Privacy policy
Below you can see our new GDPR compliant privacy policy
Privacy policy Webhosting24
For INCUBATEC S.r.l. (“Webhosting24”), protecting your personal data is a priority. We comply with all relevant data protection legislation and the following privacy notice is intended to provide transparency about how we handle your personal data.
Personal data and the provision of services
When you order one of our products, we only ask for information that is essential to deliver our products and services to you or for invoicing reasons. In most cases this is limited to name, address, contact data and bank details.
1. Contract and invoicing data
Prior to sign up
On the Webhosting24 web pages we offer prospective and actual customers practical tools and services, for example, to check how easy it is to locate your website or company on the Internet. The tool needs only some basic address data. For the best results and continous improvement of our services, your entries are recorded anonymously.
Sign up
Upon ordering our products, we ask for data we need to provision the services. Your data is stored securely on our systems and you are able to access and change your data in our control panel. Information on how you access the control panel will usually be sent by email or alternatively by post.
Billing
In order to provide you with transparent billing, it is necessary to temporarily store certain usage data. Examples include your configurations of our Cloud-Server or performance of our Webhosting products, if those are the basis for billing. Whether your product usage data is recorded, will be in the respective product chapter in this privacy notice.
2. Usage and content data
Usage data
We aim to provide quality and reliability but on occasion, issues may arise. In order to react quickly, it may be necessary to temporarily record usage and traffic data to provide to our Support staff. We do this to ensure we fulfil our obligations to you and to design products and services aligned to your needs
Content data
We offer certain products, for example, online storage or email accounts, where personal files may be stored. These files are automatically encrypted and may only be viewed by individuals with access rights. In order to protect your data and for maintenance purposes, we create and file encrypted backups. The file contents of these backups can not be decrypted or viewed by us.
3. Usage of your data
The usage of your personal data
Some of your personal data we need for processing your order and for providing customer focused services.
Data processing upon receiving your order
Our commitment to you is to provide value for money top products and servicesto our customers. In order to ensure smooth and trouble-free order processes, your order is thoroughly vetted and invest in fraud prevention before confirming your contract.
Contract and customer information
You will receive the order confirmation and information by email. We use the email address you have provided to order the product. You will also receive your invoices and helpful information in the same manner.
Product information
In order to fully capture the benefits of our products, we send you tips, tricks and useful complementing product solutions by email andcontrol panel. Wee may also inform you about interesting new products via telephone, provided that you have consented to receive such information. . If you wish to stop receiving information of this kind, you can always revoke your consent in the control panel.
Usage data as part of our services and products
Certain data is recorded during use of our products and services to enable us to identify issues with our products and to continously improve our products and services. In order to ensure the safety of your personal data, we pseudonymize or anonymize such personal data prior to any analysis.
Opinion polls
In order to offer you the best possible products and services, we do need your support. Therefore, we send out surveys to our customers from time to time via email or provide them on our websites. Participation in these surveys is optional and you may revoke your consent to receiving opinion polls from us after the first email.
4. Transferring data to third parties
Webhosting24 is part of INCUBATEC S.r.l.
We, and other subisidaries and affiliates, are part of INCUBATEC S.r.l.. In order to avoid duplicate copies of address data and adhere to negative data, as for example email black lists, it is sometimes necessary to transfer customer data to INCUBATEC S.r.l. and its affiliates.
External partner companies
As we work with selected partners to offer you a wide range of productsand sometimes act as an intermediary for our partners, it is necessary to transfer certain personal data to third parties, for example, registering domain namesor issuing SSL certificates.
Law enforcement
Occasionally,we are obliged to disclose personal data to prosecution authorities and courts for law enforcement purposes. We always ask for the correct paperwork before disclosing any information.
Reporting of faulty products and fraud
In case of faulty products or disagreements and we are committed to seek amicable solutions. Is this not possible, we evaluate the situation carefully, when and to whom we report faulty products or fraudulent usage.
Cookies
For information on the cookies we use, please click here.
Product specific data protection information
With some of our products we rely on the expertise of specialised partner companies to ensurethat we provide the best possible products and services experience. In the event you cease to use our products and services, we will delete your personal data within a given timeframe.
Webhosting
Content Delivery Network CDN
Purpose of processing
Using CDNs content data will be stored in Cloudflare data centers.
Categories of personal data
Content data, usage data, traffic data
Legal basis
Contract performance
Involved third parties
Cloudflare, San Francisco, USA
WebSite Creator
Purpose of processing
Editing and publishing of a website
Categories of personal data
Usage data, content data
Legal basis
Contract performance
Involved third parties
cm4all AG, Köln, Germany
Mobile Website Builder
Purpose of processing
Creation, editing and publishing of a website
Categories of personal data
Usage data, content data
Legal basis
Contract performance
Involved third parties
Afilias plc, Dublin, Ireland
Google Sitemaps
Purpose of processing
Using Google Sitemaps Google information is provided to make the content of the webspace accessible via Google Search.
Categories of personal data
Content data
Legal basis
Contract performance
Involved third parties
Google, Mountain View CA, USA
SiteLock911
Purpose of processing
Using SiteLock911, malware is recognised and automatically and deleted.
Categories of personal data
Content data
Legal basis
Contract performance
Retention period
SiteLock stores the webspace of customer for 7 days (the grace period). Deletion of personal data is within 30 days after cleanup.
Involved third parties
SiteLock, Scottsdale, USA
MyWebsite
Current product generation
Website Editor
Purpose of processing
Editing and publishing of website
Categories of personal data
Contact data, content data
Legal basis
Contract performance
Involved third parties
Duda Inc., Tel Aviv, Israel
Amazon Web Services, Inc., Seattle WA, USA
Webspace
Purpose of processing
Hosting of website
Categories of personal data
Contact data, content data
Legal basis
Contract performance
Involved third parties
AWS – Amazon Web Services, Datacenter Frankfurt, Germany
Amazon Web Services, Inc., Seattle WA, United States
Online Business Card
Purpose of processing
Fast publishing of an online business card. Customers have the choice of which information will be displayed on this business card. User data will be sent to Google and Facebook in order to display publicly available information.
Categories of personal data
Contract data, usage data, content data
Legal basis
Contact performance
Involved third parties
Google, Mountain View CA, USA
Facebook, Menlo Park CA, USA
Shop
Purpose of processing
Seamless integration of an online shop in the Website-Editor using personal data to prefill the shop. For example, the email address of the customer is used as the standard email address of the shop.
Categories of personal data
Contact data
Legal basis
Contract performance
Involved third parties
Ecwid, Encinitas CA, USA
Image editor
Purpose of processing
A webservice is used in order to edit images in the Website-Editor, for example to add effects, adjust colours and brightness or to adjust the size of a picture.
Categories of personal data
Content data
Legal basis
Contract performance
Involved third parties
Adobe Systems Inc. (former: Aviary), San José CA, USA
Route description
Purpose of processing
MyWebsite uses address data to show the location of a company on a map. In order to do so the product transfers this data to Mapbox. This takes place automatically when setting up the first project.
Categories of personal data
Contact data
Legal basis
Contract performance
Involved third parties
Mapbox, Washington D.C., USA
Website Translator
Purpose of processing
MyWebsite sends the text content of the website to Google Translate in order to translate the content to one or several other languages. This takes place when the custome sets up multilanguage texts.
Categories of personal data
Content data
Legal basis
Contract performance
Involved third parties
Google, Mountain View CA, USA
Multi Location
Purpose of processing
MyWebsite uses adress data to mark one or several locations of a company on a map. Data is sent to the map company Mapbox. This takes place automatically when adding this widget and with additional locations.
Categories of personal data
Contact data, content data
Legal basis
Contract performance
Involved third parties
Mapbox, Washington D.C., USA
MyWebsite (Vers. 8)
Google Maps
Purpose of processing
MyWebsite 8 transfers address data of the customer to Google in order to prefill address data in the Google maps module or if selected sends another stored address to Google.
Categories of personal data
Contact data, content data
Legal basis
Contract performance
Involved third parties
Google, Mountain View, USA
Google Sitemaps
Purpose of processing
When a domain is connected to a website project, MyWebsite transfers the data to the Google Sitemap-service in order to improve SEO results for the customer.
Categories of personal data
Contact data
Legal basis
Contract performance
Involved third parties
Google, Mountain View, USA
My Data
Purpose of processing
On the publishing of the MyWebsite homepage customer and other user defined data will be added to the website in schema.org format, in order to support search engines and improve SEO results.
Categories of personal data
Contact data, Content data
Legal basis
Contract performance
Involved third parties
Public
MyShop
Please see the entry on the Webhosting24 eShop for information on the MyShop integration.
Image editor
Please see the entry on the image editor of the current product generation
Domain & SSL Certificate
Domain
Purpose of processing
Registering, transfer, configuration, maintenance and deletion of the domain name
Categories of personal data
Contact data
Legal basis
Contract performance
Retention period
Differs for the various top level domains (TLDs) depending on the Registrar Accredation Agreement (RAA) of the registry.
Involved third parties
A dedicated overview for regitries and escrow provider is available here.
SSL certificate
Purpose of processing
Registering, transfer, configuration, mainteance and deletion of SSL certificates. Automatic processing in MyWebsite products when connecting the domain with the website project.
Categories of personal data
Contact data
Legal basis
Contract performance
Involved third parties
DigiCert, Lehi UT, USA
Note
In the process of acquisition and maintenance of SSL certificates, Webhosting24 is only an intermediary between the customer and the respective issuer of the SSL certificate. Webhosting24 has no influence on the issuance of certificates and does not accept any liability that the certificate is assigned to the customer and that it will permanently exist.
Webhosting24 eShop, E-Mail & Office & weitere Produkte
Webhosting24 eShop
Purpose of processing
Editing, maintenance and operation of online shops oft he customer.
Categories of personal data
Contact data, content data
Legal basis
Contract performance
Retention period
Shop data will be deleted 31 days after contract termination.
Involved third parties
ePages, Hamburg, Germany
Webhosting24 Mail
Purpose of processing
Provision of email services, including setting up, configuring and deleting email addresses
Categories of personal data
Contact data, content data, traffic data
Legal basis
Contract performance
Retention period
7 days after deletion/ termination
Involved third parties
Open-Xchange, Nürnberg, Germany
Hosted Exchange
Purpose of processing
Provision of email services, including setting up, configuring and deleting email addresses
Categories of personal data
Contract data, content data, traffic data
Legal basis
Contract performance
Retention period
End of contract lifetime
Microsoft Office 365
Purpose of processing
Usage of Microsoft Office 365, including setting up, configuring and deletion of accounts and users
Categories of personal data
Contract data, content data
Legal basis
Contract performance
Retention period
User data will be stored up to one year after termination of the license.
Involved third parties
Microsoft, Redmond WA, USA
T-Systems International, Frankfurt am Main, Germany
List Local
Purpose of processing
Publishing and synchronisation of company data in online listings to improve rankings in search engines
Categories of personal data
Contact data, content data
Legal basis
Contract performance
Retention period
30 days after termination of the contract
Involved third parties
uberall, San Francisco CA, USA
rankingCoach
Purpose of processing
Optimisation of search rankings of customer websites in Google search engine. Using the pro version and additionally setting up Google ad word campaigns
Categories of personal data
Contact data
Legal basis
Contract performance
Involved third parties
rankingCoach, Köln, Germany
Search Engine Marketing
Purpose of processing
Setting up and managing Google Ad Words campaigns for the customer website.
Categories of personal data
Contact data
Legal basis
Contract performance
Retention period
30 days
Involved third parties
Latitude, Warrington, UK
Webhosting24 Online Accounting
Purpose of processing
Online accounting and billing
Categories of personal data
Contact data
Legal basis
Contract performance
Retention period
End of contract lifetime
Involved third parties
SEVENIT, Offenburg, Germany
Hosting Mobile App
Purpose of processing
Mobile access to the Webhosting24 Control-Center.
Categories of personal data
Contact data, usage data
Legal basis
Contract performance
Retention period
12 months for usage data
Involved third parties
Adobe Analytics, San José CA, USA
Google, Mountain View CA, USA
Webhosting24 WebAnalytics
Purpose of processing
Statistic analysis and technical optimisation of the web offering. Data is process fully anonymised.
Categories of personal data
Contact data, usage data, content data
Legal basis
Contract performance
Server
The following information applies to Cloud Servers, Dedicated Servers, Virtual Server Cloud, vServers & Bare Metal Server products:
With respect to the products above, the customer decides which personal data is processed in which way.
Categories of personal data
Defined by the customer
Retention period
Defined by the customer
Legal basis
Defined by the customer
Involved third parties
Defined by the customer
Transparency is our aim
All data we receive from you during the lifetime of your contract is used primarily to provide the level of service you would expect. All internal analysis performed to improve products and services is conducted in full compliance with existing data protection legislation and is anonymised or pseudonymised.
Your rights
Apart from the right to information, you are also have the right to have your data corrected if it is incorrect, a right to be forgotten andthe right of portability of your data. You have the right to object to the processing of your data.
If you wish to exercise one of these rights, please contact our data protection officer and we get this done for you.
Please contact the following address:
INCUBATEC S.r.l.
V. Scurcia’str. 36
39046 Ortisei BZ
Italy
Supervisory authorities
You have the right to file a complaint with the respective supervisory authority:
https://www.garanteprivacy.it/
Here you can download our current privacy policy in PDF format.
Last update: May 2018