SLA
Service Level Agreement (SLA)
This page explains how we use your data, what data we collect and store, how we protect stored data, data retention, and waiver of rights. It also outlines our procedures for handling cases under general data conditions.
Â
1. RESPONSIBILITY.
The data protection officer assigned for the purposes of this agreement to observe and oversee the active functions of this policy is:
- Main domain name: hostealo.es
- Company name: AP INTERACTIVE SOLUTIONS SL
- Tax ID (CIF): B56483407
- Address: CALLE ESTEBAN SALAZAR CHAPELA, 115. Málaga, Spain.
- Email: [email protected]
2. DATA COLLECTION CONSENT.
- By using any service or part of our platform owned or controlled by us, you agree to all clauses of these policies.
- For the purposes of this policy, it will apply for the continued use of our services by customers, with an additional term of five (5) years.
3. DATA RETENTION.
- In accordance with our commitment to the EU General Data Protection Regulation (GDPR), we will retain data only as long as necessary when purchasing, using, or later accessing any service we own or control. You agree that we may retain your data for 180 days, after which all your data will be automatically deleted from our site.
- Logs and site access requests are retained indefinitely for security purposes; this includes cookie-based data, which will expire either through user deletion or natural cookie expiration.
4. CHILDREN’S PRIVACY.
- We may collect and store information from children under 16 years old because our services are directly aimed at them, as they are the focus and target audience of the products we sell. We will ensure that children under 16 registered on our website have obtained parental consent.
- We collect information from a child when they create an account on our platform, purchase any product or service we offer, interact with any of our support platforms, or interact with our services.
- We will never sell your child’s data to any third party and will only share what is strictly necessary with trusted partners who enable us to operate our business.
- We ask children to provide certain information for notification, transactional, and security purposes. We strongly recommend that parents or guardians use their own data instead of allowing children to use their personal information on any part of our platform.
- By agreeing to use any part of our platform or services, both the child and the parent expressly consent that they have read, understood, and accepted all clauses of this policy.
5. DATA DELETION.
- This policy does not serve as a waiver of rights.
- Data deletion will occur when a customer requests that their data be deleted. In many cases, you will be required to provide proof of the name and address linked to the billing account before we can process or access your personal data, and before proceeding with any deletion request.
- If a deletion request is lost at any time, we are not liable for any damages, and this constitutes an express waiver of liability for any deletion request submitted incorrectly or lost in transmission.
- The parent or legal guardian of a child may request deletion of the child’s data. The guardian may be asked to provide transaction-based identification before we can process such a request.
6. DATA BREACH.
In the extremely unlikely event of a data breach, we will proceed as follows:
- Notify you within 48 hours.
- Provide information regarding what data we believe was compromised and when we became aware of it.
- Inform data processors so the breach can be thoroughly investigated.
- Temporarily suspend any service we believe was breached to prevent further violations while we investigate the source.
Our Data Protection Officer will inform you and provide the next steps according to the above protocol.
7. DATA WE COLLECT.
We collect and store a variety of data such as:
- Personally Identifiable Information (“PII”)
- For example: your name, email, phone number, mailing address, IP address, geolocation…
- Cookies
- Log-based data
- Internet Protocol (“IP”) address, browser type, browser version, the pages of our Service you visit, the time and date of your visit, time spent on those pages, and other statistics
- Third-party services may additionally collect data; these services have their own data protection and privacy policies and you, the end user, are expected to review those individual policies.
- WHMCS
- Cryptomus
- Stripe
- Chatwoot
- TrustPilot
- Cloudflare
- Path.net
- FontAwesome
- Bootstrap
- Cogent Communications
- Google Analytics
- Cookie declaration services
- Due to data shared with third-party services, we may not be able to process deletion requests for those companies/services listed above. You may need to submit a deletion request directly to the specific company.
8. APPEALS.
If you believe we have made an error in judgment regarding your deletion request, you may follow the appeal steps provided in Hostealo’s final written response. To appeal, you must do so within 28 days of receiving the response. If you do not appeal within 28 days, you waive your right to appeal.
Â
9. LINKS TO THIRD-PARTY SERVICES
Our services may contain links to third-party services. Hostealo is not responsible for data collection, breaches, or handling procedures of third parties. We strongly recommend reviewing the privacy policies of each site you visit. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.
Â
10. ACCESS PROVISIONS.
- Arrangements are made for law enforcement agencies to request access to client personal data in accordance with court orders. Any such orders, subpoenas, or requests can be sent to [email protected] for a response within 24 hours.
- Access arrangements are made for some of your registered data to Hostealo employees. Access to this data is governed by individual confidentiality agreements.
11. CHANGES TO OUR POLICIES.
We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page. You are advised to review this privacy policy periodically for any updates.
Changes to this privacy policy are effective when they are posted on this page.