Хостинг от ERA Host
EraHost – Free Domain, Cheap Hosting!
Client Area
Support 24/7
USD
Menu

Personal Data Processing (GDPR)

1. Purpose of Processing Personal Data

Personal data is processed for the following purposes:
  • - provision of web hosting services and allocation of disk space,
  • - registration, renewal, and administration of domain names,
  • - maintenance and operation of user accounts,
  • - fulfillment of contractual obligations toward the client,
  • - compliance with applicable European Union legislation.
The legal basis for processing is Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(c) GDPR (compliance with a legal obligation).

2. Processing of Personal Data

Personal data is processed in accordance with:
  • - Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR),
  • - applicable national laws of EU Member States,
  • - the principles of lawfulness, fairness, transparency, and data minimization.
Processing operations may include collection, recording, organization, structuring, storage, use, restriction, deletion, or destruction of data.

3. Data Retention Period

Personal data is stored and processed:
  • - for the duration of the service agreement,
  • - for the period required to comply with accounting and legal obligations,
  • - for the time necessary to resolve disputes, if applicable.
After the applicable retention period expires, personal data is deleted or anonymized, unless further storage is required by law.

4. Erasure of Personal Data

The data subject has the right to request deletion of personal data in accordance with Article 17 GDPR (Right to Erasure).
Deletion may be carried out provided that:
  • - there are no active contractual obligations,
  • - there are no statutory data retention requirements,
  • - there are no unresolved financial or legal obligations.
Upon a valid request, data will be deleted or anonymized within a reasonable timeframe.

5. Rights of the Data Subject

Under the GDPR, the data subject has the right to:
  • - access their personal data (Article 15),
  • - rectification of inaccurate data (Article 16),
  • - erasure of personal data (Article 17),
  • - restriction of processing (Article 18),
  • - data portability (Article 20),
  • - object to processing (Article 21),
  • - lodge a complaint with a supervisory authority.
Requests may be submitted via the user account or through the company’s official contact details.

6. Data Minimization Principle

In accordance with Article 5(1)(c) GDPR, the company applies the principle of data minimization.
For registration and access to the service, only the minimum necessary data is required:
  • - email address (used as the account identifier),
  • - password created by the user and stored in encrypted (hashed) form.
Additional data is collected only where necessary to fulfill contractual or legal obligations (for example, billing purposes).

7. Security of Processing

The company implements appropriate technical and organizational measures to protect personal data, including:
  • - encrypted connections (HTTPS),
  • - restricted access to data,
  • - activity logging,
  • - protection of server infrastructure.