Source: https://www.a2hosting.com.co/about/website-privacy
Timestamp: 2019-04-20 08:53:37+00:00

Document:
Thank you for your interest in our Internet presence. The protection of your personal data (hereinafter also “data” or “PI”) is a very important concern for us. Capitalized terms used but not defined in this policy have the meaning given to them in our Terms of Services, located at: https://www.a2hosting.com/about/policies#Terms-Of-Service.
It is represented by the CEO Bryan Muthig.
A2 Hosting is subject to the investigatory and enforcement powers of the Federal Trade Commission.
If we transfer your PI to third parties, we will remain responsible and liable to you if the third party processes your PI in violation of the Privacy Shield Principles, unless we prove we were not responsible for the event giving rise to the damage.
Under certain conditions, you may also have the right to invoke binding arbitration before the Privacy Shield Panel to be created by the US Department of Commerce and the European Commission or Swiss Government.
A2 Hosting has further committed to refer unresolved privacy complaints under the Privacy Shield Principles to BBB EU PRIVACY SHIELD, a non-profit alternative dispute resolution provider located in the United States and operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit www.bbb.org/EU-privacy-shield/for-eu-consumers/ for more information and to file a complaint.
We may use PI as required or permitted by law, including in response to service of legal process (court order, summons, subpoena, and the like). We may disclose PI to law enforcement or regulatory authorities as part of an investigation into activity at the Site (such as a suspected breach). We shall use commercially reasonable measures to limit disclosure and use of such PI. We may use PI in connection with the establishment or defense of legal claims. Any information sent to us will not be deemed to be confidential, and may be shared by us with any other individual or entity, regardless of whether you mark it confidential.
We do not knowingly collect personally identifiable information from children under the age of 13. If a parent or guardian believes that their child under the age of 13 has provided us with personally identifiable information, they should contact us.
Insofar as we obtain the data subject’s consent for processing, Art. 6 (1) Clause 1 lit. a) GDPR is the legal basis.
In case of processing of personal data necessary for the fulfillment of a contract, the legal basis is Art. 6 (1) Clause 1 lit. b) GDPR.
Insofar as processing of personal data is necessary for the fulfillment of a legal obligation, the legal basis is Art. 6 (1) Clause 1 lit. c) GDPR.
In the event that vital interests of the data subject or of another natural person require a processing of personal data, the legal basis is Art. 6 (1) Clause 1 lit. d) GDPR.
If processing is necessary to safeguard legitimate interests of our company or of a third party and if the interests, basic rights, and basic freedoms of the data subject do not outweigh these legitimate interests, the legal basis for processing is Art. 6 (1) Clause 1 lit. f) GDPR.
The data is stored on our servers. This data is not stored together with other personal data except those stated above. The temporary storage of the IP address by the system is necessary to allow delivery of the website to the user’s computer. For this purpose, the IP address of the user must be stored for the duration of the session. We create so-called log files from this data. The created log files are stored to safeguard the security of our IT systems. A personal evaluation of the data, in particular for marketing purposes, does not take place.
Processing of the above data is required for technical reasons to offer a website pursuant to Art. 6 (1) Clause 1 lit. b), lit. c), lit. f) GDPR in order to correctly display our website to you and to safeguard stability and security. In particular, log files are created to verify attacks on our systems. We erase server log data from our systems at the latest after 7 days.
If you wish to place an order through our shopping cart, it is necessary for the conclusion of a contract that you disclose your personal data, which we require to process your order. Mandatory information necessary for processing of contracts is marked separately, additional information is voluntary. We process the data disclosed by you to process your order. We may also forward your payment information to our bank. We may also process the data disclosed by you in order to inform you of additional interesting products in our portfolio, or to send you emails with technical information. The legal basis for this is Art. 6 (1) Clause 1 lit. b GDPR.
There will be set up a customer account through which we can store your data for additional future purchases. You can also use the log-in area to manage and set up your contracts and purchased products. You can manage change and delete information in your account. The legal basis for the creation of a customer account is Art. 6 (1) lit. b) GDPR. We are furthermore authorized to retain your utilized IP addresses as well as the time of registration and confirmation in order to verify your registration and to clarify a possible abuse of your personal data, if necessary. The legal basis for this is Art. 6 (1) Clause 1 lit. c and f GDPR.
To prevent unauthorized access of third parties to your personal data, in particular financial data, the ordering process is encrypted through TLS technology.
In case of contacting by contact form, email or telephone, your data is processed, depending on the content of the request, for purely informational inquiries based on your (assumed) consent pursuant to Art. 6 (1) Clause 1 lit. a) GDPR or pursuant to Art. 6 (1) Clause 1 lit. b) GDPR, insofar as contacting is connected to contractual performance obligations. In case of contacting through our form, we require only your name and email address in order to reply to you. Your information may be stored in a customer relationship management system (“CRM system”).
We delete your contact requests immediately after they are processed, unless statutory retention periods require additional retention.
With your consent, you can subscribe to our newsletter in which we inform you of our current interesting offers.
We used the so-called double opt-in process for registration to our newsletter. This means that after your registration, an email is sent to the disclosed email address, in which we ask you to confirm your request to receive the newsletter. If you do not confirm your registration through the hyperlink within 24 hours, your information is blocked and erased after the expiration of one month. We furthermore retain your utilized IP addresses and the time of registration and confirmation. The purpose of this process is to verify your registration and clarify a possible abuse of your personal data, if necessary. Only the disclosure of your email address is required to receive the newsletter. All other disclosed information is voluntary and will be used to allow us to address you personally. After your confirmation, we store your email address for sending you the newsletter. The legal basis for this is Art. 6 (1) Clause 1 lit. a) GDPR.
To unsubscribe from the newsletter, you can click on the link provided in every newsletter email, send an email to [email protected]2hosting.com.
Please note that we analyze your user behavior when sending the newsletter. For this analysis, the emails sent by us contain so-called web beacons or tracking pixels, which are one-pixel images that are stored on our website. For the analysis we combine the data listed under “Server log files” and the web beacons with your email address and an individual ID.
You may request that we delete your PI, and we shall attempt to accommodate such requests. However, we may retain and use PI for such periods of time as required or permitted by law or best business practices.
Right to object (Art. 21 GDPR).
You also have the right to complain to a data protection supervisory authority concerning the controller’s processing of your personal data.
We maintain presences in social media in order to communicate with customers and prospective customers there and to keep them informed. When retrieving the relevant networks, the terms and conditions of the operators apply.
In some cases, we use external service providers to process your data, which are bound to our instructions. They were selected and commissioned by us with care and they are monitored regularly. The orders are based on data processing agreements pursuant to Art. 28 GDPR. The processor does not independently process data for its own purposes.
We use a hosting provider to operate this web offer, who processes inventory data, contact data, content data, contract data, utilization data, metadata, and communication data from visitors or customers of this web offer within the scope of our legitimate interest in an efficient and secure provision of this online offer pursuant to Art. 6 (1) Clause 1 lit. f), 28 GDPR. If we transfer your data to third parties, we will remain responsible and liable to you if the third party processes your data in violation of the Privacy Shield Principles, unless we prove we were not responsible for the event giving rise to the damage. In any case, we oblige third parties to protect your privacy at least to the extent specified in this data protection declaration.
HIPAA (The Health Insurance Portability and Accountability Act) does not apply to the service we provide. We are not a “Covered Entity” or a “Business Associate” as those terms are defined by HIPAA. As HIPAA does not apply, our service does not need to and may not meet the standards set forth in HIPAA. Accordingly, using the service should not be used submit, store, or disclose information that would be subject to HIPAA in a manner that is compliant with HIPAA and its requirements.
Pursuant to our Terms of Service (located at https://www.a2hosting.com/about/policies#Terms-Of-Service), you may provide us with an Endorsement in connection with your use of the Services. We may, at our discretion, use the Endorsement to promote our Services as specified in our Terms of Service. In connection with our use of your Endorsement, you hereby agree that we may use your first name, last initial, home state, voice or likeness, and/or contact information in connection with its publication of the Endorsement. If, at any time, you want us to stop using your Endorsement, please contact us using the contact information in Section 19 of our Terms of Service and we will cease using the Endorsement soon after processing your request. The legal basis for this is Art. 6 para. 1 lit. a GDPR.
We use so-called session cookies (also called “temporary cookies”) as cookies that are exclusively stored for the duration of your use of one of our websites. It is necessary for technical reasons to permit session cookies to fully use all functions of our Internet presence. It is the purpose of these cookies to identify your computer during your visit of our Internet presence when changing from one of our websites to one of our other websites and to determine the end of your visits. Persistent cookies are deleted automatically after a specified duration, which may differ depending on the cookie. You can at any time delete cookies in the security settings of your browser.
You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. Please note the following with regard to third-party cookies.
Google is certified under the Privacy Shield Treaty and thus offers a guarantee that it complies with the European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
We inform you that, on this website, Google Analytics was expanded by the code “anonymizeIp” in order to guarantee anonymized capture of IP addresses (so-called “IP masking”). By activating IP anonymization on this website, your IP address within member states of the European Union or other contracting parties to the Agreement on the European Economic Area is first abbreviated by Google. The full IP address is transmitted to a Google server in the USA and abbreviated there only in exceptional cases. Google uses this information on behalf of the operator of this website to evaluate your use of the website, to create reports concerning website activities, and to provide other services in connection with website use and Internet use vis-à-vis the website operator. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data held by Google. Pseudonym profiles of users may be created from the processed data. The IP address transmitted by your browser is not combined with other data held by Google.
You can prevent the collection of the data generated by the cookie and relating to your use of the website to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
For more detailed information on the terms and conditions of use and data protection, please visit: http://www.google.com/analytics/terms/de.html or http://www.google.com/intl/de/analytics/privacyoverview.html.
We use the conversion and tracking tool “Bing Ads” from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft stores cookies on your device in order to enable an analysis of the use of our online offer by the users if users have accessed our online offer via a Microsoft Bing display (so-called “conversion measurement”). Microsoft and we can recognize in this way that someone has clicked on an ad, has been redirected to our online offer and has reached a previously defined target page (so-called “conversion page”). We only see the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No IP addresses are stored. No personal information about the identity of the user is communicated.
Microsoft is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK&status=Active).
If you do not wish to participate in the Bing Ads tracking process, you can use Microsoft's opt-out page: http://choice.microsoft.com/de-DE/opt-out.
Users can find further information on data protection and the cookies used at Microsoft Bing Ads in Microsoft's data protection declaration: https://privacy.microsoft.com/de-de/privacystatement.
Our web page also utilizes the analysis software “Hotjar” by “Hotjar” Ltd., Level 2, St. Julian's Business Centre, 3 Elia Zammit Street, St Julian's STJ 1000, Malta.
The preferred language to display our web page.
Date and time of web page access.
Hotjar uses this information to analyze your use of our web page, to create reports on its use and to provide other internet analysis services.
For data protection reasons we have deliberately decided against using direct plug-ins from social networks on our websites. Generally, if you retrieve our websites, no data is automatically transmitted to social networks. Your Internet browser will create a connection to the servers of the respective social network only once you actively click on the respective button, i.e. by clicking the respective button (e.g. “Like”) you consent to your Internet browser establishing a connection to the servers of the respective social network and to transmit usage data to the respective provider of the social network.
The transmission of data to the relevant provider is subject to Art. 6 (1) lit. a GDPR based on your consent.
Facebook, Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.
LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland.
YouTube, YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
Twitter,Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland.
All providers are subject to the EU-US Privacy Shield, https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
For this purpose, this site, among other things, uses SSL encryption for the secure transmission of data. The common SSL process (Secure Socket Layer) is used in connection with the respective maximum encryption level supported by your browser.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 Art. 6