Legal

The terms, the refund rules, the acceptable-use policy and the privacy policy.

One page, four texts, written to be read: the contract between you and Cloud Wall Ltd for every account and every service, the rules of the money-back guarantee and of refunds, what may not be done with a server of ours, and what we do with your data. Each has its own anchor, and the version in force is dated below.

Version 2026-11-13

General Terms and Conditions Refunds and the money-back guarantee Acceptable Use Policy Privacy policy

General Terms and Conditions

The contract for every account and every service of LAN-SERVERS. Plain sentences, numbered within each part so that a clause can be quoted with the name of its part: General Terms 12.3, Refund rules 2.1. Where a clause applies only to consumers, it says so.

Version 2026-11-13

1. Who we are

1.1 These terms are the contract between Cloud Wall Ltd, a company registered in Bulgaria, and you, the customer. LAN-SERVERS and lan-servers.com are the trade name and the website of Cloud Wall Ltd; the client area is my.lan-servers.com. "We" and "us" mean Cloud Wall Ltd, "you" means the customer.

The provider
Company	Cloud Wall Ltd
Seat and address	blvd. Shipchenski prohod 63, 1574 Sofia, Bulgaria
Register	Commercial Register at the Bulgarian Registry Agency, UIC (EIK) 204636599
VAT number	BG204636599
Network	Our own European backbone infrastructure
E-mail	[email protected]
Client area	https://my.lan-servers.com
Supervisory authorities	Commission for Consumer Protection (www.kzp.bg) for consumer and e-commerce rules; Commission for Personal Data Protection (www.cpdp.bg) for personal data; Communications Regulation Commission (www.crc.bg), the Digital Services Coordinator for Bulgaria

1.2 You reach us by e-mail at [email protected], through a ticket in the client area, or by post at the address above. E-mail and tickets are read 24 hours a day, every day, by the engineers who run the network. The language of the contract and of our communication is English.

2. Definitions, and who these terms apply to

2.1 "Service" is a dedicated server, colocation, IP addresses, network services or anything else we sell through the site, the client area or a written quote. "Account" is your registration in the client area. "Order" is a request for a service that you confirm and pay for. "Hand-over" is the moment a server appears in the client area as running, with its address and your login.

2.2 "Consumer" is a natural person who orders for purposes outside their trade, business, craft or profession. "Business customer" is everyone else, including a sole trader and a company. If you give a company name or a VAT number on the account, we treat you as a business customer. Some clauses apply only to consumers and say so, and nothing in these terms takes away a right a consumer has by law.

2.3 These terms, the refund and money-back rules, the Acceptable Use Policy and the privacy policy on this page, the service description in the order confirmation, and the SLA document where you ordered the SLA option, together form the contract. If they disagree, the order confirmation and a written quote come first, then these terms, then the rules and the policy.

3. The account

3.1 Ordering goes through an account so that every server has an owner, an invoice and somebody to call. You open it with an e-mail address and a password, confirm the address, and give the name and address the invoices go to before the first order. The details must be true and kept current; invoices are issued to exactly what the profile says, and the country cannot be changed after the first payment.

3.2 You are responsible for everything done with your login, including by people you let use it. Keep the password to yourself, use a strong one, and tell us at once if you think someone else has it. We never ask for your password.

3.3 One customer, one account, as a rule. A company may hold several accounts for its teams if it tells us. Accounts opened to get the welcome bonus or the money-back guarantee more than once are connected accounts under the refund rules on this page and may be closed.

3.4 You must be 18 or older, or a legal person acting through someone authorised to bind it.

4. Orders, and how the contract is made

4.1 The site shows what we sell and at what price; it is an invitation to order, not an offer. You configure a server or pick a ready one, choose the term, the network and the operating system, sign in, check the order page and press the order button. The order page shows the amount to pay above the button, and the button says that pressing it places an order you have to pay for.

4.2 Before you press it, the order page shows everything you chose and the full price with the VAT that applies to you, and lets you change any of it. We confirm the order by e-mail at once, with the proforma. The contract is made when we confirm the order; for a server quoted in writing, when you accept the quote in writing.

4.3 We store the order, the proforma and the invoice, and you can see them in the client area at any time; the version of these terms you accepted, and when, is recorded on your account. The service description that counts is the one in the order confirmation.

4.4 We may refuse an order or close an account, with the reason given, when the details are false or cannot be verified, when a payment fails or is reversed, when the order would breach sanctions or the law, when an earlier account of yours was closed for a breach, or when the account is connected to one that was. We never refuse because of nationality, residence or place of establishment inside the European Union as such.

5. Prices, VAT and payment

5.1 Prices are in euro. The public site shows them without VAT; the order page shows the VAT that applies to you before you confirm. Consumers, and businesses without a VAT number, pay VAT at the rate that applies to them, which the order page shows. A business with a VAT number from another EU country pays no VAT here and accounts for it itself (reverse charge); we check the number against the EU VIES service, and if it is not valid we charge VAT from then on. Customers outside the European Union pay no EU VAT.

5.2 Services are paid in advance for the period you chose: one, three, six or twelve months. We issue a proforma for every payment due and the invoice once it is paid. Both are electronic, in the client area and by e-mail, and you agree to receive them that way. An issued invoice never changes.

5.3 You can pay by card or PayPal (through Stripe and PayPal), in crypto (through CoinGate), by bank transfer quoting the proforma number, or from your balance. A card or PayPal payment can be set to repeat every month, and you can stop it at any time in the client area; the periods already paid stay paid.

5.4 The balance is money paid in advance to the account. It pays for services on the account and is not paid out, except where the law gives you the right to it or where the refund rules on this page say otherwise.

5.5 A payment that is reversed (a chargeback, a PayPal dispute decided against us, a transfer recalled) counts as not made. The service it paid for is treated as unpaid from that moment, and we may pass on the fee the provider charged us for the reversal. If you think a payment is wrong, write to us first; it is quicker for both of us.

5.6 If a business customer pays late, we may charge the statutory default interest and the recovery costs the Bulgarian Commercial Act allows. We charge consumers no interest and no fee for a late payment; the service is suspended instead, as described under "Unpaid proformas".

6. Delivery and hand-over

6.1 We hand over a server from stock within 2 hours of the payment being confirmed and a server built to order within 24 hours. Where the order page or a written quote names a longer time, that time applies. A bank transfer is confirmed when the money reaches our account.

6.2 Hand-over is the moment the server appears under My services in the client area as running, with its address and its root password or your console login, and the e-mail that tells you so where we send one. The period paid for and the 14 days of the money-back guarantee both start on that day.

6.3 If we cannot hand over within the time we said, we tell you why and when we can. You may then cancel the order, and we refund everything you paid for it in full within 14 days.

7. What we provide, and what stays ours

7.1 A dedicated server is the whole machine for your use alone: the hardware named in the order, its power, cooling and rack space in our data center in Sofia, its network port at the speed ordered, the IP addresses ordered, IPv6, the out-of-band console, and the DDoS filter where it is part of the order. Root is yours from the first boot.

7.2 The hardware, the rack, the network equipment and the IP addresses remain the property of Cloud Wall Ltd unless you bought the server or leased it to own under a separate written agreement. Addresses are assigned for the duration of the service and go back to us when it ends; they cannot be sold, transferred or taken to another provider. Addresses you bring yourself stay yours.

7.3 Hands-on support covers the hardware, the network and the Linux-based operating systems we install. You may install anything that boots on the hardware; what runs on the server, how it is secured and what it is used for are your responsibility.

7.4 We replace failed hardware from our own stock with an equivalent or better part; the data on a failed drive is not ours to restore. Planned maintenance that affects your service is announced to the technical contact on the account ahead of time, except for urgent work needed to keep the network or the hardware safe.

7.5 Where you ordered the SLA option, the 99.99% availability promise, its exclusions and the service credits are as described at /sla and in the SLA document. For a business customer the credits are the remedy for an availability shortfall; for a consumer they come in addition to the rights the law gives.

8. Your data and your backups

8.1 Everything you put on the server is yours. We do not look at it except when you ask us to for support, when the law or an order of a competent authority requires it, or when an abuse report or a security incident makes it necessary to look at the specific thing reported, and then only as far as needed.

8.2 We keep no copy of what is on your server unless you bought a backup service. Backups are your job. When a service ends for any reason, the drives are wiped and the addresses released, as described under "Term, renewal and cancelling" and "Unpaid proformas".

8.3 Where we process personal data on your behalf, you are the controller and we are the processor, and a data processing agreement under Article 28 of the GDPR is available on request. How we handle the personal data we hold about you as a customer is in the privacy policy on this page.

9. Term, renewal and cancelling

9.1 A service runs for the period paid for, from the day of hand-over to the same day of the month the period ends, and renews for the same period unless it is cancelled. Before a period ends we issue the proforma for the next one; its due date is printed on it.

9.2 You can cancel a service at any time in the client area. It then runs to the last day paid for and is not billed again, and the cancellation can be withdrawn until that day. After that day its addresses go back to us and the drives are wiped. We do not refund the rest of a period you cancel, except under the money-back guarantee or your right of withdrawal, both in the refund rules on this page.

9.3 An order that is not paid within the time shown on it is cancelled together with its proforma, and nothing is owed. You can cancel an unpaid order yourself at any time before that.

9.4 We may end a service or an account without a breach on your side with notice by e-mail, at the earliest to the end of the period paid for, and in that case we refund any time paid for beyond the end date. We may end it without notice for a breach, as described under "Suspension and termination for a breach".

10. Unpaid proformas

10.1 If a proforma is not paid by its due date, we remind you by e-mail. If it stays unpaid, the service is suspended: the server is taken off the network and its data stays on it. Once the proforma is paid, the service comes back by itself, with the period counted from its original date.

10.2 If the proforma is still unpaid on the date named in the suspension notice, the service ends: its addresses go back to us and the drives are wiped. The e-mails and the client area show the dates that apply to your service. Suspension for non-payment is not downtime under the SLA.

11. Your obligations

11.1 Use the service lawfully and within the Acceptable Use Policy on this page, which lists what is forbidden and what we do about it. You are responsible for what runs on your server and for what your users and customers do with it, including when you resell it.

11.2 Keep the contact details and the technical contact on the account current, read the e-mail address on it, and answer an abuse report within the time it names. Keep your server secured and patched; a compromised server that attacks others is treated like one that does so on purpose until it is fixed.

11.3 Do not touch hardware, networks, consoles or addresses that are not yours, do not try to get around a limit we set, and do not attack, probe or test our systems without our written permission.

11.4 Compensate us for a claim a third party brings against us because of what you did with the service, including our reasonable costs of dealing with it, unless the claim is our fault.

12. Suspension and termination for a breach

12.1 If you breach these terms or the Acceptable Use Policy, we may, in proportion to what happened: ask you to fix it within a set time; filter or disconnect the address or port concerned; suspend the server or the account; or end the contract. For child sexual abuse material, an attack running from your server, an order of a court or a competent authority, or a danger to the network or to other customers, we act at once and explain afterwards.

12.2 Every suspension or termination comes with a written statement of reasons: what we found, which clause or which law it breaches, whether an automated tool played a part in finding it, and how to object. You can answer on the ticket, and a member of staff who did not take the first decision reviews it. You may also take the matter to the dispute body or the court named under "Law, courts and disputes".

12.3 If a service is suspended or ended for a breach, the fees paid for it are not refunded and the money-back guarantee does not apply. For a business customer the fee for the current period is forfeited as a contractual penalty, and we may claim damages above it. For a consumer the amount we keep is limited to the fee for the current month of service and the documented cost the breach caused us, and the fee for a full month paid for and not started is refunded; a consumer's statutory rights are not affected.

12.4 A suspension for a breach is not downtime under the SLA.

13. Liability

13.1 We are liable without limit for damage caused intentionally or by gross negligence, for death or personal injury, and wherever the law does not allow liability to be limited, including a consumer's statutory remedies for a service that does not conform to the contract.

13.2 In every other case our liability for a service is limited to the fees you paid for that service in the 12 months before the event, and we are not liable for indirect or consequential loss, lost profit, lost business or loss of data, since backups are yours to keep. Where the SLA option applies, the service credits are the remedy for an availability shortfall.

13.3 We are not liable for a failure caused by something beyond our reasonable control: a power or carrier failure outside our network, war, natural disaster, strikes, an act of an authority, or a failure of a supplier we could not reasonably avoid. We do what we reasonably can to restore the service. If such an event stops a service for more than a month, either side may end the service, and we refund the time not provided.

13.4 You are liable to us for damage you cause to our hardware, our network or other customers, and for the costs of a breach.

14. Changes to these terms

14.1 We may change these terms, the refund rules, the Acceptable Use Policy and the privacy policy. Every version carries a date; the version in force is on this page and earlier versions are available on request. The version you accepted is recorded on your account.

14.2 Consumers: we tell you about a change by e-mail within 7 days of making it. If you do not agree, you may end the contract within one month of the notice without penalty, or stay on the terms you accepted. If you say nothing within the month, the new text applies.

14.3 Business customers: we give at least 30 days' notice by e-mail and in the client area before a change takes effect. You may end the contract before that date if you do not accept the change; otherwise the new version applies from that date.

14.4 A change required by law or by an authority takes effect as the law requires. A change that only improves your position takes effect when it is published. A significant change is announced to every customer.

15. Law, courts and disputes

15.1 Bulgarian law applies, and for business customers the competent court is the court in Sofia. For a consumer this choice does not take away the protection of the mandatory rules of the law of the country where the consumer lives. A consumer living in Bulgaria sues and is sued at the court of the consumer's address; a consumer living in another EU country may sue us at home and can be sued only there. There is no arbitration clause for consumers.

15.2 Talk to us first: a ticket or an e-mail to [email protected] reaches the people who can fix the problem, and most disagreements end there. We answer a complaint in writing.

15.3 A consumer may also take a dispute to the General Conciliation Commission at the Commission for Consumer Protection, seated in Sofia (www.kzp.bg, [email protected]), an alternative dispute resolution body under the Consumer Protection Act. The procedure is free of charge, and the outcome binds only if both sides accept it. Taking part is voluntary for both sides; we decide whether to take part when a request reaches us and tell you in writing. A consumer living in another EU country may use the alternative dispute resolution body of that country.

15.4 If a clause of these terms is or becomes invalid, the rest stays in force, and the invalid clause is replaced by what the law provides.

16. Your rights as a consumer are not affected

16.1 Nothing on this page limits a right a consumer has under the law of the European Union or of Bulgaria, including the 14-day right to withdraw from a contract made at a distance and the remedies for a service that does not conform to the contract. Where a clause would limit such a right, the right applies and the clause does not. The right of withdrawal and the model form are in the refund rules on this page.

17. How to reach us

17.1 For anything about the account, the services or these terms: a ticket in the client area, or [email protected]. Our postal address is under "Who we are".

17.2 Abuse reports and legal notices about our network or a customer's server go to [email protected]; the Acceptable Use Policy says what a notice needs and what happens next.

17.3 Authorities, including the courts and the Digital Services Coordinator, reach us at [email protected] and at the postal address above, in Bulgarian or in English. We report a suspected offence that threatens someone's life or safety to the police.

Refunds and the 14-day money-back guarantee

The guarantee is our promise: not satisfied with your first server, your money back, with no unnecessary questions. These are the rules it runs on, the cases it does not cover, how a refund is paid, and the rights the law gives you on top of it.

The guarantee in one table

1. The guarantee

1.1 Cloud Wall Ltd gives every new customer a 14-day money-back guarantee on the first order. If the server is not what you expected, tell us within 14 calendar days of the hand-over and we refund what you paid for it. We make this promise because we are certain of the quality of what we run. It is a commercial guarantee of Cloud Wall Ltd; it comes on top of your rights under the law and never replaces them.

1.2 Once per customer. A customer is one person or one company, whatever the number of accounts, e-mail addresses or names it uses. The guarantee applies to the customer's first order, on whichever of its accounts it is placed, to everything on that order, and to nothing after it.

1.3 To use it, open a ticket or send an e-mail saying that you want the guarantee. That is the whole procedure. We may ask what went wrong, because we want to fix it for the next customer; answering is optional and does not affect the refund.

1.4 We refund the full amount paid for the server and its included services, to the payment method it was paid with, within 10 days of your request. Third-party costs bought at your request, such as software licences, IP transfers and custom parts, are excluded, and so is a payment made in crypto through CoinGate, which is not refunded.

1.5 The service ends when the refund is made: the server is wiped, as every returned server is, and its addresses go back to us. Copy out what you need before you ask.

2. When we may refuse the refund: connected accounts

2.1 The guarantee and the welcome bonus are granted once per person or company. We may refuse them when the account is connected to an account that has already had either of them. Accounts count as connected when they belong to the same person or company under another name, or when they share a payment card, a PayPal account or a bank account, an IP address or a device used to sign in or to order, or contact details such as an e-mail address, a telephone number or a postal address, or when other facts plainly show that the same person or company is behind both.

2.2 A finding that accounts are connected is made by a member of our staff, never by a program alone. We send it to you in writing with the facts it rests on, and you can answer with evidence within 7 days; we look at what you send before the finding is final. If you gave false details, or opened more than one account to get the guarantee or the bonus more than once, both are forfeited on every account involved, and the accounts may be closed.

2.3 There is no other reason for refusing the guarantee than the ones on this page: an order after the first, a connected account, a server or account suspended or ended for a breach, or an order paid in crypto.

3. No refund after a suspension for a breach

3.1 There is no refund under the guarantee for a server or an account that has been suspended or ended because of a breach of the Acceptable Use Policy or the General Terms: abuse of any kind, illegal activity, DDoS attacks or other attacks from the server, spam, malware, phishing or fraud, a sanctions breach, or any other breach named there. The fees paid are kept as the next paragraph says.

3.2 For a business customer the fee for the current period is forfeited as a contractual penalty, and we may claim damages above it. For a consumer the amount we keep is limited to the fee for the current month of service and the documented cost the breach caused us, and the fee for a full month paid for and not started is refunded; a consumer's statutory rights are not affected.

4. What else is not refunded

4.1 Apart from the guarantee and the right of withdrawal below, payments are not refunded: not the rest of a period you cancel, not a balance top-up, not a setup fee, not third-party costs bought at your request, and no payment made in crypto through CoinGate. Where the law gives you a refund all the same, for example when we end a service without a breach on your side or when we cannot deliver, we pay it within 14 days.

4.2 Service credits under the SLA are credited to the balance and are not paid out.

5. Your statutory right of withdrawal (consumers)

5.1 If you are a consumer, you may withdraw from a contract made at a distance within 14 days of the day it was made, without giving a reason. This right is yours by law (the Consumer Protection Act and Directive 2011/83/EU) and exists next to the guarantee: on the first order you may use either, and the guarantee is normally the better of the two; if the guarantee is refused or not claimed, the right of withdrawal stands on its own, and on every later order it is the right that applies.

5.2 To withdraw, tell us in a clear statement before the 14 days are up: a ticket, an e-mail to [email protected], or a letter to our address. You may use the model form below but do not have to. We confirm receipt by e-mail without delay.

5.3 We hand a server over as soon as it is paid, which is before the 14 days are up, so when you order you ask us to start the service at once, during the withdrawal period. If you then withdraw, you pay a proportional amount for the days the service was provided until we received your statement, worked out from the price of the order, and we refund the rest within 14 days by the same means you paid with. The right ends once the service has been fully performed, that is when the period paid for has run out.

Model withdrawal form. Complete and return it only if you wish to withdraw from the contract.

To Cloud Wall Ltd, blvd. Shipchenski prohod 63, 1574 Sofia, Bulgaria, [email protected]:

I hereby give notice that I withdraw from my contract for the provision of the following service:

Ordered on:

Name of the consumer:

Address of the consumer:

Signature of the consumer (only if this form is sent on paper):

Date:

6. How a refund is paid

6.1 A refund goes back the way the money came: to the card or the PayPal account that paid, to the bank account the transfer came from, or to the balance if the payment was made from the balance. We cannot pay a refund to a different account or in cash. Where the original method is no longer available, tell us and we agree another with you at no cost to you. A payment made in crypto through CoinGate is not refunded, except where the law requires it.

6.2 A refund covers the amount paid including its VAT, and we issue the corresponding credit document, which you find in the client area.

Acceptable Use Policy

What may not be done with a server or an address of ours, how abuse reports are handled, and what happens when a rule is broken. It is part of the General Terms and applies to every customer and to everyone a customer lets use the service.

1. The rule

1.1 Use the service for anything lawful. Every kind of abuse is forbidden: of the server, of the network, of other people's systems and of other people. The list below names what we see most; something not on it is still forbidden if it is illegal or harms others.

1.2 You are responsible for everything that happens from your server and your addresses, whether you did it, a user of yours did it, or a program on a compromised server did it. If you resell the service, you pass this policy on to your customers and answer to us for them.

2. What is forbidden

2.1 In particular, you may not use the service to do, host, send or help with any of the following:

content or activity that is illegal under the law of Bulgaria or of the European Union, or under the law of the country it is aimed at;
child sexual abuse material in any form: the service is ended at once and the matter is reported to the authorities;
terrorist content, and content that incites violence or hatred against a group of people;
infringement of copyright, trade marks, patents or other rights of third parties, including unlicensed software and media;
spam: unsolicited bulk e-mail or messages of any kind, sent from the server or relayed through it, and hosting anything advertised by spam sent from elsewhere;
phishing, fraud, scams, carding, the sale of stolen data or credentials, and the hosting of fake pages;
malware, botnet command and control, exploit kits, and any service whose purpose is to hide or protect such things;
attacks on other systems: outgoing DDoS or traffic floods, IP spoofing, running open resolvers, amplifiers, relays or proxies that others use for attacks, and attacks on our network or on other customers;
port scanning, vulnerability scanning, brute-forcing or intrusion attempts against systems you do not own and are not authorised in writing to test;
anything that breaches sanctions or restrictive measures of the European Union, the United Nations or Bulgaria, including providing the service to or for the benefit of a listed person or body, or in a way those measures prohibit;
interference with hardware, networks, consoles or addresses that are not yours, and attempts to get around a limit we set;
harassment, threats or abuse directed at our staff or at other customers.

3. Reporting abuse to us

3.1 Anyone may report abuse coming from our network or hosted on a customer's server. Write to [email protected]. Reports are read by the engineers 24 hours a day.

3.2 A report should say what the problem is and why you think it is illegal or against this policy, where it is (the IP address, the URL, the headers of a message), when it happened with the time zone, your name and e-mail address so that we can answer you, and that you believe in good faith that the information in it is accurate and complete. A report of child sexual abuse material may be made without a name.

3.3 We acknowledge receipt, we handle reports promptly and even-handedly, in the way Article 16 of the Digital Services Act requires, by people and not by automated tools alone, and we tell the reporter what we decided and how to object. A report that is clearly abusive or repeatedly unfounded may be answered more briefly.

4. How we handle a report about your server

4.1 We forward the report to the e-mail address on the account with the evidence and a time to act, which is 48 hours unless the report says otherwise. Fix the cause and tell us what you did. For a blocklisted address, fix the source first; a delisting with the source still active does not hold.

4.2 If the problem is not fixed in time, or it repeats, we act in proportion to what happened, in these steps: we filter or disconnect the address or port concerned; we suspend the server, which takes it off the network and leaves the data on it; we end the service and close the account. A step may be skipped when the breach is serious or repeated.

4.3 We act at once and explain afterwards when a report concerns child sexual abuse material, when an attack is running from your server, when a court or a competent authority orders it (including an order to remove terrorist content within one hour), or when the network or other customers are in danger.

4.4 Every suspension or termination comes with a written statement of reasons: what we found, which clause of this policy or which law it breaches, whether an automated tool played a part in finding it, and how to object. You can object on the ticket, and a member of staff who did not take the first decision reviews it; you may also take the matter to the dispute body or the court named in the General Terms.

4.5 There is no refund for a server or an account suspended or ended under this policy; the refund rules on this page say what that means for business customers and for consumers. We report a suspected offence that threatens someone's life or safety to the police, and we hand over what the law requires to a competent authority on a lawful request.

4.6 We keep the evidence of a breach, including logs, copies of messages and the report itself, for as long as a claim could be made about it.

5. Resellers

5.1 A partner who resells the service passes this policy on to its customers, answers to us for their use, and keeps an abuse contact that we can reach. A report about a reseller's customer is forwarded to the reseller, who acts within the same time.

6. Changes

6.1 Changes to this policy follow the clause "Changes to these terms" of the General Terms. A significant change is announced to every customer by e-mail.

Privacy policy

What Cloud Wall Ltd collects about you as a customer or a visitor, why, for how long, who else sees it, and what you can do about it. For what you put on your own server you are the controller, and we only keep the lights on.

1. Who is responsible

1.1 The controller is Cloud Wall Ltd, blvd. Shipchenski prohod 63, 1574 Sofia, Bulgaria, [email protected]. For anything about personal data, write to that address with "privacy" in the subject, or open a ticket.

2. What we collect

2.1 Account and billing data: your name, company name, address and country, VAT number and the result of its check against the EU VIES service, e-mail address and telephone number if you give one, and the version of the terms you accepted and when.

2.2 Login and security data: the password in hashed form, a history of sign-ins with the IP address, the time and the browser identification, and the codes and links sent to confirm the address or to reset the password.

2.3 Payment data: what the payment provider sends us, that is the type of payment method, the last digits of a card, the payer's name and e-mail address at PayPal, the coin and the amount of a crypto payment at CoinGate, transaction identifiers, amounts and dates. Card numbers never reach our systems; Stripe and PayPal hold them. For a bank transfer, what appears on our bank statement: the account name, the account number and the reference. Top-ups, proformas, invoices and credit documents.

2.4 Service data: the servers, their addresses and reverse DNS names, the operating system installed, power and reinstall actions, traffic measurements per port, console sessions opened from the client area, and the tickets and e-mails exchanged with us.

2.5 Abuse and security data: reports we receive that name your addresses, what we found and the steps we took, and the signals used to check whether accounts are connected, described under "Connected accounts and automated decisions".

2.6 Website data: the server logs of www.lan-servers.com and my.lan-servers.com (IP address, time, page requested, browser identification), the analytics and advertising data described under "Cookies and analytics", and, kept with your account and your orders, which advert or campaign link brought you, the page you came in on and when, the identifier Google Analytics gave your browser, whether you had accepted Google's cookies, and the country your connection came from.

3. Why, and on what legal basis

3.1 We use the data for these purposes, each on the legal basis named:

to open and run your account, deliver and run the services, answer tickets and bill you: the contract with you (Article 6(1)(b) of the GDPR);
to issue invoices and keep them, with the identity and address data on them, and to apply the right VAT: our legal obligations under the accounting, VAT and tax laws (Article 6(1)(c));
to keep the account and the network secure, to detect fraud and abuse, to check whether accounts are connected before granting the guarantee or the bonus, to handle abuse reports and to establish or defend legal claims: our legitimate interests (Article 6(1)(f)), which you may object to as described under "Your rights";
if we write to existing customers about our own, similar services, every such message carries an unsubscribe link, and you may object at any time and for free (Article 6(1)(f) and Article 21(2));
for visitors in the European Economic Area, the UK and Switzerland, to measure, with cookies, how the sites are used and how our adverts on Google perform, to learn, only in totals, the age group, gender and interests of our visitors, and to let Google show our adverts to people who have been on the sites, with Google Analytics and Google Ads, only if you accept it in the cookie banner: your consent (Article 6(1)(a)), which you can withdraw at any time under "Cookie settings" at the foot of every page, as described under "Cookies and analytics";
to count page views and how pages are used, and the results of our adverts, without cookies, before you choose or after you reject, with Google's tag: our legitimate interests (Article 6(1)(f)), which you may object to as described under "Your rights";
to know which of our adverts and campaign links bring accounts and orders, from the site's own advert cookie and what is kept with the account and the order: our legitimate interests (Article 6(1)(f)), which you may object to as described under "Your rights";
for visitors outside the European Economic Area, the UK and Switzerland, measuring with cookies and our adverts from the first page until they reject: our legitimate interests (Article 6(1)(f)), which they may object to at any time by clicking Reject;
to comply with sanctions screening, lawful requests of authorities and court orders: our legal obligations (Article 6(1)(c)).

3.2 Giving us your identity and billing details is needed to make the contract; without them we cannot open an account or issue an invoice. Everything else is optional.

4. Connected accounts and automated decisions

4.1 Before the welcome bonus or the money-back guarantee is granted, and when something looks wrong, we compare the account with earlier accounts on the signals named in the refund rules: name and company, payment card, PayPal or bank account, IP addresses and devices used, and contact details. A program may bring a match to our attention; a member of staff looks at it and decides, and you are told in writing and can answer. We make no decision about you by automated means alone.

5. Who else sees your data

5.1 We share data only with these recipients, and only as far as each needs it:

Stripe Payments Europe Ltd (Ireland), PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) and UAB Decentralized (Lithuania), which runs CoinGate, which process card, PayPal and crypto payments as independent controllers under their own privacy policies; we receive from them only what is listed under "What we collect";
our bank, named on every proforma, for bank transfers;
Google Ireland Ltd, as our processor, for the e-mail system we write to you from (Google Workspace) and for the statistics of Google Analytics on both sites; and, where Google's cookies are used, as an independent controller for advertising, under its own privacy policy, as described under "Cookies and analytics";
the European Commission's VIES service, which we ask to confirm a VAT number;
RIPE NCC, the internet registry, where your organisation is recorded against IP addresses assigned to you at your request;
our accountants and lawyers, under a duty of confidentiality;
public authorities and courts, when the law requires it or a lawful request is made;
the people who report abuse, who are told what we decided about their report but not who you are, unless the law requires it.

5.2 Transfers outside the European Economic Area: Google LLC in the United States, under the EU-U.S. Data Privacy Framework and, where needed, the European Commission's standard contractual clauses. Everything else stays in the European Union; our servers and our records are in Sofia.

6. How long we keep it

6.1 We keep data for as long as each purpose needs it, and then delete or anonymise it:

invoices, proformas, credit documents and the identity and payment data on them: 10 years, counted from the start of the year after the one they concern, or longer where the tax laws require it;
account data, tickets and e-mails: for as long as the account exists and for 5 years after the last contract ended, the general limitation period under Bulgarian law, or longer while a claim is open;
which advert or campaign link brought an account or an order, and what is kept with it for our own reports: as long as the account data above;
the sign-in history and the web server logs: 12 months;
analytics data, with what Google signals adds to it: for the retention period set in our Google Analytics property, after which Google deletes it; a visitor stays on a list of people our adverts are shown to for at most 540 days;
abuse reports and the record of a breach: 5 years from the event, or longer while a claim is open;
the signals used to check whether accounts are connected: for as long as the guarantee or the bonus could be claimed or disputed on the accounts concerned;
the contents of a server: not kept by us at all, and wiped when the service ends, as the General Terms say.

7. Your rights

7.1 You have the right to see the data we hold about you, to have it corrected or completed, to have it erased where there is no longer a reason to keep it, to restrict its use, to receive the data you gave us in a machine-readable form, and to object to processing that rests on our legitimate interests, including to direct marketing at any time. Where processing rests on your consent, you may withdraw it at any time with effect for the future. Write to [email protected] or open a ticket; we answer within one month, and we may ask you to confirm who you are.

7.2 You may complain to the Commission for Personal Data Protection in Sofia (www.cpdp.bg, [email protected]), or to the supervisory authority of the EU country where you live, and you may go to court.

8. Cookies and analytics

8.1 Here is everything either site stores in your browser, and for how long:

The client area, my.lan-servers.com, uses a cookie that keeps you signed in. It is deleted when you sign out or close the browser, and without it there is no signing in, so it needs no consent.
Your cookie choice is kept in your browser, for both sites: whether you accepted or rejected Google's cookies, and when, so the banner does not ask on every page. It is asked again after a year.
If you come to the site from one of our adverts or a campaign link, the site's own cookie remembers which one, for 90 days, so that an account or an order can be linked to the advert that brought it. It is set from your first page, before you choose, as our legitimate interest (see above). Reject removes it, and it is not set again while your choice is Reject; what it held stays with an account or an order made before.
If you close the offer strip at the top of the public site, your browser remembers it, so the strip stays closed until the offer changes.
Google's tag (Google Tag Manager) is on every page. In the European Economic Area, the UK and Switzerland, until you click Accept, and after you reject, it neither sets nor reads cookies, and Google receives, without cookies, each page view and how the page is used (scrolling, clicks on links, forms started or sent, files downloaded), the click id of our advert if you came from one, and the sign-ups, requests and orders described below, which it uses to estimate visits and the results of our adverts. Elsewhere, Google Analytics and Google's advertising cookies are used from your first page unless you click Reject.
Google Analytics and Google's advertising cookies, in the European Economic Area, the UK and Switzerland only after you click Accept, elsewhere until you click Reject: they last from three months to two years, count visits and show which pages are read, tell Google Ads which visits, sign-ups, requests and orders came from our adverts, and let Google show our adverts to people who have been here. With or without cookies, when you sign up, place or pay an order, or your server is handed over, Google is told so, with what was ordered and its amount without VAT, and, once it is paid, the order's number; while the cookies are on, it also gets your e-mail address, phone number, name and street, hashed on our side, so that for this Google gets them only in that form, and your city, region, postal code and country as they are, which Google uses to match the event to its own users when it measures our adverts. With or without cookies, when you send a custom server request or a partner application, Google is told so, and which of the two it was, but never what you wrote in it.
While Google's cookies are on, Google also recognises visitors who are signed in to a Google account and allow personalised adverts in it, across the browsers and devices they use, and from that gives us the age group, gender and interests of our visitors, only in totals and never about one person. For this, and to show our adverts to people who have been here, Google uses the site's Google Analytics cookies together with its own advertising cookies on Google's domains. Google calls these features Google signals, demographics and interests reports, and remarketing.

8.2 With or without cookies, what Google's tag sends to Google comes with your IP address and what every browser tells the sites it opens: the browser identification, the device, the screen size and the language. For the statistics, Google processes the data for us, drops the IP address of a visitor from the European Union before storing anything, and uses it only to derive a coarse location. For advertising, Google also uses the data, your IP address among it, for its own purposes, under its own privacy policy, among them to personalise the adverts you see on other sites. For the age group, gender and interests, Google draws on what it knows from the Google accounts of signed-in visitors. How Google uses data from sites that use its services is described at policies.google.com/technologies/partner-sites and at business.safety.google/privacy.

8.3 You can change your choice at any time under "Cookie settings" at the foot of every page. Rejecting after you accepted stops Google's cookies and its use of your visits for advertising, and removes the cookies the site can reach; your browser's own settings can remove the rest. Google's tag goes on sending page views, how pages are used, and sign-ups, requests and orders without cookies, as above. Nothing on either site stops working without them.

8.4 Besides Reject, you can turn off personalised adverts from Google in Google's ad settings, signed in or not, at adssettings.google.com, find out how to limit interest-based adverts from other advertising companies, in your browser and on your devices, at thenai.org/how-to-opt-out, and stop Google Analytics on every site you visit with Google's browser add-on at tools.google.com/dlpage/gaoptout.

8.5 When you pay, the page of Stripe, PayPal or CoinGate that you go to sets cookies of its own, under its own policy.

9. Your data on your server

9.1 What you store and process on your server is yours, and you are the controller of any personal data in it. We do not access it except as the General Terms say: at your request for support, under a lawful order, or to look at the specific thing an abuse report or a security incident points to. Where we process personal data for you as a processor, a data processing agreement under Article 28 of the GDPR is available on request.

10. Changes

10.1 This policy changes when what we do changes. The date at the top of the page is the date of the version in force; earlier versions are available on request, and a change that matters to you is announced by e-mail.