Privacy Policy

Last updated: August 4, 2026

1. Data Controller

Responsible for data processing on this website:

24for7 (details see Legal Notice)
Email: info@24for7.eu

2. Collection and Processing of Personal Data

2.1 Contact Form / Email

When you contact us via the contact form or by email, the data you provide (name, email address, message) is stored to process your inquiry. Legal basis: Art. 6 (1) (b) (contract initiation) and (f) (legitimate interest in communication) GDPR.

2.2 Newsletter

For newsletter registration, we process your email address with your explicit consent (Art. 6 (1) (a) GDPR). Newsletter delivery is handled via our mail server at Hostinger (see Section 4.1). You may withdraw consent at any time — unsubscribe link in every newsletter issue.

2.3 Server Log Files

When accessing our website, technical data is automatically stored in server log files:

• IP address
• Date and time of access
• Requested URL
• Referrer URL
• User-Agent (browser + operating system)

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in security and error analysis). Retention: max. 14 days.

3. Cookies

We use only technically necessary cookies required for the basic functions of the website (e.g., language preference, session cookies). No tracking, analytics, or marketing cookies from third parties are used.

For website analytics we use Umami — open-source analytics software running on our own server. Umami captures only aggregated, anonymized usage statistics and transmits no data to third parties.

4. Data Processors (Technical Service Providers)

For website operation we use the following external service providers as data processors under Art. 28 GDPR. Data Processing Agreements (DPAs) are in place with all of them.

4.1 Hosting & Email — Hostinger

Our web server and email mailbox are operated by Hostinger:

• Provider: Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus (EU entity: Hostinger Global S.à r.l, Luxembourg)
• Purpose: Provision of website and email communication
• Data processed: All website interactions and email communication (IP addresses, session data, email content)
• Legal basis: Art. 6 (1) (f) GDPR
• Privacy notice: https://www.hostinger.com/legal/privacy-policy
• DPA: https://www.hostinger.com/legal/dpa

4.2 Error Monitoring — Sentry

To detect and fix technical errors we use Sentry:

• Provider: Functional Software, Inc. d/b/a Sentry, 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA
• Purpose: Automatic detection of technical errors (bug tracking)
• Data processed: Error context (stack traces), partial IP addresses. No personal form contents or passwords (disabled via send_default_pii=False).
• US data transfer: Based on EU-U.S. Data Privacy Framework (Sentry is certified) and EU Standard Contractual Clauses
• Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in technical security)
• Privacy notice: https://sentry.io/privacy/

4.3 Backup Storage — Backblaze

Daily encrypted backups of our database and media files are stored at Backblaze:

• Provider: Backblaze, Inc., San Mateo, USA (EU servers available)
• Purpose: Off-site backup for disaster recovery (data security)
• Data processed: Backup copies of all website data
• Legal basis: Art. 6 (1) (f) GDPR (data security)
• Privacy notice: https://www.backblaze.com/company/privacy.html

4.4 Bot Protection — Google reCAPTCHA

To protect forms from spam we use Google reCAPTCHA v3:

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent: Google LLC, USA)
• Purpose: Detection of automated bot requests
• Data processed: IP address, browser information, mouse movements, website behavior
• US data transfer: Based on EU-U.S. Data Privacy Framework and EU Standard Contractual Clauses
• Legal basis: Art. 6 (1) (f) GDPR (protection against spam and abuse)
• Privacy notice: https://policies.google.com/privacy
• Terms: https://policies.google.com/terms

5. Your Rights

Under GDPR you have the following rights:

• Access to stored data (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure (“right to be forgotten”, Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection to processing (Art. 21)
• Withdrawal of granted consents (at any time)
• Complaint to a supervisory authority (Art. 77)

For inquiries contact: info@24for7.eu

6. Data Security

We employ technical and organizational security measures:

• SSL/TLS encryption for all data transmissions (HTTPS)
• Encrypted backups (Backblaze B2)
• Firewall (UFW) and brute-force protection (Fail2Ban) on the server
• DMARC + DKIM + SPF for email authentication
• Regular security updates

7. Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect changes to our services or applicable law. The current version is always available on this page.