Privacy Notice for End Users

Last updated: 2024-02-02

1. Introduction

IP-Fast ("We", "Us") is the data controller in respect of your personal data and is committed to protecting the privacy of your personal data when you visit our websites and buy one of our product offerings (together the "Services"). This Privacy Notice helps you understand what information we collect about you, why we collect it, how we process it and how long we store it. This Notice will also clarify how you can exercise your rights when you trust us to handle your personal data. Please read this Notice carefully and familiarize yourself with the contents. In case of questions, you can contact us by using the information about the controller.

Be aware that links to third-party company websites may be present within our Services. Should you choose to follow these links, understand that these external sites operate under their own privacy policies. We are not responsible for their handling of your personal data, so we encourage you to review their privacy notices carefully.

2. Name and address of the controller

The controller in line with the General Data Protection Regulation and other national data protection laws of the member states, as well as other legal data protection provisions, is:

Luiz Fernando Ribeiro Amaral, IP-Fast
Ferdinandstr. 40
21614 Buxtehude
Deutschland
Tel.: +49 4161 7323842
E-Mail: privacy@ip-fast.net
Website: www.ip-fast.net

3. General information on data processing

1. Description and scope of data processing

In general, we only process the personal data of our users when provided to us through the use of our Services. Our primary goal is to use consent as the legal basis for processing personal data. In certain circumstances however, we may process personal data on alternate legal bases, as indicated below.

2. Legal basis for data processing

If, for the purpose of processing personal data, we obtain the consent of the data subject, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for personal data processing.

When personal data processing is required for the fulfilment of a contract with the data subject, Article 6(1)(b) GDPR serves as the legal basis. Where pre-contractual actions are required, this legal basis also applies.

If it is necessary to process personal data for the fulfilment of a legal obligation which our company is subject to, Article 6(1)(c) GDPR serves as the legal basis.

If vital interests of the data subject or another natural person require personal data processing, Article 6(1)(d) GDPR serves as the legal basis.

If processing is required to safeguard the legitimate interests of our company or of a third party, and if the interests, fundamental rights, and freedoms of the data subject do not overweigh the interests of the former, Art. 6(1)(f) GDPR serves as the legal basis for processing.

3. Deletion of data and duration of storage

Personal data belonging to a data subject is deleted or anonymized as soon as a purpose for storage no longer exists. Storage of certain data may occur if required by EU law or Member State laws applicable to us.

4. Data security

We make reasonable effort to safeguard your personal data from unauthorized access, unauthorized use or falsification. Nonetheless, the submission of personal data, whether face-to-face, via phone or over the Internet, caries inherent risks, as no technological setup is entirely immune to potential interference or compromise.

The information collected from you is processed by us in accordance with German and European data protection law. Your data is always transmitted over encrypted connections using the SSL or TLS protocols.

4. Provision of our website and creation of log files

1. Description and scope of data processing

On every access to one of our Services, our system automatically collects data of the accessing computer.

The following data is collected:

2. Purpose of data processing

We need to store the IP address to allow the delivery of Services to the computer of the user. Additionally, we store the IP address and your log files in order to ensure the functionality of the Services, optimize the performance of the systems and safeguard the security of our systems. We do not merge this data with data from other data sources.

3. Legal basis for data processing

This processing is done under the legal basis of legitimate interest, Art. 6(1)(f) GDPR.

4. Storage duration

Log files containing personal data are deleted latest after 7 days, unless there is a legal requirement to store them for a longer period of time.

5. Possibility of objection and removal

The collection of data for the provision of the website and the storage of the data in log files are absolutely necessary for the secure operation of the website. Consequently, there is no possibility for the user to object to it, based on Art. 21(1) and 17(3)(f) GDPR.

5. Inquiries via email, contact form, phone

1. Description and scope of data processing

When we receive an inquiry from you via email, contact form or phone, your data will be processed to respond to your request.

a) Email

When contacting us via the provided email addresses, the personal data transmitted with the email is stored.

b) Contact form

If you choose the contact form option, the data entered in the form fields will be transmitted to us and store. These data are:

c) Phone

When contacting us via phone, your phone number, inquiry, name, date and time of contact will be stored and processed to handle your request.

2. Purpose of data processing

The processing of the personal data serves the purpose of handling your inquiry or support requests.

The other personal data processed during the submission process is used to prevent the misuse of the contact media and ensure the security of our computer systems.

3. Legal basis for data processing

The legal basis for this data processing is legitimate interest, Art. 6(1)(f) GDPR.

The legal basis for the processing with the purpose of concluding a contract or serving the contract execution is performance of a contract, Art. 6(1)(b) GDPR.

The legal basis for the processing with the purpose of fulfilling legal obligations and/or complying with regulatory requirements, is performance of a legal obligation Art. 6(1)(c) GDPR.

The legal basis for the processing with the purpose of establishing, defending, or exercising legal claims is legitimate interest, Art. 6(1)(f) GDPR.

4. Storage duration

Data is deleted as soon as it is no longer needed to fulfill the purpose for which it was collected.

5. Possibility of objection and removal

You have the right to withdraw the consent to the processing of your personal data at any moment, whether you've reached out through a contact form, email, or phone. If you choose to do so, we won't be able to proceed with the conversation, which might prevent us from resolving your matter effectively.

6. Use of cookies

1. Description and scope of data processing

Cookies are small pieces of data (text files) that are sent to your browser from a web server and stored on your device so that the website can recognize your device. There are two types of cookies, permanent (or "persistent") and temporary (or "session") cookies. Permanent cookies are stored as a file on your computer or mobile device for a longer period of time. Session cookies are temporarily placed on your computer or mobile device when you visit our Site, but are erased when you close your browser. To refuse cookies altogether, you can adjust the security preferences on your web browser to refuse cookies.

We, together with our service providers may use the following categories of cookies:

a) Essential Cookies

These cookies are strictly necessary for us to provide our Services. For example, we may use these cookies to authenticate and identify our users when they use our Site so we can provide our Services. Without these cookies we would not be able to recognize you and you would not be able to access our Services. They also help us to enforce our Terms and Conditions and maintain the security of our Services.

b) Functional Cookies

These cookies are not strictly necessary, but allow us to personalise your online experience of our Site. For example, they allow us to remember your preferences and mean that you do not need to re-enter information you have already provided e.g. when signing-up to our Services. We also use these cookies to collect information (e.g. popular pages, viewing patterns, click-throughs) about our visitors' usage of our Services so that we can improve our Site and Services and conduct market research. If you choose to delete these cookies you will have limited functionality of our Services.

b) Analytics Cookies

We use Analytics Cookies to collect information about your use of the site and help us improve its functionality. For example, they show us the most frequently visited pages on our Site, help us record any difficulties you have with our Site, and show us whether our advertising is effective or not. This allows us to see the overall patterns of usage on our Site, rather than the usage of a single person. We use the information to analyse the Site traffic, but we do not examine this information for individually identifying information.

2. Purpose of data processing

We use the information from cookies to provide personalization features and make our website more friendly to users.

Cookies are used several ways, including:

3. Legal basis for data processing

The legal basis for Essential Cookies use is legitimate interest, Article 6(1)(f) GDPR.

The legal basis for Analytics Cookies use is user consent, Article 6(1)(a) GDPR.

4. Storage duration

Data is deleted as soon as it is no longer needed to fulfill the purpose for which it was collected.

5. Possibility of objection and removal

You can prevent the storage of cookies on your computer by adjusting the "do not accept cookies" option in your browser settings or by declining the use of optional cookies on the first visit to the website.

We would like to point out that by preventing the use of cookies completely, you may not be able to use all of our website's functionalities to their full extent.

You can alter your cookie consent at any time by clicking here.

7. Use of third-party payment services

1. Description and scope of data processing

When you pay for our services, we might transfer your personal and/or billing related data to these payment partners. This is necessary for fulfilling the contract, for processing the payment.

Moreover, we may disclose your personal information if it's essential for safeguarding other users, defending against threats to national or public safety, or for the investigation of crimes, provided it is allowed under legal data protection regulations. We will take your interests into account as defined by these regulations. It's important to be aware that we might have to release data in response to legal obligations or directives, such as a court order (for instance, to law enforcement agencies). Such disclosures are strictly limited to what is necessary and legally sanctioned or required.

2. Purpose of data processing

We make use of third-party payment services to process payment transactions. In the event of unpaid obligations, we may enlist a debt collection agency or a lawyer to collect the outstanding debt.

3. Legal basis for data processing

This processing is done under the legal basis of performance of a contract, Article 6(1)(b) GDPR.

4. Storage duration

Your personal and/or billing related data will be stored by us for up to 10 years, in accordance with the legal requirement set by Section 257 of the German Commercial Code (Handelsgesetzbuch).

5. Data recipients

8. Use of third-party advertising services

1. Description and scope of data processing

We rely on digital advertising to promote our Services. We use different advertising networks to show our banners and ads. To track our advertising performance, we do not rely on third-party cookies or tracking pixels. All tracking takes place in our own servers and this data is not shared with any third-party.

2. Purpose of data processing

We use the advertising services to grow our user base.

3. Legal basis for data processing

This processing is done under the legal basis of legitimate interest, Article 6(1)(f) GDPR.

4. Storage duration

Data is deleted as soon as it is no longer needed to fulfill the purpose for which it was collected.

5. Data recipients

9. Use of third-party bookkeeping services

1. Description and scope of data processing

Our financial booking is done through a third-party provider. When your order a service or product from us and receive an invoice for it, the external provider will receive the personal data necessary for the issuance of the document.

2. Purpose of data processing

We use a third-party service provider to manage our bookkeeping.

3. Legal basis for data processing

The processing for the purpose of bookkeeping is done under the legal basis of performance of a contract, Article 6(1)(b) GDPR.

4. Storage duration

Your personal and/or billing related data will be stored for up to 10 years, in accordance with the legal requirement set by Section 257 of the German Commercial Code (Handelsgesetzbuch).

5. Data recipients

10. Use of other third-party services

1. Description and scope of data processing

When you order RIPE resources (IPv4 or IPv6 addresses, AS numbers, resource sponsoring), your personal data will be transferred to the RIPE NCC. This includes your full name, address, email address and telephone number.

In accordance with the RIPE policy and the RIPE agreement, when RIPE resources are assigned to you, your contact data will be published together with the assigned resources in the public whois database.

2. Purpose of data processing

Your data is processed when assigning IP address or AS number resources. This is required for the fulfillment of the contract.

3. Legal basis for data processing

This processing is done under the legal basis of performance of a contract, Article 6(1)(b) GDPR.

4. Storage duration

Your data in relation to RIPE orders will be stored for as long as you are holding RIPE resources. When you have no more resources being held, your data will be removed from the whois database.

5. Data recipients

11. Rights of the data subject

If we process personal data about you, you have the following rights:

1. Right of access

You have the right to obtain from us confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and the following information:

  1. the purposes of the processing;
  2. the categories of personal data concerned;
  3. the recipients or categories of recipient to whom the personal data have been or will be disclosed;
  4. where possible, the planned period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  5. the existence of the right to request from us rectification or deletion of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
  6. the right to lodge a complaint with a supervisory authority;
  7. where the personal data are not collected from you, any available information as to their source;
  8. the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.
  9. when your personal data is transferred to a third country or to an international organization, the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.

We will respond to your inquiry within a month upon receipt of the request.

2. Right to rectification

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

3. Right to erasure ("right to be forgotten")

You have the right to obtain from us the erasure of personal data concerning you without undue delay and we have the obligation to erase personal data without undue delay where one of the following grounds applies:

  1. the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  2. you withdraw consent on which the processing is based according to Article 6(1)(a) or Article 9(2)(a) GDPR, and where there is no other legal ground for the processing;
  3. you object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR;
  4. the personal data have been unlawfully processed;
  5. the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which we are subject;
  6. the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Where we have made the personal data public and are obliged pursuant to Article 17(1) GDPR to erase the personal data, we, taking account of available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

The right to erasure ("right to be forgotten") does not apply to the extent that processing is necessary:

  1. for exercising the right of freedom of expression and information;
  2. for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
  3. for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) as well as Article 9(3) GDPR;
  4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) GDPR in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
  5. for the establishment, exercise or defense of legal claims.

4. Right to restriction of processing

You have the right to obtain from us restriction of processing where one of the following applies:

  1. the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data;
  2. the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
  3. we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims;
  4. you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether our legitimate grounds override yours.

Where processing has been restricted, such personal data will, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If you have obtained restriction of processing pursuant to the above, we will inform you before the restriction of processing is lifted.

5. Right to briefing

If you have asserted the right to rectification, erasure or restriction of processing against us, we will notify all recipients to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort. You will be informed of these recipients, if you request it.

6. Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us, where:

  1. the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR; and
  2. the processing is carried out by automated means.

In exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible.

The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

This right to data portability shall not adversely affect the rights and freedoms liberties and rights of others.

7. Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions. We will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Where you object to processing for direct marketing purposes, the personal data will be no longer be processed for such purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

8. Right to withdraw consent

You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

You can revoke your consent at any time with effect for the future by clicking here and deselecting the "Analytics" and "Third-party" cookies.

9. Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision:

  1. is necessary for entering into, or performance of, a contract between you and us;
  2. is authorized by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
  3. is based on your explicit consent.

In the case of points (1) and (3), we will implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on our part, to express your point of view and to contest the decision.

However, these decisions may not be based on special categories of personal data referred to in Article 9(1) GDPR, unless Article 9(2)(a) or (g) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

12. Final provisions

We reserve the right to amend this Privacy Notice at any time to reflect changes in the law, our data collection and use practices, the features of our Services, or advances in technology. We will make the revised Privacy Notice accessible through our Services, so you should review the Privacy Notice periodically. You can know if the Privacy Notice has changed since the last time you reviewed it by checking the “Last Updated” date at the beginning of this document. If we make a material change to the Notice, you will be provided with appropriate notice in accordance with legal requirements. By continuing to use our Services, you are confirming that you have read and understood the latest version of this Privacy Notice.

© 2024 IP-Fast