1. Data controller
The data controller responsible for processing your personal data is HOSTINGDUWINGS Ltd. ("we", "us", "our"), operating data-centre and support facilities in Germany, the Netherlands and Hungary. You can reach our data protection contact at privacy@hostingduwings.com.
2. Data we collect
- Account data — name, email address, password (stored only as a salted hash) and the plan you select.
- Billing data — invoice records, payment method type, cryptocurrency transaction hashes and bank-reference identifiers. We do not store full card numbers.
- Technical & security data — IP address, browser/user-agent, session identifiers, login timestamps and actions performed in your account. This is logged for fraud prevention and security, as you are notified inside the dashboard.
- Service data — the resources, IP allocations, regions and configuration of the services you provision.
- Support data — the contents of tickets and correspondence you send to us.
3. How we use your data
- To create and operate your account and provision the services you order.
- To process payments, issue invoices and prevent fraud and abuse.
- To monitor, secure and maintain the integrity of our network and your services.
- To provide customer support and respond to your requests.
- To comply with legal, accounting and regulatory obligations in the EU and in Germany, the Netherlands and Hungary.
4. Legal basis for processing
We process your personal data under Article 6 of the GDPR on the following bases: performance of a contract (providing your services), legal obligation (tax, accounting and lawful-retention duties), legitimate interests (network security, fraud prevention and service improvement) and, where required, your consent (which you may withdraw at any time).
5. Sharing & sub-processors
We never sell your personal data. We share it only with vetted sub-processors strictly necessary to deliver the service — for example data-centre operators in Germany, the Netherlands and Hungary, payment and blockchain-verification providers, and email-delivery providers. All sub-processors are bound by data-processing agreements that meet GDPR standards. We may also disclose data where required by a valid legal order from a competent authority in the relevant jurisdiction.
6. Data retention
We keep account and service data for as long as your account is active. After closure, billing and invoice records are retained to satisfy statutory accounting periods — generally up to 10 years in Germany (§147 AO / §257 HGB), up to 7 years in the Netherlands and up to 8 years in Hungary. Security and access logs are retained for a limited period proportionate to fraud-prevention and security needs, then deleted or anonymised.
7. Your rights
Subject to the GDPR, you have the right to access, rectify, erase ("right to be forgotten"), restrict or object to processing, the right to data portability, and the right to withdraw consent. To exercise any right, email privacy@hostingduwings.com. We respond within one month as required by law.
8. How we protect your data
We apply TLS 1.3 in transit, encryption at rest for backups, hashed passwords, least-privilege access controls, continuous monitoring and always-on DDoS mitigation. No method of transmission is 100% secure, but we maintain technical and organisational measures appropriate to the risk, as required by Article 32 GDPR.
9. International data transfers
Your data is primarily processed within the European Union (Germany, the Netherlands and Hungary). Where any transfer outside the EEA is necessary, we rely on adequacy decisions or EU Standard Contractual Clauses to safeguard your data.
10. Supervisory authorities
You have the right to lodge a complaint with a supervisory authority, in particular in the country of your residence or our establishment:
- Germany — Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) and the competent state (Land) authority.
- Netherlands — Autoriteit Persoonsgegevens (AP).
- Hungary — Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH).
11. Contact
Questions about this policy or your data? Email privacy@hostingduwings.com or write to our data protection contact at HOSTINGDUWINGS Ltd.
See also: Terms of Service · Service Level Agreement