Contractual foundations, privacy and legal information about BYTERONIX.
This policy transparently explains which personal data BYTERONIX processes, why it is required and which rights you have.
We process data only where necessary for the website, customer account, orders, payments, product operation and support, or where consent has been given. We do not sell personal data. We currently do not use analytics or marketing cookies.
The controller responsible for processing personal data is:
Lorscheid-EDV UG (haftungsbeschränkt)
Bahnhofstr. 8
37688 Beverungen
Germany
Email: info@byteronix.de
We process personal data in accordance with the principles of lawfulness, purpose limitation, data minimisation, accuracy, storage limitation and confidentiality.
Depending on the processing activity, we rely in particular on:
When you access our website or customer area, the server processes technically necessary connection data. This may include the IP address, date and time, requested address, transferred data volume, referrer, browser, operating system and error status. This data is used for delivery, stability, error analysis and protection against attacks.
We use technically necessary cookies for sign-in, session protection and CSRF protection. The selected language may be stored in the session. The light or dark mode preference is stored locally in the browser under byteronix-customer-theme
The legal basis is Article 6(1)(f) GDPR; Section 25(2) TDDDG applies to access to terminal devices. No analytics or marketing cookies are currently used.
Your cookie management selection is stored locally in the browser under
byteronix-cookie-consent
Optional categories remain disabled until you expressly enable them. You may change or reject your selection at any time using “Manage cookies” in the footer.
For registration and account administration, we process in particular your name, email address, customer number, address, date of birth, country, language and voluntary or business-related information such as company and VAT identification number. We also process account balance, bonus status, product assignments and account settings.
To protect the account, session identifier, IP address, browser or user agent, sign-in times, last activity and sign-out time may be logged. If two-factor authentication is enabled, the required secret is stored in encrypted form. A compatible authenticator app generates the codes locally.
The legal bases are Article 6(1)(b) and (f) GDPR.
For orders and renewals, we process the product, configuration, term, price, voucher, order status, balance movements and transaction description. This is necessary to review orders, provision products, correctly record balance movements and display a traceable transaction history.
We also process invoice, payment and contract data to comply with commercial and tax law obligations. The legal bases are Article 6(1)(b) and (c) GDPR.
To provision and manage webspaces, TeamSpeak servers and other products, we process the technical data required in each case. This includes, for example, product and package assignment, term, status, host system, technical identifiers, generated hostnames, access credentials, resource values, server port, server settings, backups and activity logs.
Required data is transmitted to the host, Plesk or TeamSpeak systems used for the product. Access credentials and product secrets are stored in encrypted form where provided. The legal bases are Article 6(1)(b) and (f) GDPR.
Where customers process third-party personal data through our hosting services, they are responsible for that processing. Where BYTERONIX acts as a processor, a data processing agreement pursuant to Article 28 GDPR may be required.
For paid top-ups and external donation payments, we use the payment service provider Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, the Netherlands.
In particular, the amount, currency, description, internal payment reference, selected payment method and return and notification addresses are transmitted to Mollie. Mollie and, where applicable, your selected payment provider process the data necessary for payment. We do not store complete card or online banking credentials. We store in particular the payment identifier, amount, payment method and status.
The legal bases are Article 6(1)(b) and (c) GDPR. Further information: Mollie privacy policy.
For the donation system, we process the recipient, optionally the signed-in donor account, donor name, email address, message, amount, payment method, payment status and payment reference. The name, message, amount and status may be shown to the recipient in their donation overview. The email address is not disclosed to the recipient.
A custom donation link and display name are publicly accessible when the customer uses this function. The legal basis is Article 6(1)(b) GDPR and, for security and abuse checks, additionally Article 6(1)(f) GDPR.
For support requests, we process contact details, customer number, company, ticket subject, category, priority, messages, attachments, status, assigned agent and timestamps. This data is transmitted to our centrally operated back-office and ticket system for processing.
The support PIN securely associates requests made outside the signed-in customer area. For this purpose, we store the association with the customer account, validity and use. The legal bases are Article 6(1)(b) and (f) GDPR.
For verification, product information, support, security notifications and other contract-related communications, we process the email address, subject, message content, delivery identifier and delivery time. Delivery data is transmitted through the configured email service.
Sent customer-related emails may be archived in the customer area and made available to the respective recipient. The legal bases are Article 6(1)(b), (c) and (f) GDPR.
Customers may voluntarily connect their account to Discord to join our Discord server and receive the customer role. We use Discord OAuth with identification and server-join permissions for this purpose. We process the Discord ID, Discord username and timestamps of the connection and role synchronisation.
As part of the connection, data is transmitted to Discord. For users in the European Economic Area, Discord names Discord Netherlands B.V. as the controller. Use is voluntary and based on your consent pursuant to Article 6(1)(a) GDPR. Consent may be withdrawn with future effect.
Further information: Discord privacy policy.
Personal data is received only by parties that require it for the respective purpose. These may include:
Where required, service providers are contractually engaged as processors. Personal data is not disclosed for advertising purposes or sold.
For individual services, particularly the voluntary Discord connection, processing outside the European Economic Area cannot be ruled out. Where data is transferred to a third country, we ensure compliance with Articles 44 et seq. GDPR, for example through an adequacy decision or appropriate safeguards.
We store personal data only for as long as required for the respective purpose, contract processing, security interests or statutory documentation and retention obligations.
Technical product data is generally removed when the product is permanently deleted unless further storage is required. Contract, payment and transaction data may be retained for longer due to statutory obligations. Support, email and security logs are deleted or anonymised once the purpose, retention obligations and legitimate interests no longer apply.
Where the statutory requirements are met, you have in particular the right to:
To exercise your rights, it is sufficient to send a message to info@byteronix.de. To prevent unauthorised disclosure, we may request proof of identity.
Where we process data on the basis of Article 6(1)(f) GDPR, you may object to this processing at any time for reasons arising from your particular situation. We will then no longer process the affected data unless compelling legitimate grounds or legal claims take precedence.
Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. The authority particularly responsible for our registered office is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia .
Further information and the complaint form are available at ldi.nrw.de.
We implement appropriate technical and organisational measures pursuant to Article 32 GDPR to protect data against loss, alteration and unauthorised access. These include access restrictions, encrypted transmission, secure storage of sensitive credentials and logging of security-relevant operations.
We update this privacy policy when functions, service providers or the legal situation change. The current version is available on this page.
Questions about privacy or your data? info@byteronix.de
