Privacy policy

Only the German version is legally binding.

1. Controller

[please add], [please add], [please add], Germany, email: [please add]

2. Data we process and why

Customer account: name, email address, password (stored only as a hash), optionally a two-factor secret – to perform the contract and manage your domains (Art. 6(1)(b) GDPR).

Orders and domain registration: billing and owner data (name, organisation, address, phone, email). For registration we pass the owner data to our technical provider, Domain Reseller API (Wolfscastle, Joshua Gerke, Wolfsburg, Germany), and through it to the responsible registry (e.g. DENIC eG for .de, EURid for .eu, registries for generic extensions such as .com). For generic extensions data may be transferred outside the EU (e.g. USA); depending on the extension, registries publish parts of the data in WHOIS/RDAP. Legal basis: Art. 6(1)(b) GDPR.

WHOIS protection (optional, private individuals): when active, registries publish proxy data instead of your contact details. Requests from third parties to the domain owner (e.g. via email forwarding) are processed by us or our provider, Domain Reseller API, to forward them to you or answer them (Art. 6(1)(b) GDPR). Without WHOIS protection, parts of your owner data may be publicly available depending on the extension.

Payment: payments are processed by Stripe Payments Europe, Ltd. (Dublin, Ireland). Card data never reaches our server. Legal basis: Art. 6(1)(b) GDPR.

Invoices: created via Stripe Invoicing and retained as required by law (Art. 6(1)(c) GDPR, generally ten years).

Emails: system emails are sent via [mail provider, e.g. Resend, Inc., USA – basis: standard contractual clauses / Data Privacy Framework].

Support and contact form: name, email, subject and message to answer your request (Art. 6(1)(b) or (f) GDPR).

Audience measurement (Plausible): We use Plausible Analytics, self-hosted on our server (analytics2.wieser-server.de). No cookies are set and no personal data is stored; page views are only counted anonymously (shortened, non-reversible identifier derived from IP address and browser details, changing daily). Legal basis: Art. 6(1)(f) GDPR.

Error monitoring (GlitchTip): On technical errors, browser and server send an error report (error text, code location, page visited without parameters, browser and system type) to our self-hosted GlitchTip instance (errors.wieser-server.de). No user data, cookies, form contents or IP addresses are transmitted. Legal basis: Art. 6(1)(f) GDPR.

Server logs: technically necessary data (IP address, time, page) for at most [14] days for secure operation (Art. 6(1)(f) GDPR). Hosting: [add provider/location].

3. Cookies and local storage

We only use a technically necessary session cookie for sign-in. The cart is kept in your browser's local storage and is not shared. There are no advertising or tracking cookies.

4. Retention

We delete data once it is no longer needed and no retention obligation applies.

5. Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR) and the right to lodge a complaint with a supervisory authority. Contact us at [please add].

No automated decision-making takes place.