1. INTRODUCTION

Oceanrack group entity, the details of which are indicated in the Hostinger’s Terms of Service, ("Oceanrack") provides you web-hosting, domain name registration, and related products and service.

Oceanrack seeks to ensure the highest level of data privacy when offering its variety of quality products and services to Oceanrack customers and subscribers ("Subscribers") (collectively, “You”, or "Users").

At Oceanrack, the privacy and security of our Users is of paramount importance. Oceanrack is committed to protecting the data you share with us.

When this Policy mentions "Oceanrack", "we," "us", or "our", it refers to Oceanrack that is responsible for protection of your personal information in line with this Privacy Policy ("Data Controller").

This Privacy Policy ("Policy") explains how Oceanrack processes information that can be used to directly or indirectly identify an individual ("Personal Data") collected on our Site, our services (“Service”), forums and our mobile applications ("Platform").

All personal data are processed in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

For any questions regarding this Policy or any requests regarding the processing of personal data, please contact us at gdpr@oceanrack.com.

2. GENERAL PRINCIPLES. CONFIDENTIALITY

Oceanrack shall process all Personal Data adhering to the general data processing principles:

• lawfully, fairly and in a transparent manner in relation to the data subject (lawfulness, fairness, and transparency);
• collect and process Personal Data only for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes (purpose limitation);
• ensure that Personal Data is adequate, relevant and limited to what is necessary for relation to the purposes for which they are processed (data minimization);
• ensure that Personal Data is accurate and, where necessary, kept up to date (accuracy);
• ensure that Personal Data is kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed (storage limitation);
• process Personal Data in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures (integrity and confidentiality).

All and any information stored on Oceanrack's Platform is treated as strictly confidential. All information is stored securely and is accessed by qualified and authorized personnel only.

3. INFORMATION WE COLLECT

3.1. Information You provide to us.

Information that is necessary for the use of the Oceanrack Platform

We ask for and collect the following personal information about you when you use the Oceanrack Platform. This information is necessary for the adequate performance of the contractual arrangement which is in place between you and us and to allow us to comply with our legal obligations. Failing to provide any of this data or decision to delete or object to the processing of any of such data may result in de-activation of your Oceanrack Account.

• Account signup information. When you sign up to Oceanrack, we require you to provide minimum information - email address and password. In some particular cases we ask you to provide more information - such as your first and last name, identity verification, contact details. Such information is required when you are applying for a registration of domain name and indicated as the WHOIS information.
• Login information. We collect Login scope and Email scope from Google, please see https://developers.google.com/identity/protocols/oauth2/scopes?hl=en and email, name and surname (depending on your choice) from Facebook (Meta).
• Identity verification. To comply with the rules set forth by the Internet Corporation for Assigned Names and Numbers ("ICANN") before the registration of the new domain name, Oceanrack may collect identity verification information (such as images of your passport, national ID card, valid driving license or other documents as required or permitted by applicable laws).
• Payment information. To order and use features of the Oceanrack Platform (such as web-hosting, domain name registration), we may require you to provide certain financial information in order to facilitate the processing of payments. We use 3rd party (payment processor) services, so we do not collect and store credit card information (we receive information about the payment status and store only last 4 credit card digits).
• Communications, chats, messaging. When you communicate with Oceanrack (including by using general inquiries windows, chat windows or chatbots), we collect information about your communication and any information you choose to provide or disclose. In order to respond to your request, we may also access information provided in your Oceanrack Account, purchase history, etc.
• Job applicants' information. We also collect information that you provided to us by applying to any of the open career positions published at https://www.oceanrack.com/career, by e-mail or otherwise. For more details see Section 5 below.
• Visitors and users of our User’s websites or services. We may also collect information pertaining to visitors and users of our User’s websites or services (“Users-of-Users”), solely for and on our Users’ behalf.

You may also choose to provide us information when you fill in a form, conduct a search, update or add information to your Oceanrack Account, respond to surveys, post to community forums, participate in promotions, or use other features of the Oceanrack Platform. We advise against posting any information you don’t wish to make public on the Oceanrack Platform. If you upload any content to your account or post it on your Website and provide it in any other way as part of the use of any Service, you do so at your own risk.

Oceanrack processes information you provide to us on the legal basis of:

• Your consent, expressed when voluntarily submitting and filling your Personal Data details in sign-up forms, by e-mail, request or inquiries window, etc.; and
• Conclusion and performance of contractual arrangements and obligations between Oceanrack and the User;
• Pursuance of legitimate interests of Oceanrack, as Data Controller and manager of Oceanrack platform;
• Compliance with a legal obligation to which Oceanrack is subject, including, but not limited to, ICANN rules: https://www.icann.org/resources/pages/approved-with-specs-2013-09-17-en#whois.

Disclaimer

Please always take care and observe at least the following minimum requirements for the protection of your personal information:

• please omit using your name, address, telephone number, e-mail, personal identification number, date of birth, bank Account number, card number, other special (sensitive) data, etc. in the subject of the request or file name;
• please omit using your personal code, payment card number, and other financial information and details, health, family member details, or other specific (sensitive) data, in the texts of requests, e-mails or similar communication to us, and
• please make sure that the remaining personal data is only indicated to the extent necessary for the purposes for which the letter, request or inquiry is sent.

Right to delete your data

You may at any time access and edit, update or delete your contact details by logging into your Oceanrack's platform Account.

Please note that you will only be able to delete your email during de-activation of your Oceanrack Account. To deactivate your Account, please send your request to gdpr@oceanrack.com, and you will be provided with further guidance.

Information related to the calls or meetings you participate

In cases where you call Oceanrack or schedule an appointment for a meeting, such conversations will be recorded by Oceanrack International Ltd. for quality management purposes. As a result, we will be able to maintain and improve the quality of Oceanrack services based on Oceanrack quality standards and policies. For this purpose we will process the following data: email address, date and time of conversation, its duration, audio and/or video recording, any other personal data provided by you voluntarily during the conversation. Also, provided email address and / or phone No. may be used for the purposes of allowing you to reach us or contacting you regarding your matter.

In such cases processing is necessary for the purpose of the legitimate interests pursued by Oceanrack (under Article 6(1)( f) of GDPR) or is based on your consent, when you consent to video recording by turning video on, or provide certain data voluntary (under Article 6(1)(a) of GDPR).

The recordings will be kept up to for 30 days and deleted thereafter as soon as technically feasible.

3.2. Information We Collect when You use the Platform

When you use the Oceanrack Platform or contact us directly by any communication channel, we may collect information, including personal information, about the services you use and how you use them.

This information is necessary for the adequate performance of the contract between you and us, to enable us to comply with legal obligations and given our legitimate interest in being able to provide and improve the functionalities and security of the Oceanrack Platform.

Automatic collection of data

• Log data and device information. We automatically collect log data and device information when you access and use the Oceanrack Platform, even if you have not created an Oceanrack Account or logged in. That information includes, among other things: Internet protocol (IP) addresses, browser information, including its type, Internet service provider (ISP), referring/exit pages, device properties, including its operating system, date/time stamp and/or clickstream data.
• Tracking technologies and cookies. We use cookies, beacons, tags, scripts and other similar technologies, such as CI codes (click tracking), ISC (source tracking), and ITC (item tracking codes). We also automatically collect information about device's operating system, phone model, device ID and customer number. For more detail information on the use of these technologies, see our Cookies Policy.
• Usage information. We use a tool called "Google Analytics" to collect information about your interactions with the Oceanrack Platform (what pages you visit, such as the pages or content you view, your searches for Listings, bookings you have made, and other actions on the Oceanrack Platform. In consequence, Google, Inc. plants a permanent cookie on your web browser to identify you as a unique user the next time you visit this Site). For more information please visit Google.
• Geo-location data. We collect information about your approximate location as determined by data such as your IP address to offer you an improved user experience and comply with applicable legal requirements, such as taxes, pricing, etc. Such data may be collected only when you access Oceanrack platform using your device.

Abuse prevention data

To help detect and prevent abuse and other use of services inconsistent with our Terms of Service, we process certain information to assess potential misuse of our services. This assessment is based on data points related to payments and its history, account activity, your use of services (including suspensions related information), device information and your interactions with our platform. It enables us to identify patterns that may signal misuse and take proportionate and timely action to protect our platform.

Oceanrack processes this information on the legal basis of:

• Your consent;
• Conclusion and performance of contractual arrangements and obligations between Oceanrack and the User;
• Pursuance of legitimate interests of Oceanrack, as Data Controller and manager of Oceanrack platform.

4. HOW WE USE YOUR DATA?

We use, store, combine and process information, including personal information, about you to provide, understand, improve, and develop the Oceanrack Platform, create and maintain a trusted and safer environment and comply with our legal obligations.

• To identify. Personal identification information is collected and processed for the purposes of User identification as well use of services and domain name registration. Additionally, this information may be used to provide Users with support, letting them know about upcoming updates or improvements, providing information regarding changes of any Terms of Use (including changes to this Policy) as well as other important information.
• To create and maintain trusted environment. We verify or authenticate information or identifications provided by you (such as ID number, email or phone numbers). We also use collected information to detect and prevent fraud, spam, abuse, security incidents, and other illegal and harmful activities.
• To create aggregated statistical data, to carry out market research and analysis necessary for running out our business, to improve our services we use aggregated and/or inferred non-personal information enabling us to evaluate our customers’ needs, sales and other trends of our activities.
• To stay connected. We use information about data usage, devices, operating systems to diagnose problems with our servers, to administer our Platform, adopt decision when to retire SDK's/OS versions, to identify characteristics of major users so that we may optimize our applications and services and make your browsing and purchasing experience more enjoyable.
• To customize marketing. To provide more customized offers to our Users, we may conduct data analysis based on information you provide to us, your interactions with the Oceanrack Platform and its Users.
• To send service and billing messages. Oceanrack may also contact you with important information regarding our Services, or your use thereof. For example, we may send you a notice (through any of the communication channels available to us) if a certain Service is temporarily suspended for maintenance; reply to your support ticket or e-mail; send you reminders or warnings regarding upcoming or late payments for your current or upcoming subscriptions; forward abuse complaints regarding your hosting plan; or notify you of material changes in our Services. Such kind of communication is essential, for this reason, no opt-out possibilities are given to avoid receiving such Service and Billing Messages unless you are no longer a Oceanrack User (which can be done by deactivating your Account).
• To inform you about the status of unfinished order. We may send you an email notification about the status of your unfinished order. Such notifications are based on our legitimate interest in improving your experience with us and assisting you with any issues related to your orders. You have the full right to opt-out of receiving such notifications at any time through the unsubscribe link provided in the email or your account settings.
• To register domain. In certain jurisdictions or pursuant to the rules of the ICANN or certain registries, domain name registration information has to be made available and accessible to the public through a "WHOIS" search. The WHOIS database is a publicly accessible database that lists the domain name registration information for a particular domain name, the name server(s) to which the domain name points, and the domain name's creation and expiration date. The domain name registration information you provide is stored by Oceanrack and is made available to the public through WHOIS searches. Oceanrack may deposit your domain name registration information with a third-party escrow provider to comply with ICANN requirements. At times, Users may receive solicitations that result from searches of the publicly available WHOIS database by other companies or individuals. Any such solicitations or e-mail communications do not come from Oceanrack and Oceanrack is not responsible for the use of WHOIS information by third parties. Oceanrack acts only on the basis of ICANN rules and requirements. For more information see: https://www.icann.org/resources/pages/approved-with-specs-2013-09-17-en#whois.
• To contact you. In order to notify you regarding your Account, to troubleshoot problems with your Account, to resolve a dispute, to collect fees or monies owed, to poll your opinions through surveys or questionnaires, to send updates about our company, or as otherwise necessary to contact you to enforce our User Agreement, applicable national laws, and any agreement we may have with you. For these purposes, we may contact you via email, telephone, text messages, and portal.
• To handle sales related inquiries. When you reach out with questions about our Services or potential purchases without logging into your Oceanrack Account (e.g., as a prospective customer), Oceanrack International Ltd. will handle your requests. If you agree to provide your email address and other information (such as your needs and preferences), we will use this data to provide you with personal assistance, also to email you with information related to your inquiry and follow up communication. Our communication data will be kept up to for 90 days and deleted thereafter as soon as technically feasible.
• To get feedback. We may contact you via email to invite you to review any services and/or products you received from us in order to collect your feedback and improve our services. We might use an external company, to collect your feedback which means that we will share your name, email address and reference number for this purpose.
• To provide Dark Web Monitor service. If you activate this service, we use your verified account email and domains registered with us to detect potential data breaches involving your data and notify you about this by email and/or through alerts in the hPanel.
• To provide, operate and improve the Services.
• To enhance data security and to prevent fraud.
• To comply with applicable laws and regulations.

5. JOB APPLICATIONS

Oceanrack welcomes all qualified Applicants to apply to any of the open positions published at https://www.oceanrack.com/career, by sending us their contact details and CV ("Applicants Information") via the relevant Position Application Form on our Website, or through any other means provided by us.

We understand that privacy and discreteness are crucial to our Applicants and are committed to keep Applicants Information private and use it solely for Oceanrack's internal and group companies’ recruitment purposes (including for identifying Applicants, evaluating their applications, making hiring and employment decisions, and contacting Applicants by phone or in writing).

Oceanrack may retain Applicants Information submitted to it for no longer than one year after the applied position has been filled or closed. We collect this information to re-consider Applicants for other positions and opportunities at Oceanrack; we can use their Applicants Information as reference for future applications submitted by them; and if the Applicant is hired, for additional employment and business purposes related to his/her work at Oceanrack.

If you previously submitted your Applicants Information to Oceanrack, but now wish to access it, update it or have it deleted from our systems, please contact us at gdpr@oceanrack.com .

6. INFORMATION PERTAINING TO VISITORS AND USERS OF OUR USER’S WEBSITES OR SERVICES 

We may collect, store and process certain information pertaining to visitors and users of our User’s websites or services, solely on our Users’ behalf and at their direction. Each of our Users is able to collect and manage information, including personal data, via their website. Such information and personal data are then stored with Oceanrack. For such purposes, within the meaning of the GDPR, Oceanrack may in certain limited cases, as specified in the Terms of Service, be considered as a “data processor” of such information pertaining to visitors and users of their websites or services. The Users controlling and operating such User websites, shall be considered as the “data controllers” of such information, and shall be solely, completely and fully responsible and liable for complying with all laws and regulations that may apply to the collection and control thereof, including all privacy and data protection laws of all relevant jurisdictions.

User shall be solely, completely and fully responsible for the security, integrity and authorized usage of information related to visitors and users of their websites or services, and for obtaining consents, permissions and providing any fair processing notices required for the collection and usage of such information.

Oceanrack has no direct relationship with the individual visitors and users of our User’s websites or services whose personal data it processes. If you are a customer of any of our Users, and would like to make any requests regarding your personal data, please contact such User(s) directly.

For more information about data processing arrangement between us and our Users, please see our Terms of Service. 

7. DIRECT MARKETING AND SERVICE EXPIRATION NOTICES/RENEWAL REMINDERS

When creating an Account on our Platform or thereafter, subject to the available functionalities, you are free to manage your preferences regarding receipt of various communication, including marketing offers and other marketing information, or service expiration reminders, through your e-mail, phone (SMS and (or) Whatsapp messages) or in your Account.

We use contact details provided and your preferences for sending certain communications:

• Marketing communication and quality surveys via e-mail. We may send marketing communication (e.g., newsletters,  special offers, and other information related to our Services) to your e-mail based on our legitimate interest, provided you have used or signed up for a Service from us (including used a free trial) (e.g., pursuant to Art. 6(1)(f) of the GDPR, where applicable). This allows us to keep you informed about our products, Services and updates that may be relevant to you. Also, we may contact you via e-mail with surveys or feedback requests to better understand your needs and improve the quality of our Services. This communication is based on our legitimate interest in improving user experience and understanding customer needs (e.g., pursuant to Art. 6(1)(f) of the GDPR, where applicable).
  Above communications may be sent during your active use of the Service and for up to 90 days after your last interaction with us (e.g., subscription expiration or termination). After this period, such communication can be sent in cases where we receive your consent for such purpose (e.g., pursuant to Art. 6(1)(a) of the GDPR, where applicable).
  In addition, we may send you marketing communication about our services, offers, updates and, where relevant, information related to your interaction with our platform (including purchase-related recommendations and reminders), provided that you have created an Account and engaged with our services (for example, by showing interest in a service, adding a service to your cart, or performing similar actions on our platform). Such communication is based on our legitimate interest to inform you about relevant service offerings and updates and to maintain our relationship with you following your active engagement with our services (pursuant to Article 6(1)(f) of the GDPR, where applicable).
  You are free to opt-out of such communications at any time after creation of your Account (please see “Right to object / revoke consent” below).
• Marketing communication via phone (SMS and (or) WhatsApp). We will only send such communication (e.g., special offers), if you have given us consent (e.g., pursuant to Art. 6(1)(a) of the GDPR, where applicable). You have the right to withdraw your consent and stop receiving our communications via SMS and (or) WhatsApp at any time (please see “Right to object / revoke consent” below). Your consent will be valid for a period of 36 months after your last interaction with us (e.g., subscription expiration or termination), unless you withdraw it earlier. After this period, we will ask you to renew your consent before continuing to send marketing messages.
• Transactional messages via phone (SMS and (or) WhatsApp). Where allowed under applicable laws, we may send you important messages, which follows to one of the following categories: (i) subscriptions and payments (e.g., service expiration reminders, failed payments); (ii) account and its security (e.g., account or its security-related updates and alerts); or (iii) service status and changes (e.g., significant information, which might influence continuous use of the service). These messages are not considered direct marketing. This is based on our legitimate interest in ensuring proper service provision, maintaining account security, and preventing Service disruptions (e.g. pursuant to Art. 6(1)(f) of the GDPR, where applicable). You are free to opt-out from receipt of such messages anytime or choose which type of messages you want to receive (please see “Right to object / revoke consent” below). Note that this right might be limited in cases where we have an obligation to send certain messages (e.g. reminders under ICANN rules).

Our communications, depending on your preferences, may be personalized taking into account any other information which you have provided to us (e.g. location, social media profile information, purchase history etc.) or we have collected or generated from other sources as described below.