- from the use of services (logs, IP, security events);
- from partners involved in payments/service delivery (e.g., payment processors), strictly to the extent necessary to perform the contract (usually payment confirmation and transaction reference).
3.3. Purposes and legal bases for processing
Processing is carried out strictly for the following purposes:
a) Concluding and performing the contract (Article 6(1)(b) GDPR)
- account creation, service administration, hosting delivery, technical support.
b) Compliance with legal obligations (Article 6(1)(c) GDPR)
- invoicing, accounting records, tax obligations, responses to authorities, document retention as required by law.
c) Legitimate interest (Article 6(1)(f) GDPR)
- infrastructure security, fraud/abuse prevention, service protection, incident investigation, defending ZetServers’ rights in court.
d) Consent (Article 6(1)(a) GDPR)
- live chat and analytics and marketing tools on the website, only where you have agreed to them (see section 11).
04
Storage period
Data is retained:
- for the duration of the contractual relationship and service provision;
- thereafter, in accordance with legal obligations (e.g., financial-accounting documents, under applicable law);
- technical and security logs: 12 months;
- support requests: 3 years;
- marketing data (if any): until withdrawal of consent / objection.
Where periods cannot be expressed precisely, they are set according to the purpose, nature of the data, and applicable legal obligations.
05
Data recipients
Data may be disclosed, as applicable, to:
- service providers (processors): payment processors, IT infrastructure providers, support services, email services, security solutions, accounting (if applicable);
- public authorities, based on legal obligations or valid requests.
These providers include, in particular:
- Cloudflare, Inc. – delivery of the website and protection against attacks; it processes the IP address and technical data of every visit to the website;
- payment processors, such as Stripe and cryptocurrency payment processors – processing the payments you make;
- tawk.to – the live chat on the website, only if you consent to it;
- Google LLC – reCAPTCHA protection against spam on website forms, where a form uses it, and Google Tag Manager for website statistics and advertising measurement, where used and only if you consent to it.
All contracted providers are required to comply with GDPR requirements through contractual clauses.
06
Transfers to third countries (outside the EEA)
As a rule, ZetServers aims to keep processing within the EEA (European Economic Area).
Some of the providers listed in section 5, such as Cloudflare, Google, Stripe and tawk.to, are established outside the EEA, mainly in the United States, or may process data there. These transfers take place only on the basis of an adequacy decision of the European Commission, including the EU–U.S. Data Privacy Framework for providers certified under it, or on the basis of the Standard Contractual Clauses adopted by the European Commission (Article 46(2)(c) GDPR).
Data that customers store on their servers is kept in the data center location they choose when ordering, as described in the Data Processing Agreement.
07
Customer data stored on hosting services (ZetServers as Processor)
For data uploaded by customers:
- ZetServers does not determine the purposes of processing of such data;
- ZetServers does not use the data for its own benefit;
- ZetServers does not analyze the content;
- ZetServers does not disclose the data without instructions or legal obligations.
Responsibility for the lawfulness of the data, informing data subjects, and the legal bases for processing lies exclusively with the customer, as the Data Controller.
The obligations ZetServers assumes as processor are set out in the Data Processing Agreement: zetservers.com/data-processing-agreement
08
Data subject rights
Under GDPR, data subjects benefit from:
- the right of access;
- the right to rectification;
- the right to erasure;
- the right to restriction of processing;
- the right to data portability;
- the right to object;
- the right to withdraw consent (where processing is based on consent);
- the right to lodge a complaint with ANSPDCP;
- the right to bring an action before the courts.
Requests regarding data processed by ZetServers as Controller may be sent to: [email protected].
For data processed by customers via hosting services, data subjects must address the Data Controller directly (the ZetServers customer).
09
Exercising rights, response time and conditions
- a) Response time: ZetServers generally responds within 1 month from receiving the request. This may be extended by up to 2 additional months if the request is complex or numerous; in this case, you will be informed within the initial 1-month period.
- b) Identification: ZetServers may request additional information to identify the requester, to the extent permitted by GDPR.
- c) Additional copies: for additional copies of data, ZetServers may charge a reasonable fee based on administrative costs, under GDPR conditions.
- d) Legal limitations: in certain situations, access may be restricted where legal obligations or the rights of others apply; you will be informed of the reasons, to the extent permitted by law.
10
Automated decisions / profiling
ZetServers does not use decision-making processes based solely on automated processing, including profiling, that produce legal effects or significantly affect you.
If automated mechanisms are implemented strictly for security purposes (e.g., detecting fraud/abuse attempts), they do not produce significant legal effects on the data subject, but aim to protect the services.
11
Cookies and similar technologies (website)
The ZetServers website uses:
- strictly necessary cookies and similar technologies, without which the website cannot work or stay secure (for example, Cloudflare security cookies, client area session and authentication, and the storage of your cookie choices); these do not require consent;
- reCAPTCHA (Google), where a form uses it, loaded only when you start filling in that form, to protect it against spam and automated abuse;
- live chat (tawk.to), loaded only if you consent to it; it sets its own cookies and receives your IP address and the address of the page you are viewing;
- analytics and marketing tools (Google Tag Manager and the tags it loads), where used, loaded only if you consent to them.
On your first visit, a banner asks for your choice. Refusing non-essential cookies does not affect the basic operation of the website. You can change or withdraw your consent at any time, with effect for the future:
Cookie settings
12
Mandatory nature of providing data
Providing certain data is necessary:
- to conclude and perform the contract (e.g., identification and billing data);
- to comply with legal obligations.
If such data is not provided, ZetServers may be unable to provide services or conclude the contract.
13
Data security
ZetServers implements appropriate technical and organizational measures, including, as applicable:
- encryption of communications and access security measures;
- access control and authentication;
- firewall / protection against unauthorized access and anti-abuse measures;
- monitoring of security events;
- confidentiality policies for staff/contractors with access to personal data.
14
Complaints
Data subjects may lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) or another competent supervisory authority, according to the GDPR.
15
Policy updates
ZetServers reserves the right to update this Privacy Policy. The applicable version is the one published on the website at the time the services/website are used.
Hosting since 2010 · operating entity
Legal entity
INTERKVM HOST SRL
Registered address
str. Emanoil Gojdu nr. 1, Lipova, jud. Arad, Romania