§1 Introduction

This Privacy Policy explains how Xmbhosting collects, processes, uses and protects personal data when you visit xmbhosting.com, create an account, purchase a service or communicate with us.

Personal data means information that relates to an identified or identifiable individual.

We process personal data in accordance with applicable Luxembourg and European Union data-protection legislation, including the General Data Protection Regulation (GDPR).

§2 Data Controller

The entity responsible for processing personal data in connection with Xmbhosting services is:

§3 Personal Data We Collect

Depending on how you use our website and services, we may collect different categories of personal data.

• Name and account information
• Email address
• Username and account credentials
• Billing and transaction information
• Address or other billing information where required
• IP address
• Browser and device information
• Server and service information
• Communications submitted to our support team
• Information voluntarily provided through forms, support requests or other interactions with us

We only request information that is reasonably necessary for the relevant purpose.

§4 Customer Account Information

When you create an Xmbhosting account, we may collect information such as your email address, username, password and other information necessary to provide account and billing functionality.

Depending on the service or applicable legal requirements, additional information such as your name, billing address or other identifying information may be requested.

We may also record the IP address and date/time associated with account registration and relevant security events.

Account information is used to provide and manage your account, process orders, provide customer support, protect our systems and comply with legal obligations.

§5 Technical and Server Data

When you access our website, our systems may automatically process technical information required for the operation, security and reliability of our services.

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL
• Requested pages or resources
• Device and network information
• Security and error logs

This information may be used to maintain system security, detect abuse, investigate technical problems, prevent fraud and improve the reliability of our infrastructure.

§6 Payments and Billing Information

When you purchase Xmbhosting services, payment processing may be handled by third-party payment providers.

Depending on the payment method used, the payment provider may process information such as payment details, transaction identifiers and billing information.

Xmbhosting does not necessarily receive or store complete payment-card information when payment is processed by an external payment provider.

We may retain transaction information such as the amount, date, product purchased, payment status and transaction reference for billing, accounting, fraud prevention and legal compliance.

§7 Communications and Support

If you contact Xmbhosting by email, support ticket, contact form or another supported communication method, we may store the information contained in your message.

This may include your name, email address, account information, technical information and the contents of your communication.

This information is used to respond to your request, provide technical support, investigate problems and maintain records necessary for our business and legal obligations.

§8 Cookies and Similar Technologies

Xmbhosting may use cookies and similar technologies to operate the website, maintain sessions, remember preferences, improve security and understand how the website is used.

Some cookies may be necessary for the operation of the website and cannot be disabled without affecting certain functions.

Other cookies, where used, may require your consent depending on their purpose and applicable law.

You can manage or delete cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of the website.

§9 Social Media and External Platforms

Xmbhosting may maintain or use official accounts, links, integrations or advertising services on third-party platforms including:

• Google
• Instagram
• TikTok
• Discord

When you interact with our content or visit our profiles on these platforms, the respective platform may process personal data according to its own privacy policy.

Xmbhosting does not control how these third-party platforms independently process information collected through their services.

We recommend reviewing the privacy policies and privacy settings of the relevant platforms before interacting with their services.

§10 Purposes of Processing

We may process personal data for the following purposes:

• Creating and managing customer accounts
• Providing hosting and related services
• Processing orders and payments
• Managing account balances and transactions
• Providing customer and technical support
• Communicating important service information
• Preventing fraud, abuse and unauthorized access
• Maintaining the security of our systems
• Monitoring and improving service performance
• Complying with legal and regulatory obligations
• Defending or exercising legal claims
• Improving our website and customer experience

§11 Legal Bases for Processing

Depending on the circumstances, Xmbhosting processes personal data on one or more of the following legal bases permitted under the GDPR:

• Contract: processing necessary to provide services or perform a contract with you.
• Legal obligation: processing required to comply with applicable laws, accounting requirements or other legal obligations.
• Legitimate interests: processing necessary for security, fraud prevention, service improvement, business administration or the protection of our legal interests, where those interests are not overridden by your rights.
• Consent: processing based on your consent where consent is required by applicable law.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

§12 Sharing of Personal Data

Xmbhosting does not sell your personal information.

We may share personal data with trusted service providers where this is necessary to operate our business and provide our services.

Such providers may include:

• Payment and billing providers
• Hosting and infrastructure providers
• Security and fraud-prevention providers
• Email and communication providers
• Website and technical service providers
• Professional advisers where necessary

We may also disclose information where required by law, court order, competent authority or other legally valid request.

§13 International Data Transfers

Some service providers used by Xmbhosting may process personal data outside Luxembourg or the European Economic Area.

Where personal data is transferred to a country outside the European Economic Area, Xmbhosting will take appropriate measures required by applicable data-protection legislation.

Depending on the circumstances, these measures may include an adequacy decision, appropriate contractual safeguards or another legally recognized transfer mechanism.

§14 Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

Customer account information may remain stored while the account is active.

Transaction, billing and accounting information may need to be retained for longer periods to comply with legal and financial obligations.

Security logs and technical information may be retained for a period appropriate to security, fraud prevention, troubleshooting and legal requirements.

Retention periods may therefore differ depending on the type and purpose of the information.

§15 Data Security

Xmbhosting takes reasonable technical and organizational measures to protect personal data against unauthorized access, loss, destruction, alteration or disclosure.

Security measures may include access controls, authentication mechanisms, encryption where appropriate, monitoring, backups and security procedures.

However, no method of transmission or storage over the Internet can be guaranteed to be completely secure.

Customers are also responsible for protecting their account credentials and using appropriate security practices.

§16 Your Data Protection Rights

Under applicable data-protection legislation, including the GDPR, you may have the following rights:

• Right of access to your personal data.
• Right to rectification of inaccurate or incomplete information.
• Right to erasure of personal data where the legal conditions are met.
• Right to restriction of processing in applicable circumstances.
• Right to data portability where applicable.
• Right to object to certain processing.
• Right to withdraw consent where processing is based on consent.
• Right to lodge a complaint with a competent data-protection supervisory authority.

These rights are subject to the conditions and limitations established by applicable law. The Luxembourg CNPD recognizes these GDPR rights, including access, rectification, erasure, restriction, objection and portability. [oai_citation:1‡CNPDP Luxembourg](https://cnpd.public.lu/fr/particuliers/vos-droits.html?utm_source=chatgpt.com)

§17 Account Deletion

Xmbhosting customer accounts are designed to remain available for the lifetime of the account unless the customer requests deletion or the account is terminated in accordance with our Terms & Conditions.

Customers may request or initiate account deletion after 30 days, where the account-management functionality permits this.

Account deletion does not necessarily result in the immediate deletion of every piece of information.

Certain information may need to be retained where required by law, necessary for accounting purposes, required to resolve disputes, prevent fraud or abuse, or necessary to establish, exercise or defend legal claims.

Where information is no longer required for a legitimate purpose, it will be deleted or anonymized in accordance with our applicable retention practices.

§18 Children's Privacy

Our services are not intentionally directed toward children who are unable to lawfully enter into contracts or provide consent where such consent is required.

If we become aware that personal data has been collected from a child in circumstances where such collection was not permitted, we will take appropriate steps to address the situation in accordance with applicable law.

§19 Changes to this Privacy Policy

Xmbhosting may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or data-processing practices.

The most recent version will always be published on xmbhosting.com.

Where required by law, we will provide additional notice regarding material changes.

§20 Contact and Privacy Requests

If you have questions about this Privacy Policy or wish to exercise your data-protection rights, please contact us using the information below.

You may also have the right to lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD) if you believe that your personal data has not been processed in accordance with applicable data-protection law. [oai_citation:2‡CNPDP Luxembourg](https://cnpd.public.lu/fr/particuliers/faire-valoir.html?utm_source=chatgpt.com)