Privacy Statement

Who is responsible?

SiteServer is responsible for processing personal data through this website, the customer portal, and direct contact with SiteServer.

Registered address: Bernard Lievegoedstraat 106, 7207 PW Zutphen, the Netherlands. Chamber of Commerce: 76745058. VAT ID: NL003131608B18.

Contact for privacy questions: info [at] siteserver.nl.

Which data do we process?

When you contact us, we process data such as name, email address, message content, and any project information you provide.

When you use the customer portal, we process account data, organisation and billing data, profile data, login and session data, MFA status, support and privacy requests, notifications, audit data, and data needed for hosting, domain, invoice, and payment processes.

During website visits, technical data may be processed in server logs, such as IP address, date and time, requested URL, browser information, and error messages.

For visitor statistics we use Clicky with tracking cookies disabled, anonymised IP addresses, and respect for global opt-out. This may process technical visit data such as page views, referring page, browser information, and visit time.

For customers or active projects, administrative data, invoice data, support requests, domain registration data, technical provisioning data, and technical project data may be processed to deliver the service.

Why do we process data?

We use data to answer questions, prepare quotes or agreements, manage customer accounts, provide hosting, domains, billing, payments, and support, secure the website, customer portal, and infrastructure, prevent misuse, and meet statutory obligations.

Legal bases

Processing may be based on performance of a contract, steps before entering into a contract, a statutory obligation, consent, or the legitimate interest of keeping the website and services secure and reliable.

Sharing with third parties

SiteServer does not sell personal data. Data may be shared with necessary providers, such as hosting, email, administration, or support providers, where needed for the service.

For customer portal processes, necessary data may be processed by or shared with hosting, domain registration, payment, administration, and email providers.

Clicky is used as an analytics provider for visitor statistics. The tracking code is loaded from static.getclicky.com and is configured with tracking cookies disabled, anonymised IP addresses, and respect for global opt-out.

Data may be disclosed where required by law or a competent authority.

Retention periods

Contact requests are generally kept for up to 12 months, unless they lead to a customer relationship or project.

Administrative records are kept for as long as legally required. Account, audit, support, invoice, domain, and provisioning data are kept as long as needed for service delivery, security, evidence, statutory administration, and request handling.

Server logs are normally kept no longer than needed for security, error analysis, and operational management, unless an incident requires longer investigation.

Security

SiteServer takes appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, and unwanted disclosure.

Your rights

You can ask for access, correction, deletion, restriction, portability, or object to processing of your personal data. Email info [at] siteserver.nl.

If you believe SiteServer is not handling your data carefully, you can submit a complaint to the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl.

Changes

This privacy statement may be updated when the website, services, or law changes. The date above shows when this statement was last updated.