Dear Sir or Madam,

since May 25, 2018, the General Data Protection Regulation (GDPR) has been in force. It standardizes how companies in the European Union handle and process personal data.

As a result of the GDPR coming into effect, we are obliged to inform our customers about the regulation and to offer you the option of concluding a Data Processing Agreement (DPA) pursuant to Art. 28 GDPR with us where required.

In addition, we provide transparency regarding which data is processed, for which purposes, on which legal basis, and for how long such data is stored.

Website access and technical log files

When you visit our website, technically necessary access data is processed in order to provide the website securely, stably and functionally. This may include, in particular, the IP address, date and time of access, pages accessed, amount of data transferred, browser and operating system information, referrer information, status codes and technical error logs.

The processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure operation of the website, technical error analysis, prevention and investigation of misuse attempts, and ensuring the availability of our online services.

Where statutory retention or documentation obligations apply, processing is additionally carried out on the basis of Art. 6(1)(c) GDPR.

What changes for me as a customer of menkiSys Networks e.U.?

In the short term: nothing. Your domains remain registered and your web hosting or server services continue to run as usual.

In the long term, under certain circumstances you may need to conclude a Data Processing Agreement pursuant to Art. 28 GDPR with us, for example if:

• you register domains on behalf of your own customers as a reseller
• you use a webspace or email account at menkiSys
• you publish commercial content (such as advertising) on your website

Whether a Data Processing Agreement is required depends on the specific use of the respective service. In particular, a Data Processing Agreement may be required if personal data of third parties is processed via services provided by menkiSys in a business, professional or organizational context.

In addition, menkiSys aims to store no more data than necessary. Therefore, we will delete personal data for inactive accounts.

At menkiSys, an account is considered inactive if:

• there has been no login to the client area or to the service/server (within 12 months)
• no payments have been made and there is no credit balance
• no active servers, domains, or other services exist or are being used

There is no necessity to retain data for such accounts, which is why we will delete this data. You will be informed separately by email before the account is deleted, and you can prevent deletion at any time by logging in again.

Data Processing Agreement pursuant to Art. 28 GDPR

Where menkiSys Networks e.U. processes personal data on behalf of a customer in connection with hosting, server, cloud, backup, domain or other IT services, such processing is carried out as processing on behalf of a controller within the meaning of Art. 28 GDPR.

In these cases, the respective customer remains the controller under data protection law for the content, systems and personal data processed by the customer. menkiSys Networks e.U. processes such data exclusively on the basis of documented instructions from the customer, unless there is a statutory obligation requiring different processing.

For corresponding services, menkiSys Networks e.U. provides a Data Processing Agreement pursuant to Art. 28 GDPR upon request. You can request the pre-prepared agreement from our support team at: info(@)menkisys.at at any time in writing. Please include your customer number so that we can pre-fill the agreement and, if required, sign it.

Cookies

Our website uses HTTP cookies to store user-specific data.
A cookie is a small data package exchanged between your browser and our web server. It is meaningless on its own and only becomes relevant for the web application (e.g., an online shop), for example to store the contents of a virtual shopping cart.

There are two types of cookies: first-party cookies are created by our website; third-party cookies are created by other services (e.g., Google Analytics).
Cookies are commonly grouped into three categories: strictly necessary cookies to ensure basic site functionality, functional cookies to ensure website performance, and targeting cookies to improve the user experience.

We use cookies to make our website more user-friendly. Some cookies remain stored on your device until you delete them. They allow us to recognize your browser on your next visit.

View cookie settings and delete cookies

If you want to see which cookies are stored in your browser, change cookie settings, or delete cookies, you can do so in your browser settings:

Safari: Manage cookies and website data in Safari
Firefox: Delete cookies to remove data that websites have stored on your computer
Chrome: Delete, enable, and manage cookies in Chrome
Internet Explorer: Delete and manage cookies
If you do not want cookies to store data, you can configure your browser to inform you whenever cookies are set and allow them only in individual cases. You can delete existing cookies at any time or disable cookies entirely. The procedure differs by browser; the easiest approach is to search for instructions using terms like “delete cookies Chrome” or “disable cookies Chrome” (or replace “Chrome” with your browser, e.g., Edge, Firefox, Safari).
If you generally do not allow us to use cookies (i.e., you disable them via browser settings), some functions and pages may not work as expected.

Privacy policy for embedded social media elements

We embed elements from social media services on our website to display images, videos, and text.
When you visit pages that display these elements, data is transferred from your browser to the respective social media service and stored there. We have no access to this data.
The following links take you to the respective services where they explain how they handle your data:

Instagram privacy policy: https://help.instagram.com/519522125107875
YouTube is covered by Google’s privacy policy: https://policies.google.com/privacy?hl=en
Facebook data policy: https://www.facebook.com/about/privacy
Twitter/X privacy policy: https://twitter.com/en/privacy

Facebook privacy policy

This website uses functions of Facebook, a social network operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
You can read about the features (social plugins) Facebook provides at: https://developers.facebook.com/docs/plugins/
By visiting our website, information may be transmitted to Facebook. If you have a Facebook account, Facebook may associate this data with your personal account. If you do not want this, please log out of Facebook.
Facebook’s privacy policy, including what information Facebook collects and how it is used, can be found at: https://www.facebook.com/policy.php.

Further information and documents:
GDPR (EU Regulation): https://eur-lex.europa.eu/eli/reg/2016/679/oj 

If you have any further questions regarding data protection, our support team is available at any time!