Basic Information on Data Processing

At HypeSrv, we offer you the opportunity to run your own game servers online. To provide you with these services, it's necessary for us to process and store some of your data. Below, we explain how and what we process.

By using our services (including this website, the HypeSrv app, HypeSrv API, email or social media contact, and any other online offerings under the HypeSrv brand)—hereafter referred to as "HypeSrv Services"—you declare that you have read this privacy policy.

Who is responsible for processing your data?

Entity responsible for personal data collected through HypeSrv Services:

onesrv | Regh & Meier Services GbR
Am Ramonchamp Platz 8
55270 Ober-Olm
Email: privacy [at] onesrv.net

Referred to as "onesrv" below.

How does onesrv process your data?

We use the data you provide to make the HypeSrv websites and services available to you, to further develop and optimize them, and if you have consented, to keep you informed about news and offers related to HypeSrv.

Provision and Development of HypeSrv Websites and Services

To provide our services, processing your data is necessary. This is based on your consent or our (onesrv) legitimate interests. Your data is also used, if you have consented, for error correction and statistical analysis.

Communication with you

We use your data to respond to your inquiries or to provide you with information about HypeSrv.

How is your information shared?

We do not share your data without your explicit consent. Currently, we do not share any personal data we collect with other parties.

Hosting

We at onesrv take pride in hosting almost all our services on our hardware. Your data is stored on our servers and thus not passed on or processed by third parties during storage.

An exception for our customers is Tebi.io, a cloud-storage service provided by Sideglide Solutions Ltd., Nicosia 1065, Archiepiskopou Makariou III 42, Cyprus. You can find Tebi.io's privacy policy at: https://tebi.io/legal.html. We use Tebi.io based on legitimate interest to enable the storage and efficient delivery of media (images, videos, and PDF files).

Cloudflare CDN (Content Delivery Network)

We use Cloudflare’s CDN based on our legitimate interests to increase the security and delivery speed of our website and services. A CDN is a network of servers distributed globally, capable of delivering content optimally to website users.

For this purpose, personal data can be processed in server log files by Cloudflare. Details on the data processed by Cloudflare are visible under "What Data Do We Process?" in the section "When Visiting the HypeSrv Websites."

Cloudflare acts as the recipient of your personal data and as a data processor for us. Since we do not run a CDN ourselves, we rely on Cloudflare's CDN based on our legitimate interests. Contracts for data processing are in place with Cloudflare.

You have the opportunity to object to this processing, as described in "What Rights Can I Exercise and How?". Whether this objection is effective will be determined through a balancing of interests. The functionality of the website and services cannot be guaranteed without this processing.

Your personal data will be stored by Cloudflare for as long as necessary for the described purposes. More information on opposition and removal options against Cloudflare can be found at: Cloudflare DPA

Cloudflare has implemented compliance measures for international data transfers. These apply to all global activities where Cloudflare processes personal data from individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). More information can be found at: https://www.cloudflare.com/cloudflarecustomerSCCs-German.pdf. Cloudflare’s privacy policy is available at: https://www.cloudflare.com/privacypolicy/.

Mollie (Payment Processing)

For payment processing of our online services, we use the payment service provider Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands. If you make payments to us through Mollie, Mollie receives and processes your personal data.

Details of what Mollie processes, the duration of data processing, the legal basis for data processing, and how Mollie uses this data can be found in Mollie's privacy policy: https://www.mollie.com/de/privacy.

You can object to your data processing according to Mollie’s privacy policy directly with Mollie.

What Data Do We Process?

When Visiting the HypeSrv Websites (hypesrv.net, app.hypesrv.net):

Type of Data: Technical metadata (IP address, browser, device type, etc.)
Basis: Legitimate interest
Purpose: Processing for the provision of the online presence

Type of Data: Anonymized metadata about website usage (Browser; country of the accessing IP address; access period; referrer URL; URL)
Basis: Consent or explicit consent
Purpose: Statistical analysis of our web offerings to improve them.

Type of Data: Functional cookies (Session ID/Login, cookie preferences, page settings [Dark Mode, etc.])
Basis: Legitimate interest
Purpose: Provision of basic functions of HypeSrv services (e.g., login) and storage of visitor privacy settings.

Please note that "Technical metadata" is also processed by our data processor Cloudflare (See "How is your information shared?" under Cloudflare CDN).

Upon Contacting Us:

When you contact us via email, social media, phone, contact form, or other channels, we process the data you provide to respond to your contact.

Type of Data: Provided personal data (Name, email address, company name, phone number if applicable)
Basis: Legitimate interest
Purpose: Customer support; responding to queries from the concerned person.

General Use of HypeSrv Services:

Type of Data: Electronic transaction and metadata (IP address, device model, browser version, OS version, etc.)
Basis: Legitimate interest
Purpose: Service provision. Access is not possible without processing this data.

Type of Data: User data (Email address, name, last login time)
Basis: Consent or explicit consent (when creating a user account at HypeSrv)
Purpose: Providing a customer account.

Type of Data: Payment data (Name, address, payment method, payment amount, further payment metadata)
Basis: Legitimate interest (e.g., fraud prevention) & Legal requirements (when purchasing in our services)
Purpose: Payment processing; invoicing.

Type of Data: Error analysis data (Occurring errors, device metadata, anonymized interaction replays, log data)
Basis: Consent or explicit consent
Purpose: Product improvement; error fixing.

On What Legal Basis Do We Process Data?

We process your data strictly according to the (European) General Data Protection Regulation (GDPR). We have described above how your data is processed.

GDPR requires companies to have a legal basis for processing your data. Even if we have a legal basis for processing your data, you always have the right to information, correction, and deletion of your data under the GDPR.

In the section "What Data Do We Process?", we've listed exactly which of your data is processed on what legal basis.

Here is a brief overview of the legal bases for processing your data:

Art. 6(1)(a) and Art. 7 GDPR: The legal basis for obtaining consent.
Art. 6(1)(b) GDPR: The legal basis for processing your data to fulfill our contractual obligations and services.
Art. 6(1)(c) GDPR: Serves as the legal basis for fulfilling our legal obligations.
Art. 6(1)(f) GDPR: The legal basis to protect our legitimate interests.
Art. 6(1)(d) GDPR: A legal basis if processing personal data is necessary to protect vital interests of the data subject or another natural person.

Since the data provided to us and their processing are necessary for providing our services, excluding this processing can limit your user experience or make using HypeSrv services impossible.

Under GDPR, you have the right to revoke your consent at any time and request the transfer of provided data to yourself or a person of your choice.

What Rights Can I Exercise and How?

Right to Access

You can contact us to learn how and why we process your data, who we share it with, and where this data originates. You can also inquire about our automated processing of your data.

Right to Correction or Rectification

You have the right to have your data that we process updated. We request that you keep your data current, and should it not be so, update it or contact us.

Right to Be Forgotten

You have the right to have the data we process and store deleted. Please note, this also means that your credits, servers, and data will be permanently deleted.

Right to Restriction of Processing

We process your data until it is no longer needed or your account is deleted.

Right to Data Portability

You are entitled to receive a copy of your data in a machine-readable format. In most cases, we provide this data as a JSON export.

Right to Withdraw Consent

If we process your data based on your consent, you can revoke this consent at any time without reason. Be aware that this can limit your use of HypeSrv Services.

Right to Object

You can object to the future processing of your personal data at any time. Also note that this may limit your use of the HypeSrv Services.

Right to Complain

If you identify violations of the GDPR, you have the right to lodge a complaint with a supervisory authority. Since our company is based in Rhineland-Palatinate, we recommend contacting the Data Protection Commissioner of Rhineland-Palatinate: https://www.datenschutz.rlp.de/. However, you can also contact authorities in the EU member state of your usual residence, workplace, or place of alleged infringement.

Exercising My Rights

To exercise your rights, contact the responsible entity for data processing. If you are unsure which entity is responsible for your account, contact us (onesrv). To associate and legitimize your request, ensure your email originates from the address linked to your customer account.

The responsible entity has 30 days to reply after receiving your request and if all necessary information for processing is available.

If we (onesrv) or the responsible entity determine that your requests are repetitive, unfounded, or excessive, we may request a reasonable fee or refuse the request.

Data Retention Period

By default, we store your personal data until the purpose for data processing ceases. If you request data deletion or revoke consent for processing, we delete your data unless there are other legally permissible reasons for storing your personal data.