Your content is yours
| What it is | what you or your customers store, send or process in our cloud or on equipment you place with us. This policy does not cover it. |
|---|---|
| Who decides | you are the controller of that data. We act on your instructions, within the contract. |
| Whether we look | we do not look at it, except where the service, your instructions or the law require it. |
| In colocation | we have no logical access to your equipment. |
What we collect
| Contract and account | name, company, e-mail, Telegram, phone, billing address, login details and order history. |
|---|---|
| A request from this site | what you enter in the form. The IP address is not stored with the request. |
| Payments | payment type, references and invoices. Card details stay with the payment providers; we do not store full card numbers. |
| Checks | identity and company documents and the results of sanctions screening, as the legal page describes. |
| Service data | IP addresses, resource use, support requests and security logs. |
| This website | server logs: IP address, pages, time, browser and referrer. Analytics runs only with your consent. |
| Correspondence | e-mails and other messages you send us. |
| Datacenter access | names and identity documents of people who visit, access logs and camera recordings. |
Why we use it, and on what basis
Under Armenian law we process personal data with your consent or where a law directly provides for it; data we receive under a contract with the person the data is about, and use for that contract, counts as consent.
| To answer a request from this site | your consent, given by sending the form. |
|---|---|
| To conclude and run the contract, to invoice and to support you | the contract with you and the data you gave us for it. |
| To check identity and sanctions and to prevent abuse | the law where it requires the check, otherwise the contract with you. |
| Tax and accounting records | a direct requirement of the law. |
| Measuring the site with analytics | your consent. |
| Marketing | only your separate consent. |
Transfers to other countries
| Where the services run | in datacenters in the Amsterdam area, so personal data is transferred to the Netherlands. |
|---|---|
| On what basis | your consent, or because the transfer follows from the purpose of the processing, within the limits of Armenian law. |
| as the section on analytics and cookies describes. |
How long we keep it
| Contract and account data | the term of the contract and 2 years after it, unless a dispute needs longer. |
|---|---|
| Accounting records | at least 5 years, as Armenian law requires. |
| Requests and correspondence | 2 years. |
| Security logs | 6 to 12 months. |
| Website logs | up to 12 months. |
| Analytics data | 14 months, as the section on analytics and cookies says. |
| Afterwards | we delete the data or make it anonymous. |
Security, and what happens after a leak
| Measures | we protect personal data with reasonable technical and organisational measures. No way of storing or sending data is completely safe. |
|---|---|
| If data leaks | if personal data leaks from electronic systems, we immediately publish an announcement and report the leak to the police and the authorised body, as Armenian law requires. |
Cookies on this site
| Before you choose | no cookies at all. |
|---|---|
| What can be set | analytics cookies only, and only if you allow them. There are no advertising cookies. |
| The details | under Analytics and cookies on the legal page; Cookie settings in the footer of every page changes your choice. |
Your rights
It is free of charge. Send a written request to sales@super.am; we may ask you to confirm who you are.
| To know and to see | whether we process your data, why, on what grounds and who may receive it, and to get to see the data itself. |
|---|---|
| To correct, block or delete | data that is incomplete, inaccurate or outdated, was obtained unlawfully or is not needed for the purpose. |
| To withdraw consent | at any time. What was processed before stays lawful. |
| Periods set by law | information within 5 days of a written request; correction immediately, and no later than 3 working days; destruction within 10 working days of withdrawing consent, unless a law or an agreement with you says otherwise. |
| If the GDPR applies to you | you may also restrict or object to processing and receive your data in a portable format. |
| Where to complain | the Personal Data Protection Agency of the Ministry of Justice of the Republic of Armenia, or a court. From the European Union, also the supervisory authority of your country. |
Automated decisions and children
| Automated decisions | we take no decision about you by automated means alone. |
|---|---|
| Children | our services are for businesses and adults, and we do not knowingly collect children's data. Under the age of 16, consent is given by a legal representative. |
Changes to this policy
| Changes | the date at the top shows the current version. We tell you about a significant change. |
|---|---|
| How to reach us | sales@super.am |