We prefer to consider this page not as a legal responsibility, but rather as a simple, coherent explanation of how we collect, process, and share your data. We are VPNBOX, Jürgen Reichert, Hühnergarten 10, 97286 Sommerhausen, phone: +49 176 47322398, email: firstname.lastname@example.org.
Legal basis of this page is the EU General Data Protection Regulation (GDPR), the German federal data protection act (Bundesdatenschutzgesetz), and the German media broadcast act (Telemediengesetz).
Cookies, Social Plugins, and Server-Logfiles
Tracking and Analysis Tools (Matomo/Piwik)
We do not want other companies to track our visitors. Therefore, we intentionally do not use any external tracking and analysis tools like Google Analytics.
For this reason, we make use of a tool called Matomo (once called Piwik), which is a free/libre and open-source software to analyze page visits statistically. Matomo is installed on infrastructure controlled by us. This allows us to keep an eye on the traffic of our websites and at the same time keep usage statistics about your visits away from anyone else. Matomo is configured not to place any cookies. Disabling cookies limits the creation of user profiles within Matomo. All data collected by Matomo is only processed and saved on our servers and never shared with any third party. Collected data by Matomo includes the visited URL, date and time of the request, used browser, referrer, and your anonymized IP address.
Our Matomo instance acknowledges "Do-Not-Track" requests by your browser. If you disagree with the collection, evaluation, and storage of your visits by our Matomo instance, please activate the "Do-Not-Track" feature in your browser. When "Do-Not-Track" is enabled, Matomo does not collect any data about your visits on our website.
To prevent brute force password attacks, we store an anonymized form of your IP address in the event of a failed login. It is kept for a maximum of 65 minutes in the main memory / RAM of our web server. This enables us to defend against attacks in which many different passwords are tried out by the attacker within a short period of time.
Personal data describes data which allows to identify you. This includes your name, email address, and your phone number.
You can visit our website without providing any personal data.
We only collect, process and share personal data with third parties, if we deem this to be absolutely necessary, and received your prior consent.
Collecting Personal Data
When you place an order, and when you get in touch with us (contact form, bug report form, or by email) we collect personal data if you choose to share it with us and only if it is absolutely necessary for the before mentioned purposes. The data we collect can be seen in the respective forms.
To contact us, you certainly may use an alias and an anonymous email address.
Processing Personal Data
We only process personal data to complete our part of the contract and to handle contact requests.
Sharing Personal Data
There are some situations in which we have to share personal data with third parties:
Should you choose to select the shipping method "DHL or Hermes" during checkout, we have to share your delivery address with DHL or Hermes. Otherwise, they would not know where to ship your order.
We do not store any bank details or credit card data.
Should an exceptional case arise in which we have to contact you by mail, we are required to share your address with Deutsche Post. We usually limit communicating with you to email.
Personal Data Storage Period
We store the billing and delivery address provided by you during checkout for ten years. In Germany, this is mandatory because of statutory retention periods.
Contact requests are stored indefinitely. This way, we can come back to them in future requests. Of course, we can delete your past requests. Just tell us via email.
For your security, our websites only use encrypted connections. You can recognize such a secure connection by the lock symbol beside the address bar of your browser.
Data Subject Rights
Based on the GDPR, you are entitled to the following rights concerning personal data stored by us:
- get information free of charge (Art. 15 GDPR)
- correction (Art. 16 GDPR)
- deletion (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- briefing (Art. 19 GDPR)
- data transfer (Art. 20 GDPR)
- revocation of consents given (Art. 7 (3) GDPR)
- complaint to a supervisory authority (Art. 77 GDPR)
- object (Art. 21 GDPR)
If you want to exercise any of your rights, please contact us directly.
Most companies try to hide within legal jargon. We want you to understand what data we collect from you, how we process it, and with whom we share it. If there is anything unclear to you or you have any further questions, please get in touch with us.
phone: +49 176 47322398