Privacy Policy and GDPR Compliance Notice

This Privacy Policy describes how we collect, use, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and applicable local laws.

1. Data We Collect

We may collect the following categories of personal data:

• IP address and geolocation data
• Access logs including requested URLs and timestamps
• Error logs for diagnostic purposes
• Authentication data where applicable (anonymized)

2. Purpose of Data Processing

The data collected is used solely for the following legitimate purposes:

• Maintaining and ensuring system security and integrity
• Preventing abuse, fraud, and malicious activities including DDoS attacks
• Monitoring system performance and error diagnostics
• Improving the quality and reliability of our services

3. Legal Basis for Data Processing

Data is processed under the legal basis of legitimate interest (GDPR Article 6/1-f) for the establishment, exercise, or defense of legal claims, and for ensuring the secure and reliable operation of our services.

4. Data Retention Period

We retain collected data for no longer than 90 days, unless otherwise required by law or for the establishment, exercise, or defense of legal claims. After this period, data is securely deleted.

5. Data Sharing and Transfer

Personal data is only accessible to authorized technical personnel and may only be shared with competent authorities when required by applicable law.

6. Your Rights

You have the right to access, rectify, erase, or restrict the processing of your personal data. You may also object to the processing of your data or exercise your right to data portability under applicable laws.