Privacy & Data Processing Policy

Last updated: 28 September 2026

This Privacy & Data Processing Policy explains how CirculeForce GmbH, operating the HostingBuY service, processes personal data when you visit the website, contact us, create or use a customer account, place an order or use hosting services.

1. Controller

The controller for personal data processed for HostingBuY’s own purposes is CirculeForce GmbH, Zurich, Switzerland. Current postal address, company e-mail and contact details are published on the Impressum and Contact pages.

2. Data we may process

• Identity and account data, such as name, username, company and account identifiers.
• Contact data, such as e-mail address, telephone number and postal address.
• Order and billing data, including purchased services, invoices, payment status and transaction references.
• Support and communication data, including contact-form messages, tickets and correspondence.
• Technical and security data, such as IP addresses, authentication events, access logs, browser/device information, abuse indicators and server/security logs.
• Service data required to operate hosting accounts, domains, mailboxes, databases and customer-selected infrastructure locations.
• Cookie, session and language-preference data where required for website functionality.

3. Purposes of processing

We process personal data to provide and administer services, perform contracts, process orders and payments, provide support, secure accounts and infrastructure, prevent fraud and abuse, maintain logs, comply with legal obligations, communicate service information and improve the reliability of the platform.

4. Legal basis and Swiss data-protection law

Processing is carried out in accordance with applicable Swiss data-protection law, including the Federal Act on Data Protection (FADP). Where another mandatory legal regime applies to a particular customer or processing activity, HostingBuY will apply the relevant requirements.

5. Payments

Payment information may be processed by banks, card processors or other payment providers. HostingBuY should not receive or store complete card credentials unless technically and contractually required. Payment providers process data according to their own legal obligations and privacy terms.

6. Service providers and subprocessors

HostingBuY may use infrastructure providers, data centers, network carriers, e-mail providers, security providers, payment providers, domain registries, support systems and professional advisers where necessary to provide or protect the service. Access is limited to what is reasonably required for the relevant purpose.

7. International transfers

Because HostingBuY operates internationally and may use infrastructure in several countries, personal data can be processed outside Switzerland. Where required, appropriate safeguards are used for cross-border transfers, taking account of the destination country and applicable law.

8. Retention

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, the duration of the customer relationship, security and abuse investigation needs, accounting and tax requirements, limitation periods and other legal obligations. Retention periods can differ by data category.

9. Security

HostingBuY applies technical and organisational measures appropriate to the nature of the service, including access controls, encrypted transport, account-security measures, logging, network protections, software maintenance and restricted administrative access. No internet service can guarantee absolute security.

10. Your rights

Subject to applicable law, individuals may request information about personal data processed about them, correction of inaccurate data, deletion where no overriding retention obligation applies, or other rights available under applicable data-protection law. We may need to verify identity before responding.

11. Cookies and similar technologies

Information about cookies, sessions and similar technologies is provided in the Cookie Policy. Non-essential tracking technologies will be introduced only together with the notices and controls required by applicable law.

12. Hosting content and processor role

When a business customer uses HostingBuY to host personal data for its own purposes, the customer generally determines the purposes and means of that processing while HostingBuY processes hosted data to provide the service. Where required, the Data Processing Agreement governs that processor relationship.

13. Abuse, legal requests and disclosure

HostingBuY may preserve or disclose data where required by law, a binding legal request or court order, or where reasonably necessary and legally permitted to protect users, infrastructure or third parties, investigate serious abuse or respond to suspected criminal conduct.

14. Changes

This Policy may be updated when services, providers, legal requirements or processing activities change. The current version will be published on this page.

15. Contact

Privacy and data-processing questions may be sent to the company contact details published on the Contact and Impressum pages.