This Privacy Policy explains how CDNsun s.r.o. processes personal data when you visit our website, create an account, use our billing and support functions, or communicate with us.
1. Who is responsible
CDNsun s.r.o., company number 05745314, V zářezu 902/4, 158 00 Prague, Czech Republic, is the controller of the personal data described in this Policy. You can contact CDNsun support about privacy or use another contact method listed in section 8.
When a customer uses our CDN or storage services to deliver or store content involving other people's personal data, the customer normally determines the purposes and means of that processing and CDNsun acts as its processor. The applicable Data Processing Agreement (DPA) and the customer's own privacy information govern that processing. See our GDPR page for information about CDNsun as a processor and access to the DPA. This Policy addresses CDNsun's processing as a controller, including account administration, billing, support, website operation and marketing.
2. What data we process and why
| Activity | Data concerned | Purpose and legal basis |
|---|---|---|
| Account, trial and services | Name, company and contact details, account identifiers, settings, service configuration and usage information | Create and administer your account, provide the trial and paid services, authenticate users and communicate about the service. Performance of a contract or steps requested before entering it; for a business account contact, our legitimate interest in managing that business relationship. |
| Orders, payments and invoices | Billing details, orders, prepaid credit and usage records, payment status and transaction identifiers | Process orders, account for usage and payments, issue invoices and meet accounting and tax obligations. Performance of a contract and legal obligation. Payment details needed to complete a transaction are also processed by the payment provider selected at checkout. |
| Support and live chat | Contact details, the content of requests and messages, and technical information you provide to diagnose an issue | Answer requests and resolve technical or billing matters. Performance of a contract or our legitimate interest in providing and improving support. Please avoid sending passwords, payment-card details or unrelated personal data in support messages. |
| Security and website operation | IP address, browser or device information, access times, requested pages, account activity and relevant technical logs | Operate and secure the website and accounts, detect abuse, investigate incidents and troubleshoot faults. Our legitimate interest in service security and reliability, and legal obligation where applicable. |
| Service updates and occasional promotional messages | Contact details and communication preferences | Send necessary account, order, payment, security and service notices as part of providing the service. We may also send occasional news about CDNsun features and our own similar services to customers where permitted by law, subject to the opportunity to decline when the address is obtained and in each such message. Otherwise, we use consent where required. You can stop promotional messages without stopping necessary service notices. |
| Website cookies and similar technologies | Cookie identifiers and information about use of the website | Necessary technologies support login, security and core operation. We also use analytics technologies to understand website use and advertising technologies to measure or support promotion. Where consent is required for analytics or advertising technologies, consent is the applicable basis. These technologies are not necessary to create an account or use the paid CDN service. |
We obtain this information from you, from your use of our website and services, and from the payment or support processes you choose to use. Account and billing details required to provide a service or issue an invoice must be supplied for those purposes; optional marketing and non-essential cookies are not required for the service.
3. Service providers and recipients
We use Stripe and PayPal to process payments, SendGrid to send email, Freshdesk for helpdesk requests and Zendesk Chat for live chat. We disclose to each provider the data relevant to its role. Depending on the service, we may also use hosting and infrastructure providers and analytics or advertising providers. We may disclose information to competent authorities or professional advisers when required or permitted by law, and to another party where necessary to establish, exercise or defend legal claims.
Access is limited to authorized CDNsun personnel and the providers needed for the purposes described above.
4. Processing outside the European Economic Area
The providers listed above may operate internationally. This Policy does not represent that their processing or access is limited to the European Economic Area (EEA). If personal data is transferred outside the EEA, the transfer must use a mechanism permitted by data-protection law, such as a European Commission adequacy decision or appropriate contractual safeguards. You can contact CDNsun support for information about transfers relevant to your data and the applicable safeguards.
5. How long we keep data
We retain personal data for no longer than necessary for the purposes for which it was collected, subject to legal duties and the need to resolve disputes or defend claims. Account data is retained while the account is active and thereafter only to the extent needed for those remaining purposes. Orders, invoices and related accounting records are kept for the period required by applicable accounting and tax law. Support records are kept for the time needed to handle the matter and any related claims. Website and service logs are kept for operational, security and troubleshooting purposes and then deleted when those purposes and any applicable legal need end. Retention criteria differ by data category.
6. Cookies
Our website uses necessary cookies or similar technologies for functions such as login and security. It also uses analytics and advertising cookies or similar technologies for the purposes described in section 2. The specific technologies and their storage periods depend on the tools in use. You can ask CDNsun support for details. Where law requires consent for a technology, you may decline or withdraw that consent; changing your choice does not affect processing that occurred lawfully before the change. Browser controls may also allow you to delete stored cookies, but browser settings do not by themselves replace a consent choice where the law requires one.
7. Your rights
Subject to the conditions in applicable law, you may request access to your personal data, correction, deletion, restriction of processing or portability. You may object to processing based on legitimate interests and to direct marketing at any time. Where processing is based on consent, you may withdraw it at any time without affecting earlier lawful processing. Contact CDNsun support to exercise these rights, or use another contact method listed in section 8. You may also lodge a complaint with a competent supervisory authority.
8. Contact
Use our contact form to reach CDNsun support about privacy or any other matter covered by this Policy. You can also use the helpdesk or contact us by email: info@cdnsun.com for privacy and general matters, support@cdnsun.com for support, and abuse@cdnsun.com for abuse reports. Our postal address is CDNsun s.r.o., V zářezu 902/4, 158 00 Prague, Czech Republic.
What next?
Read about the following topics.