{"id":3789,"date":"2025-10-25T15:16:48","date_gmt":"2025-10-25T15:16:48","guid":{"rendered":"https:\/\/hosting.grahammiranda.com\/?page_id=3789"},"modified":"2025-10-25T15:19:35","modified_gmt":"2025-10-25T15:19:35","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/hosting.grahammiranda.com\/de\/legal\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"

Graham Miranda<\/strong>
Hosting.GrahamMiranda.com
Hasselfelder Stra\u00dfe 23
38889 Blankenburg (Harz), Germany<\/p>\n\n\n\n

Last updated: 25. Oktober 2025<\/p>\n\n\n\n

1. Controller<\/h3>\n\n\n\n

The data controller under Art. 4 No. 7 GDPR is:<\/p>\n\n\n\n

Graham Miranda
Hasselfelder Stra\u00dfe 23
38889 Blankenburg (Harz), Germany
Email: privacy@hosting.grahammiranda.com<\/p>\n\n\n\n

2. Types of Data Processed<\/h3>\n\n\n\n

We process the following personal data:<\/p>\n\n\n\n

    \n
  • Name, address, email, payment information<\/li>\n\n\n\n
  • Contract and usage data (orders, IP, server access, support requests)<\/li>\n\n\n\n
  • Technical data (browser type, OS, referrer, log data)<\/li>\n<\/ul>\n\n\n\n

    3. Purpose and Legal Basis of Processing<\/h3>\n\n\n\n

    Processing purposes include:<\/p>\n\n\n\n

      \n
    • Contractual fulfilment and service provision (Art. 6(1)(b) GDPR)<\/li>\n\n\n\n
    • Legal obligations (Art. 6(1)(c) GDPR, e.g., retention under \u00a7 147 AO)<\/li>\n\n\n\n
    • Legitimate interests (Art. 6(1)(f) GDPR, e.g., IT security, abuse prevention)<\/li>\n\n\n\n
    • Consent (Art. 6(1)(a) GDPR, e.g., newsletter, cookies)<\/li>\n<\/ul>\n\n\n\n

      4. Disclosure to Third Parties and International Transfers<\/h3>\n\n\n\n

      We use the following providers for services and data storage:<\/p>\n\n\n\n

        \n
      • RackNerd (France\/USA, server hosting & infrastructure)<\/strong><\/li>\n\n\n\n
      • Hostkey and Yottasrc (based on data center location)<\/strong><\/li>\n\n\n\n
      • Cloudflare Inc. (USA, CDN, DDoS protection, WAF)<\/strong><\/li>\n\n\n\n
      • AWS (Amazon Web Services, partly outside the EU)<\/strong><\/li>\n\n\n\n
      • Apple iCloud Private Relay (email routing, partly outside the EU)<\/strong><\/li>\n<\/ul>\n\n\n\n

        Transfers to third countries (notably the US, France) are based on adequacy decisions and Standard Contractual Clauses per Art. 46 GDPR. You provide consent separately for each service as needed.<\/p>\n\n\n\n

        5. Retention and Deletion<\/h3>\n\n\n\n

        We comply with statutory retention periods:<\/p>\n\n\n\n

          \n
        • Invoices and accounting records: 10 years (\u00a7 147 AO)<\/li>\n\n\n\n
        • Business correspondence: 6 years (\u00a7 147 AO)<\/li>\n\n\n\n
        • Customer contracts and tax documents: 10 years<\/li>\n<\/ul>\n\n\n\n

          Your data will be deleted after these periods unless other legal obligations apply.<\/p>\n\n\n\n

          6. Your Rights<\/h3>\n\n\n\n

          You have the following rights under Art. 15-22 GDPR:<\/p>\n\n\n\n

            \n
          • Access your stored data<\/li>\n\n\n\n
          • Rectification of inaccurate data<\/li>\n\n\n\n
          • Erasure (“right to be forgotten”)<\/li>\n\n\n\n
          • Restriction of processing<\/li>\n\n\n\n
          • Objection to processing<\/li>\n\n\n\n
          • Data portability<\/li>\n<\/ul>\n\n\n\n

            To exercise your rights, contact privacy@hosting.grahammiranda.com.<\/p>\n\n\n\n

            7. Data Security<\/h3>\n\n\n\n

            We implement technical and organizational security measures according to industry standards (encryption, access control, monitoring, regular updates).<\/p>\n\n\n\n

            8. Cookies and Tracking<\/h3>\n\n\n\n

            See separate Cookie Policy.<\/p>\n\n\n\n

            9. Changes to Privacy Policy<\/h3>\n\n\n\n

            We reserve the right to modify this policy as needed; the current version is available on our website.<\/p>\n\n\n\n

            10. Right to Complain<\/h3>\n\n\n\n

            For privacy complaints, contact the competent authority:<\/p>\n\n\n\n\n\n

            <\/p>\n\n\n\n\n\n

            Legal Retention Requirements:<\/strong><\/p>\n\n\n\n

              \n
            • Invoices and accounting documents: 10 years (\u00a7 147 AO)<\/li>\n\n\n\n
            • Business correspondence: 6 years (\u00a7 147 AO)<\/li>\n\n\n\n
            • Customer contracts and orders: 10 years (\u00a7 147 AO)<\/li>\n\n\n\n
            • Tax-relevant documents: 10 years (\u00a7 147 AO)<\/li>\n<\/ul>\n\n\n\n

              Your personal data will be stored for the duration of statutory retention periods and deleted thereafter, unless other legal obligations exist.<\/p>\n\n\n\n

              \n\n\n\n