Privacy Policy

1. Introduction & Scope

Veltis ("we", "us", or "our") respects your personal privacy and is committed to protecting the confidential information you share with us. This Privacy Policy describes how we collect, store, use, and safeguard personal and operational information when you access veltis.ro, our customer client portal, and our cloud hosting services.

2. Information We Collect

To provide hosting, automated provisioning, and domain registration services, we collect:

• Account Data: Name, email address, physical address, phone number, and encrypted password credentials.
• Billing & Payment Records: Transaction identifiers, billing addresses, invoice history, and tax/VAT information. Note that credit card numbers are processed directly by our PCI-DSS Level 1 certified processors (e.g. Stripe, PayPal) and are never stored on Veltis servers.
• Technical & Telemetry Data: IP addresses, browser user-agents, operating system details, session cookies, and request timestamps to prevent abuse, brute-force attacks, and DDoS attempts.
• Service & Domain Configurations: Domain WHOIS contact details (where legally required by ICANN and top-level domain registries) and server resource allocations.

3. How We Use Your Data

Your data is processed strictly for legitimate operational purposes:

• Provisioning, maintaining, and scaling cloud servers, VPS instances, and shared hosting accounts.
• Generating invoices, processing renewal orders, and issuing accounting records.
• Delivering critical service notifications, downtime alerts, automated backups, and support ticket replies.
• Complying with regulatory obligations under European Union and Romanian commercial law.

4. GDPR Rights for EEA/EU Residents

In compliance with the General Data Protection Regulation (EU Regulation 2016/679), you possess the following rights:

• Right of Access: Request a complete copy of the personal information stored in your account.
• Right to Rectification: Update or correct inaccurate personal details directly via the Client Portal.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your account and personal records once active subscriptions and statutory tax retention periods expire.
• Right to Data Portability: Export your profile and ticket communications in standard machine-readable formats.

5. Data Retention & Security

All client communications and database connections utilize TLS 1.3 encryption. Internal backups are strictly encrypted at rest using AES-256. Accounting and transaction records are retained for the statutory period required by fiscal law, after which they are securely expunged.

6. Contact Our Data Protection Officer

For questions regarding your privacy rights, data export requests, or to contact our Data Protection Officer, please reach out to: