01Data controller
Edgar Torres Llavero (DNI 45722905D), owner of ElectrumHosting, is the Controller of the personal data you provide, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 of 5 December (LOPDGDD).
- Controller
- Edgar Torres Llavero (ElectrumHosting)
- DNI
- 45722905D
- Address
- 25540 Lleida, Cataluña (España)
- Email (privacy)
- support@electrumhosting.com
- Scope
- Catalonia (Spain)
Given the scale of the processing, it is not mandatory to appoint a Data Protection Officer (DPO). For any privacy matter you can contact support@electrumhosting.com.
02Data we process
Depending on your relationship with us, we may process the following categories of data:
| Category | Examples |
|---|---|
| Identifying and contact | Full name, ID number, address, email and phone. |
| Account data | Username, encrypted password, preferences and language. |
| Billing and payment | Billing address, order history and invoices. Full card details are NOT stored in our systems: they are processed by the payment gateway. |
| Technical and usage data | IP address, date and time of connection, service identifiers and access and server-activity logs. |
| Support | Ticket content, conversations and attachments. |
| Browsing | Cookies and similar technologies (see Cookie Policy). |
We do not process special categories of data (art. 9 GDPR). Please do not include sensitive data in support tickets.
03Purposes and legal basis
We process your data for the following purposes and legal bases:
| Purpose | Legal basis |
|---|---|
| Provision and management of the contracted services (sign-up, VPS provisioning, client panel). | Performance of the contract (art. 6.1.b GDPR). |
| Billing, collection and compliance with accounting and tax obligations. | Legal obligation (art. 6.1.c) and performance of the contract. |
| Technical support and customer service. | Performance of the contract (art. 6.1.b). |
| Security, fraud and abuse prevention, and record keeping. | Legitimate interest (art. 6.1.f) and legal obligation. |
| Sending commercial communications and newsletter. | Consent (art. 6.1.a). |
| Analytics or marketing cookies. | Consent (art. 6.1.a). |
04Retention periods
- Account and service data: while the contractual relationship is in force.
- Billing data: for the periods required by tax and commercial regulations (generally 4 to 6 years).
- Connection and security logs: for the time necessary to ensure security and comply with applicable legal obligations.
- Data processed with your consent (newsletter): until you withdraw it.
After those periods, the data is deleted or anonymized, or blocked at the disposal of the authorities during the limitation period for liabilities.
05Recipients and data processors
We do not sell your data. We only share it with third parties acting as data processors in order to provide the service to you, under a contract compliant with art. 28 GDPR:
- Billing and customer management platform (Paymenter), hosted at my.electrumhosting.com.
- Payment gateways (for example, PayPal and/or card processors) to handle payments.
- Infrastructure and datacenter providers where the servers are hosted (Spain, Germany and the United States).
- Email, messaging and support-tool providers.
We may also disclose data to public authorities, law enforcement and courts when there is a legal obligation.
06International transfers
Some of our nodes and providers are located in the United States (for example, the Miami location). When processing involves an international transfer of data outside the European Economic Area, this is carried out with the appropriate safeguards provided in articles 44 et seq. of the GDPR, such as the Standard Contractual Clauses approved by the European Commission or the provider's adherence to recognized protection frameworks (EU-US Data Privacy Framework). You can request information about these safeguards at support@electrumhosting.com.
07Your rights
You can exercise the following rights at any time:
- Access: know what data we process about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion when no longer necessary.
- Objection: object to certain processing.
- Restriction: request that processing be restricted.
- Portability: receive your data in a structured, commonly used format.
- Withdraw the consent given, with no retroactive effect.
To exercise them, write to support@electrumhosting.com stating the right you wish to exercise and attaching a copy of a document proving your identity. Exercising these rights is free of charge.
If you consider that we have not handled your request correctly, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.
08Data security
We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss or alteration: credential encryption, restricted access, platform backups, secure connections (HTTPS/TLS) and activity logging. However, no system is invulnerable; we recommend safeguarding your credentials and keeping your own backups of the data hosted on your service.
09Minors
Our services are aimed at adults. We do not knowingly collect data from children under 14 without the consent of the holders of parental authority or guardianship, under art. 7 of the LOPDGDD. If we detect that we have processed a minor's data without due authorization, we will delete it.
11Changes to this policy
We may update this Privacy Policy to adapt it to legislative changes or new processing. The current version is always the one published on this page, with its last-updated date. We recommend reviewing it periodically.
12Contact and complaints
For any matter relating to the protection of your data, contact the Controller, Edgar Torres Llavero, at support@electrumhosting.com. You can also turn to the Spanish Data Protection Agency as the supervisory authority.