By ticking the consent box when placing an order, filling in forms on the website or otherwise providing their data, the user (data subject), acting freely, of their own will and in their own interest, gives specific, informed and unambiguous consent to the processing of their personal data on the terms set out below.
1. Data controller
The controller is ALINA VARAVA PR BEOGRAD (MB: 68859174; PIB: 116053265; address: DEČANSKA 8, SPRAT 2, BEOGRAD (STARI GRAD), SRBIJA), providing services under the name Kitten Servers. Contact for personal data matters: [email protected].
2. Personal data covered
- email address;
- IP address, browser and device information, cookies;
- order details: selected plan, payment method, payment ID and status, selected operating system;
- content of support requests: name, subject, message text.
Bank card details (number, expiry date, security code) are not passed to or processed by the Controller: they are entered and stored by a PCI DSS-compliant payment provider.
3. Purposes of processing
- concluding and performing the virtual server rental contract, including sending access details and the server ID by email;
- processing payments, recurring charges and refunds;
- handling requests and providing support;
- sending service (non-marketing) notifications related to the services;
- ensuring security and preventing fraud and abuse;
- complying with applicable law, including accounting and tax requirements.
4. Processing operations
Consent is given for the collection, recording, organisation, accumulation, storage, adaptation, retrieval, use, transfer (provision, access), cross-border transfer, anonymisation, blocking, erasure and destruction of personal data — both with and without automated means.
5. Transfer to third parties
To achieve the purposes of processing, data may be transferred to:
- the payment provider — to the extent necessary for payments, recurring charges and refunds;
- hosting and infrastructure providers that operate the website and servers.
Data may be stored and processed on servers outside the user's country in compliance with applicable law. Personal data is not sold or transferred to other third parties, except as required by law.
6. Retention periods
Data is processed until the purposes of processing are achieved: account and order details — for the term of the services and up to 3 years after they end; payment records — for the periods required by accounting law; security logs — up to 12 months. After these periods data is destroyed or anonymised.
7. Withdrawing consent
Consent may be withdrawn at any time by writing to [email protected] with the subject "Withdrawal of consent to personal data processing" from the address for which consent was given, or stating that address. The Controller stops processing and destroys the data within 30 days, except for data that must be kept by law. Withdrawing consent may make further provision of the services impossible.
8. Rights of the data subject
The data subject may obtain information about the processing of their data; request its correction, blocking or deletion if the data is incomplete, outdated, inaccurate, unlawfully obtained or no longer needed for the stated purpose; and appeal the Controller's actions to the data protection authority (in the Republic of Serbia — the Commissioner for Information of Public Importance and Personal Data Protection) or to a court.
9. Cookies
The website uses strictly necessary technical cookies. Users can restrict or disable cookies in their browser settings; this may affect some website features.
10. Final provisions
Consent is valid from the moment it is given until it is withdrawn or until the retention periods in section 6 expire. More information is available in the Privacy Policy.
Personal data questions: [email protected]