GDPR Policy
Hostnaa Logo

GDPR Policy

This GDPR Policy ("Policy") explains how Hostnaa ("we," "us," or "our") complies with the General Data Protection Regulation (GDPR) and outlines your rights and our obligations regarding the processing of personal data. We are committed to protecting your privacy and ensuring the security and confidentiality of your personal information.

1. Lawful Basis for Processing Personal Data

We will only process personal data if we have a lawful basis to do so under the GDPR. The lawful bases for processing personal data include:

  • Consent: We will obtain your explicit consent for specific processing activities and provide you with the ability to withdraw your consent at any time.

  • Contractual Necessity: We may process personal data that is necessary for the performance of a contract or to take pre-contractual steps at your request.

  • Legal Obligation: We may process personal data to comply with our legal obligations, such as fulfilling our tax or regulatory requirements.

  • Legitimate Interests: We may process personal data based on our legitimate interests, provided that your fundamental rights and freedoms do not override those interests.

2. Rights of Data Subjects

As a data subject, you have the following rights under the GDPR:

  • Right to Access: You have the right to access your personal data and obtain information about how it is processed.

  • Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal data.

  • Right to Erasure: You have the right to request the deletion of your personal data under certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.

  • Right to Restriction of Processing: You have the right to request the restriction of processing your personal data in specific situations, such as when the accuracy of the data is contested.

  • Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

  • Right to Object: You have the right to object to the processing of your personal data, including profiling, based on legitimate interests or for direct marketing purposes.

  • Right to Withdraw Consent: If we rely on your consent to process your personal data, you have the right to withdraw your consent at any time.

3. Data Security and Confidentiality

We implement appropriate technical and organizational measures to ensure the security and confidentiality of personal data, in line with the requirements of the GDPR. These measures include:

  • Encryption and pseudonymization of personal data where appropriate.

  • Regular evaluation and testing of the effectiveness of our security measures.

  • Training our employees on data protection and their responsibilities.

  • Limiting access to personal data to authorized personnel on a need-to-know basis.

4. Data Transfers

If we transfer personal data to countries outside the European Economic Area (EEA), we will ensure that appropriate safeguards are in place to protect the data, as required by the GDPR. This may include relying on adequacy decisions, implementing standard contractual clauses, or obtaining your explicit consent.

5. Data Retention

We will retain personal data for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law. We will securely delete or anonymize personal data when it is no longer needed.

6. Data Breach Notification

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify the relevant supervisory authority and, when required by the GDPR, inform affected individuals without undue delay.

7. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our data protection efforts and ensure compliance with the GDPR.

You can contact our DPO at [email protected] if you have any questions or concerns about our data protection practices.

8. Contact Us

If you have any questions, requests, or complaints regarding the processing of your personal data or this Policy, please contact us at [email protected] We will address your inquiries promptly and strive to resolve any issues in accordance with the requirements of the GDPR.

By using our services, you acknowledge and agree to the terms of this GDPR Policy and our processing of your personal data in accordance with applicable data protection laws.