This Privacy Policy explains what kind of personal data we collect from you when you use our services and how we use that data. When we say “EBRAND”, “we” and “us”, we are referring to EBRAND Services S.A. and all of our affiliates.

Scope

This policy applies to every EBRAND customer and/or prospect (individuals, though not companies or organisations) without distinction of your nationality or place of residence.
The type of personal data we process and how it is processed depends on the services provided.

I. Personal data collection and processing

1. EBRAND website visitors and prospects

We collect information and potential personal data about our website visitors by the use of cookies. For more information, please see our cookie policy: https://www.ebrandservices.com/use-of-cookies

2. EBRAND customers

As a EBRAND customer you may provide us with personal data for several purposes.

A. Account information

In order to create and manage your account on our platform, you need to provide us with sufficient information to allow us to identify you.

Type of data
Email address, first and last name, postal address, language preference, your login, your IP address.

Basis and Purpose
We only collect and process this data for the provision of our service.

Retention
We keep your personal data for as long as you hold an account with EBRAND. Should you want to close your account, please contact support-nl@ebrandservices.com and we will anonymise all personal data attached to your account. However, please be aware that in certain cases regulatory or legal obligations may prevent EBRAND from completely deleting your personal data. For example, we are required to keep every invoice we issue for ten (10) years.

B. Payment Information

We collect certain payment and billing information when you order paid services. For example, we ask you to designate a billing contact, including name and contact information. You might also provide payment information, such as payment card details or PayPal identifiers.

Type of data
Partial credit card information including first and last name, and PayPal account identifier.

Basis and Purpose
We only collect and process this data for the provision of our service.

Retention
We keep your personal data for as long as you hold an account with EBRAND. Should you want to close your account, please contact support-nl@ebrandservices.com and we will anonymise all personal data attached to your account. However, please be aware that in certain cases regulatory or legal obligations may prevent EBRAND from completely deleting your personal data. For example, we are required to keep every invoice we issue for ten (10) years.

C. Information you provide through our support channels

Our service includes access to our customer support department.  When you open a support ticket, speak to one of our representatives directly, or otherwise engage with our support team, you will be asked to provide contact information, a summary of your request for support, and other relevant information.
When you contact our customer support department, your personal data may be transferred to 

SALESFORCE.COM EMEA LIMITED 
110 Bishopsgate 
village 9, floor 26 Salesforce Tower
London EC2N 4AY 
United-Kingdom, 
the entity providing the help desk software Desk.com which we use to assist you.
While they don’t have access to your data, it is nonetheless hosted on their platform.

Type of data
Any data provided by you when submitting a request for support.

Basis and Purpose
We only collect and process this data for the provision of our service.

Retention
We keep your personal data for as long as you hold an account with EBRAND. Should you want to close your account, please contact support-nl@ebrandservices.com and we will anonymise all personal data attached to your account. However, please be aware that in certain cases regulatory or legal obligations may prevent EBRAND from completely deleting your personal data.

D. Domain Name service

For this service, you will be required to provide additional personal data by creating contact profiles which will be transferred to each registry with whom you want to register a domain name. Additionally, in case you have selected a so-called generic extension, a copy of your contact profiles will also be stored with Iron Mountain Intellectual Property Management, Inc. 9210 Sky Park Court, Suite 220 San Diego, CA 92123 USA, which is the ICANN-authorised escrow service provider that we use. Although established in the United States, this company adheres to the Privacy Shield Principles.

Type of data
First and last name, postal address, email address, phone number.

Basis and Purpose
Collection and processing of this data is necessary to comply with our legal obligations as data processor for registries. Transfer of relevant data is a mandatory requirement by the registries who have a monopoly on the extensions they manage.

Retention
Each registry has its own retention period but in general this does not exceed two years after the deletion of the Domain Name. For further information, please refer to the applicable registry policy.

Transfer Abroad
Depending on the registry you would like to register a domain name with, your personal data may be transferred outside the EEA.

No guarantee
When registering a domain name with a registry established outside the EEA (Europe), you expressly understand and agree that this registry is not bound by the same privacy laws as EBRAND and that, in some cases, no protection of your personal data is offered.
To benefit from an adequate level of protection of your personal data, you should register your domain name under a European extension or, alternatively, an extension managed by a registry established within the EEA.

In case of doubt, don’t hesitate to contact our legal department at legal@ebrandservices.com

E. Open-Xchange

For the provision of this service, we will share some of your personal data with our partner Open-Xchange AG Rollnerstraße 14
D-90408 Nuernberg, Germany.

Type of data
Email address created as part of the Open-Xchange service.

Basis and Purpose
We only collect and process this data for the provision of our service.

Retention
Your personal data is immediately deleted upon termination or expiration of the service.

F. SSL Certificate

For the provision of this service, we will share some of your personal data with the certification authority GMO GlobalSign Ltd Springfield House, Sandling Road, Maidstone, Kent, ME14 2LP, United Kingdom.

Type of data
First and last name, email address, postal address, phone number.

Basis and Purpose
We only collect and process this data for the provision of our service.

Retention
Your personal data is immediately deleted upon termination or expiration of the service.

G. TradeMark Clearing House service

For the provision of this service, we will share some of your personal data with CHIP S.A. 21, rue Léon Laval L-3372 Leudelange, Luxembourg, the TMCH service provider.

Type of data
All data attached to your Trademark registration.

Basis and Purpose
We only collect and process this data for the provision of our service.

Retention
Your personal data is immediately deleted upon termination or expiration of the service.

H. Domain monitoring service

In order to create and manage your account on our domain monitoring platform, you need to provide us with sufficient information to allow us to identify you.

Type of data
Email address, first and last name, language preference, your login, your IP address.

Basis and Purpose
We only collect and process this data for the provision of this service.

Retention
We keep your personal data for as long as you are using this service. Should you want to close your account, please contact support-nl@ebrandservices.com and we will anonymise all personal data attached to your account on this platform. However, please be aware that in certain cases regulatory or legal obligations may prevent EBRAND from completely deleting your personal data. For example, we are required to keep every invoice we issue for ten (10) years.

I. Online Brand Protection Tool

In order to create and manage your account on our brand protection platform, you need to provide us with sufficient information to allow us to identify you.

Type of data
Email address, first and last name, language preference, your login, your IP address.

Basis and Purpose
We only collect and process this data for the provision of this service.

Retention
We keep your personal data for as long as you are using this service. Should you want to close your account, please contact support-nl@ebrandservices.com and we will anonymise all personal data attached to your account on this platform. However, please be aware that in certain cases regulatory or legal obligations may prevent EBRAND from completely deleting your personal data. For example, we are required to keep every invoice we issue for ten (10) years.

J. Brokerage

This service does not require the provision of additional personal data.

K. DNS Services

This service does not require the provision of additional personal data.

II. Your rights in relation to your personal data

Unless your request is deemed excessive or unfounded, you may exercise the following rights in relation to your personal data:

1. Right of access
You have the right to request a copy of the personal data that we hold about you. You may do so via your EBRAND account or alternatively, request it at support-nl@ebrandservices.com.

 2. Right of rectification

You have a right to correct data that we hold about you that is inaccurate or incomplete. You may do so via your EBRAND account or, alternatively, request it at support-nl@ebrandservices.com.

 3. Right to be forgotten
In certain circumstances, you can ask for the data we hold about you to be erased from our records. Please contact support-nl@ebrandservices.com and we will anonymise all personal data attached to your account. However, please be aware that in certain cases regulatory or legal obligations may prevent EBRAND from completely deleting your personal data.

 4. Right of portability
You have the right to have the data we hold about you transferred to another organisation. You may export your data via your EBRAND account or, alternatively, request it at support-nl@ebrandservices.com.

 5. Right to object
You have the right to object to certain types of processing of your personal data such as direct marketing. To do so please contact our legal department at legal@ebrandservices.com

Lastly, you have the right to file a complaint with the Luxembourgish Data Protection Authority, when you are of the opinion that our processing of your personal data is not in compliance with applicable legislation. Their complaint form is accessible at: https://cnpd.public.lu/en/droits/faire-valoir/formulaire-plainte.html

III. Security Measures

Your personal data is stored both electronically and manually in our data centres in Luxembourg and can be accessed from our offices via dedicated network connections or from anywhere through a secured VPN connection.
We use a combination of technical, administrative, and physical controls to maintain the security of your data.
Most importantly we are making use of specific technologies to encrypt all our services.

IV. Data Protection Officer Details

EBRAND
Luc Seufer
21, rue Léon laval
L-3372 Leudelange
Luxembourg

V. Changes to this Privacy Policy

We may change this privacy policy from time to time. We will post any modifications on this page and, if they are significant, we will provide a more prominent notice, posted directly in your EBRAND account or via email. We will also keep prior versions of this privacy policy in an archive for your review.  We encourage you to review our privacy policy whenever you use our services to stay informed about our information practices and what you can do to help protect your security.

If you disagree with any changes to this privacy policy, you will need to stop using our services and deactivate your EBRAND account, as outlined above.