Privacy Policy

1. Who We Are

KrakenHosting is operated by Webbly Media Digital Solutions SL ("Webbly Media", "we", "us", or "our"), a Spanish limited liability company (CIF: B23883796) with registered offices at C. Buselas 3, 29649 Mijas, Spain. For privacy inquiries, contact us at legal@krakenhosting.io.

2. Scope of this Policy

This Privacy Policy applies to personal information collected and processed when you access or use the website krakenhosting.io, create an account, purchase hosting services, use our client portal, or communicate with our support and administrative teams.

This policy distinguishes between: • Customer Account Data: Information relating to the person or entity contracting with us for Services, for which we act as a Data Controller. • Customer Content: Data, software, websites, media, and files uploaded, stored, or processed on our servers by customers or their end users. With respect to Customer Content, the customer acts as the Data Controller and KrakenHosting acts strictly as a Data Processor.

3. Information We Collect

We collect information directly from you when you register, order services, or interact with us, as well as automatically through service operations:

• •Account & Contact Data: Account name, username, email address, and optional contact details.
• •Billing & Transaction Data: Payment method records, billing address, transaction IDs, tax identifiers where applicable, and invoice histories. We do not store complete payment card numbers or CVV codes; transactions are processed securely via PCI-DSS compliant third-party payment gateways.
• •Technical & Log Data: IP addresses, browser types, operating system details, access timestamps, and session identifiers collected to secure accounts, prevent abuse, ensure service stability, and comply with legal requirements.
• •Communications Data: Inquiries, tickets, support requests, and abuse notices sent to our team.
• •Customer Hosted Content: We do not actively inspect, monitor, or analyze Customer Content stored on servers, except as required to deliver the Services, respond to technical support requests authorized by the customer, or comply with applicable legal obligations and our Acceptable Use Policy.

4. How We Use Your Information

We use personal information for lawful and specified business purposes:

• •To provision, operate, maintain, bill, and support our hosting and network services.
• •To verify user accounts, authenticate logins, detect and prevent fraud, abuse, security breaches, and illegal activity.
• •To process transactions and generate invoices and accounting records.
• •To communicate critical service announcements, security alerts, scheduled maintenance, and policy updates.
• •To comply with legal obligations, court orders, subpoenas, and accounting regulations.

5. Legal Bases for Processing (EEA, UK, and Swiss Residents)

Where European, UK, or Swiss data protection laws apply, our processing of personal data is justified under the following legal bases:

• •Contract Performance (Art. 6(1)(b) GDPR): Processing necessary to establish, fulfill, bill, and service your hosting agreement.
• •Legitimate Interests (Art. 6(1)(f) GDPR): Processing necessary to protect network integrity, prevent fraud, secure infrastructure, and optimize customer service.
• •Legal Obligation (Art. 6(1)(c) GDPR): Processing required for compliance with tax, statutory accounting, and legal requirements.
• •Consent (Art. 6(1)(a) GDPR): Where you have given explicit consent for specific optional communications or features.

6. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We disclose personal information only in the limited circumstances described below:

• •Service Providers: Trusted third parties that perform services on our behalf (e.g., payment processors, fraud-prevention systems, datacenter partners, transactional email services). These providers have access only to data needed to perform their functions and are contractually bound to confidentiality.
• •Legal and Regulatory Disclosures: We may disclose information if required to do so by applicable law, regulation, subpoena, search warrant, or enforceable court order from a court of competent jurisdiction.
• •Protection of Rights and Safety: When necessary to investigate or prevent fraud, security threats, terms violations, or imminent danger to any person.
• •Corporate Transactions: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:

• Account and billing records are maintained for the active duration of the account and for statutory accounting and tax retention periods (typically up to seven years). • System and security access logs are typically retained for 30 to 90 days, unless preserved for an ongoing security investigation or legal proceeding. • Upon termination or cancellation of services, customer content is deleted in accordance with our standard decommissioning schedule.

8. Security Measures

We implement appropriate administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, destruction, loss, alteration, or disclosure. These include transport layer security (TLS/SSL encryption), access controls, segmented infrastructure, and secure server environments. However, no internet transmission or electronic storage is completely infallible, and customers remain responsible for safeguarding their account credentials and maintaining application-level security.

9. International Data Transfers

KrakenHosting is operated by Webbly Media Digital Solutions SL in Spain, and our infrastructure and service providers may be located in the United States and other jurisdictions globally. By using our Services, you understand that your personal data may be transferred to, stored, and processed in jurisdictions that may have different data protection laws than your country of residence. Where required, we implement standard contractual clauses or equivalent legal safeguards.

10. Your Privacy Rights

Depending on your jurisdiction (including the EU/EEA, United Kingdom, and certain US states such as California), you may have rights regarding your personal information, including:

• •Right of Access: Request confirmation of whether we process your personal data and obtain a copy of that data.
• •Right to Rectification: Request correction of inaccurate or incomplete personal information.
• •Right to Erasure ("Right to be Forgotten"): Request deletion of personal information where no legal basis for retention exists.
• •Right to Restriction & Objection: Object to or restrict processing of your personal data under certain conditions.
• •Right to Data Portability: Receive your account information in a structured, commonly used, machine-readable format.
• •Non-Discrimination: You will not be discriminated against for exercising your statutory privacy rights.

To exercise your rights, email legal@krakenhosting.io. We may verify your identity before processing requests.

11. Cookies and Tracking Technologies

We use strictly necessary cookies to authenticate users, maintain active sessions, and provide essential navigation and security features. We do not use intrusive third-party behavioral advertising trackers or sell web-browsing profiles. You may manage cookie preferences through your browser settings, though disabling essential cookies may impact service functionality.

12. Children's Privacy

Our Services are intended exclusively for commercial, professional, and adult consumer use. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that a minor has provided us with personal information, we will delete it promptly.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, technological, or legal developments. The updated version will be indicated by an updated "Effective" date at the top of the policy. We encourage you to review this policy periodically.

14. Contact Information and Supervisory Authority

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact:

Webbly Media Digital Solutions SL Attn: Legal & Privacy C. Buselas 3 29649 Mijas, Spain Email: legal@krakenhosting.io

If you reside in the EEA or UK and believe our processing infringes data protection laws, you also have the right to lodge a complaint with your local data protection supervisory authority.