Privacy policy

Document Version:

Upcoming Version
This version takes effect on 2026.11.20. Until then, the previous version remains in force. Click here to view the currently effective version.

I. Data Controller Information

Name: VPS4You KFT
Registered Office: 9400 Sopron, Tó utca 5 (Hungary)
Company Registration Number: 08-09-034904 (Győr Regional Court of Appeal)
Tax ID: 32064526-2-08 (EU VAT: HU32064526)
Central Contact E-mail: info@vps4you.hu
Customer Support Telephone: +36-30/874-1982
Data Protection Officer (DPO): The Service Provider is not obligated to appoint a Data Protection Officer under Article 37 of the GDPR. Inquiries regarding data processing are handled directly by management at info@vps4you.hu.
Hereinafter referred to as: Data Controller or Service Provider.

II. Principles, Purposes, and Legal Bases of Data Processing

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Act CXII of 2011 on Informational Self-Determination (Infotv.).

Processing Activity	Processed Data	Legal Basis (GDPR)	Retention Period
User Registration & Account Management	Name, email address, password hash, phone number, language preference, account status.	Performance of a Contract (Article 6 (1) (b))	Until account deletion, or 5 years following termination of contract.
Service Provision & Order Fulfillment	Service parameters, IP addresses assigned, hostname, configuration settings, payment transaction IDs.	Performance of a Contract (Article 6 (1) (b))	Duration of the active subscription + 30 days backup retention.
Invoicing & Accounting	Billing name, billing address, tax number, invoice amount, date of issuance.	Legal Obligation (Article 6 (1) (c) - Hungarian Accounting Act)	8 years pursuant to Section 169 (2) of the Hungarian Accounting Act.
Recurring Payments (Barion & PayPal)	Gateway reference tokens (`RecurrenceId` / Billing Agreement ID), transaction timestamps, amounts. Credit card numbers are NEVER stored or seen by the Service Provider.	Performance of a Contract (Article 6 (1) (b))	Until cancellation of recurring billing by the user.
System Security & Abuse Prevention	IP addresses, server access logs, firewall connection logs, DDoS incident records.	Legitimate Interests (Article 6 (1) (f)) - maintaining network and IT infrastructure security.	Maximum 90 days in rolling system logs.
Cookies & Website Analytics	Session identifiers, visual theme settings, Google Ads click identifiers (`gclid`).	Consent (Article 6 (1) (a)) for analytics/marketing; Legitimate Interest for strictly necessary cookies.	Between session end and 365 days (see Cookie Policy).

III. Data Processors & Third-Party Sharing

Billing & E-Invoicing: KBOSS.hu Kft. (Számlázz.hu - 1031 Budapest, Záhony utca 7., Hungary).
Credit Card & Recurring Payment Gateway: Barion Payment Zrt. (1117 Budapest, Irinyi József u. 4-20., Hungary).
Alternative Payment Gateway: OTP Mobil Kft. (SimplePay - 1143 Budapest, Hungária krt. 17., Hungary).
Banking Partner: OTP bank.
Web Hosting & Server Infrastructure: Operated directly by the Data Controller on its own proprietary server infrastructure; no third-party hosting data processor is engaged.
Domain Registries: ISZT Kft. (.hu domains - Hungary), Hosting Concepts B.V. (international domains - Netherlands).

IV. International Data Transfers (Third Countries outside the EEA)

Certain technological features require transmission of specific data to providers based in the United States:

Google LLC (Google Sign-In & Google Ads): Data transmission is governed by the EU-US Data Privacy Framework (DPF) and Standard Contractual Clauses (SCC) approved by the European Commission. Privacy Policy: policies.google.com/privacy.
Discord Inc. (Discord Bot & Community Login): Transmission is secured via Standard Contractual Clauses (SCC). Privacy Policy: discord.com/privacy.
PayPal Europe S.à.r.l. / PayPal Inc.: Covered by Binding Corporate Rules (BCR) and European adequacy framework.

V. Cookie Management

For exhaustive information regarding all cookies, storage duration, categories, and browser settings, please refer to our dedicated Cookie Policy.

VI. Data Security Measures

Data transmission across our platform is protected by high-grade TLS (HTTPS) encryption. Client passwords are encrypted using irreversible cryptographic hashing algorithms (BCRYPT with high work factor). Server hardware is housed in enterprise-grade Hungarian data centers with physical access control, continuous monitoring, and DDoS mitigation.

VII. Your Rights under the GDPR (Articles 15–22)

You have the following statutory rights regarding your personal data:

Right of access: Request confirmation of whether your data is being processed and receive a copy.
Right to rectification: Request correction of inaccurate personal data.
Right to erasure ("Right to be forgotten"): Request deletion of your personal data where retention is no longer necessary or consent is withdrawn, unless processing is required by law (e.g., accounting).
Right to restriction of processing: Request restriction under certain conditions.
Right to data portability: Receive your data in a structured, commonly used, machine-readable format.
Right to object: Object to data processing based on legitimate interests.

Requests may be submitted by email to info@vps4you.hu. We respond without undue delay and at the latest within 30 days, free of charge.

VIII. Personal Data Breach Management (GDPR Arts. 33–34)

In the event of a personal data breach posing a risk to rights and freedoms, the Data Controller notifies the competent supervisory authority (NAIH) within 72 hours of becoming aware of the breach, and informs affected individuals where high risk is identified.

IX. Automated Decision-Making, Fraud Prevention & Profiling (GDPR Art. 13 (2) (f) & Art. 22)

The Service Provider does not employ profiling mechanisms or automated decision-making pursuant to Article 22 of the GDPR that produce legal effects concerning individuals (such as algorithmic discrimination or automated credit scoring).

However, to protect platform integrity, enforce our Terms of Service, and pursue our legitimate interests (GDPR Art. 6 (1) (f)), the Service Provider utilizes rule-based automated fraud prevention and anti-abuse verifications, specifically including:

detecting multiple accounts registered by the same individual or entity;
verifying eligibility for voluntary promotional benefits, discount coupons, or free trial periods to prevent abusive re-use;
automated firewall filtering of malicious traffic, spam, or high-risk IP addresses.

Right to Human Intervention: If a User believes an automated anti-abuse filter has resulted in a false positive (for example, due to a shared corporate, campus, or household IP address), they are entitled to request human review by contacting our customer support team, and an administrator will review the situation manually.

X. Supervisory Authority & Remedies

You have the right to lodge a complaint with the supervisory authority:

National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary
Postal Address: 1363 Budapest, Pf. 9. | Phone: +36 (1) 391-1400
E-mail: ugyfelszolgalat@naih.hu | Website: www.naih.hu
You also have the right to seek judicial remedy before the competent regional court of law.

Published: November 2, 2026 • Effective Date: November 20, 2026 • Version: v3

Website settings

Website style

Language