Privacy Policy
Effective Date: October 2023
This Privacy Policy describes how Bullionet ("we", "us", or "our"), operating through the website bullionet.it, collects, uses, and protects your personal data in compliance with the General Data Protection Regulation (GDPR).
1. Data Controller
The entity responsible for processing your personal data is:
Bullionet
16 rue Grange Dame Rose
78140 Vélizy-Villacoublay, France
Email: [email protected]
2. Information We Collect
We collect information necessary to provide our Cloud and Bare Metal services, including:
- Account Information: Name, email address, physical address, and phone number.
- Payment Information: Billing details and tax identification numbers.
- Technical Data: IP addresses, browser type, and system logs related to your use of our infrastructure.
- Support Data: Information provided during tickets or live chat interactions.
3. Purpose of Data Processing
We process your data for the following reasons:
- Service Delivery: Provisioning Bare Metal servers, Cloud instances, and network management.
- Billing & Accounting: Processing payments and complying with legal tax obligations.
- Security: Monitoring infrastructure for DDoS attacks, fraud prevention, and unauthorized access.
- Communication: Sending critical system updates, maintenance alerts, and support requests.
4. Legal Basis for Processing
We process data under the following legal grounds:
- Contractual Necessity: To fulfill our service agreement with you.
- Legal Obligation: To comply with Italian and EU laws.
- Legitimate Interest: To ensure the security and stability of our data centers.
5. Data Retention
We retain your personal data only as long as your account is active or as needed to provide services. Billing information is retained for a minimum of 10 years as required by Italian tax law. Technical logs are typically purged after 30 to 90 days.
6. Third-Party Disclosures
We do not sell your data. We share data only with essential partners:
- Payment processors (e.g., Stripe, PayPal).
- Tax and legal authorities (when required by law).
- Data center facility partners (strictly for physical security access if required).
7. Your Rights
Under the GDPR, you have the right to:
- Access, rectify, or request erasure of your data.
- Restrict or object to processing.
- Data portability.
To exercise these rights, contact: [email protected]
8. Data Security
We implement industry-standard technical measures to protect your data, including encryption (SSL/TLS), firewalls, and strict access controls within our data centers.