Controller: ScyHost. Contact for data protection: privacy@scyhost.com.
What we process and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Name, email, phone, address, company and tax number | Orders, account, invoicing, support | Contract (Art. 6(1)(b)); legal obligation for invoices (Art. 6(1)(c)) |
| Payment confirmation (PayPal transaction ID, amount) | Confirming payment, accounting | Contract; legal obligation |
| Contact form, chat and ticket messages | Answering your enquiry | Your request / legitimate interest (Art. 6(1)(f)) |
| IP address and technical logs | Security, abuse prevention, rate limiting | Legitimate interest |
Recipients
PayPal (Europe) S.à r.l. et Cie, S.C.A. processes payments as an independent controller. Domain registries and registrars receive the registrant data required for registration (for .hr, CARNET). We do not sell personal data and do not use advertising or analytics trackers on this website.
Retention
Account data for the duration of the contract; invoices and accounting records for the period required by law (in Croatia generally 11 years); enquiries without a contract up to 12 months; security logs up to 90 days.
Your rights
You have the right of access, rectification, erasure, restriction, portability and objection. Write to privacy@scyhost.com. You may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP, azop.hr).
Website data you host
For data your website collects from its visitors, you are the controller and we act as processor, processing it only to provide the hosting service.