1. Basic provision
• The ISP (Internet Service Provider) is Milos Kalerta, self employed as natural person with business identification number (ICO) 64760324, DIC/VAT CZ7404201134, with registered office at Nerudova 691, 26301 Dobris, Czech Republic, who represent Exmasters Web Hosting project (hereinafter referred as the "data controller").
• The provider's (data controller's) products are: shared web hosting, vps hosting and managed server hosting. An associated and necessary part of the service is also technical support and server management, such as server restart, installation of operating system and applications, optimalization of server parameters, database and configuration files, solving any complaints and ensuring the removal of it's content, assistance with site migration, setting up regular updates, and so on.
• Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to a particular identifier, such as name, identification number, location data, network identifier or one or more specific elements of that person's physical, physiological, cultural or social identity. What is identified and stored is specified in section 2.
2. Sources and categories of personal data processing
• The data controller is processing personal data that you provided or personal data that the data controller has obtained on the basis of the fulfillment of your order.
• The data controller is processing your contact details and data necessary for the fulfillment of the order and services.
• Specifically, the following information is stored: name, address, contact details (email and/or phone number), selected username and password, IP address from which is the service order made and information of which services you have ordered. In case you accessed this page with a reseller referral code, then also this code is stored.
• In case of dedicated server hosting, VPS and shared hosting, server log files are held for 6 months as it's needed in case of information giving to a official. In case of dedicated servers it also means that login details are held as well.
• The data controller process basic cookies (Google Analytics).
• The data controller do not process any special or sensitive categories of personal data.
3. Legal reason and purpose of personal data processing
• The legal reason for processing of personal data is the fulfillment of obligations between you and the data controller.
• The purpose of processing personal data is to process your order and fulfilment the obligations between you and the data controller; when ordering, personal data is required, which is necessary for the successful completion of the order and the provision of personal data is a necessary requirement for concluding and fulfilling obligations. It is not possible to perform the ordered services without providing personal data.
• There is no automatic individual decision by the data controller within the meaning of Article 22 of the GDPR.
4. Data retention period
• The data controller retains personal data for the time necessary to exercise the rights and obligations to fulfill obligations;
• Until the consent to the processing of personal data is revoked, if the personal data are processed on the basis of the consent;
• After the retention period of personal data and/or cancelling the service, the data controller archive the personal data. It can be erased as specified in section 6.
5. Payments data processing
• The data controller do not process any payments, as it's done via 3rd payment gateways.
• Stripe (California, USA) is card payment facilitator for services provided by the data controller.
• 2CheckOut Inc. (Ohio, USA) is card payment facilitator for services provided by the data controller.
• PayPal Inc. (California, USA) is online payment facilitator for services provided by the data controller.
• The data controller therefore do not store any credit card details, as it's fully processed by the billing companies (payment gateways) mentioned above.
6. Your rights
• Under the conditions set out in the GDPR, you have the right to access your personal data as per Article 15 of the GDPR, the right to correct personal data as per Article 16 of the GDPR, or restrictions on processing as per Article 18 of the GDPR, the right to delete personal data as per Article 17 GDPR, the right raise an objection to the processing as per Article 21 of the GDPR and the right to data portability as per Article 20 of the GDPR.
• You also have the right to file a complaint or a question with the Office for Personal Data Protection, if you believe that your right to personal data protection has been violated.
7. Terms of personal data security
• The data controller declares that he has taken appropriate technical and organizational measures to secure personal data.
• The data controller declares that only he or persons authorized by him have access to personal data.
8. Information for exercising your rights
• In case you have any question about the processing of your personal data, you can use the contact email
info@exmasters.com.
• You may also exercise your rights mentioned in paragraph 6 by sending a message to this email.
9. Final Provision
• By submitting an order from the online order form, you confirm that you are familiar with terms of personal data protection and terms & conditions of use the service and that you accept them in full.
• You agree to these terms by checking your consent via the online form. By checking the agreement, you confirm that you are familiar with terms of personal data protection and terms & conditions of use of the service and that you accept them in full.
• The data controller is entitled to change these conditions. It will publish the new version of terms of personal data protection on its website at the same link, or send you a new version of these terms and conditions to email address you provided to the data controller.