Legal

Privacy policy

Controller

Kevin Feiler Einzelunternehmen
Talstr. 19
71229 Leonberg
Germany
E-Mail: info@nexa24.de

Purposes of processing

• Provision and security of the customer area
• Registration, login, user account and support
• Provision, management, suspension and deletion of booked products
• Billing, balance, invoices, payments and dunning
• Abuse detection, abuse handling, DSA/TCO notices and legal obligations

Processed data

Depending on use, we process account and contact data, billing address, email address, login and security data, IP addresses, payment status, product data, server names, domain names, technical configurations, support messages and attachments uploaded by the customer.

Legal bases

Processing is carried out in particular on the basis of Art. 6(1)(b) GDPR for contract performance, Art. 6(1)(c) GDPR for compliance with legal obligations and Art. 6(1)(f) GDPR for security, error analysis and abuse prevention.

Payments, domains and service providers

For payments, payment data and payment status may be transmitted to connected payment service providers such as Mollie. sevDesk may be used for accounting. For domains, required registration and contact data is transmitted to the domain service provider or responsible registry. Technical service providers may be used for hosting, backups, email, DNS and infrastructure.

Cookies, sessions and logs

The customer area uses technically necessary cookies and local storage for login, sessions, CSRF protection, security and settings. Server and access logs may contain IP address, time, URL, browser data and technical status information.

Storage period

Data is stored only as long as necessary for operation, contract performance, support, security, evidence and statutory retention obligations. Accounting and invoice data may be subject to statutory retention periods.

Data subject rights

Data subjects have rights of access, rectification, deletion, restriction, data portability and objection. There is also a right to lodge a complaint with a data protection supervisory authority.