Controller and contact
The controller of personal data for the corporate website and customer portal is SecurePlusVPN s.r.o., company registration number 19885008, with its registered office at 28. října 810/246, 709 00 Ostrava – Mariánské Hory, Czech Republic. Send privacy questions and requests to exercise your rights to info@secureplusvpn.com.
Scope of this document
This document describes the management of customer accounts and operation of the website and portal. It does not cover data processing in customer infrastructure when providing VPN services.
Account data and verification
During registration, the portal requires an email address, phone number and password. It stores account status and timestamps relating to the account and its verification. The password is stored as a hash. Email and phone verification serve to verify contact details and secure the account. When two-factor authentication is enabled, the portal stores an encrypted TOTP secret and hashes of recovery codes.
Billing details and saved configurations
Users may add a company name, first name, last name, address and company registration or tax details to their account. The portal also records services used and saved client configurations. These may contain network addresses and other technical information. Do not include information in configurations that is unnecessary for their purpose.
Enquiries and operational data
When you communicate with us, we process your contact details and message content. Operational infrastructure may record the IP address, request time and technical connection details.
Purposes and legal bases
Creating and managing accounts and providing agreed services: performance of a contract or steps prior to entering into one. Security and abuse prevention: legitimate interest. Compliance with accounting obligations: legal obligation.
Recipients, providers and storage countries
SecurePlusVPN s.r.o. operates the website, portal and related services. The servers are located in the Czech Republic, within the European Union. We use an SMS gateway in the Czech Republic for phone number verification; the provider receives the phone number and verification SMS content.
Retention and deletion
Data subject to a statutory retention obligation is retained for the period required by the applicable law. This obligation applies only to the relevant category of data, not automatically to the entire account or all logs. For other data, retention is determined by the purpose of processing and the necessity of continued retention.
Cookies and analytics
The website stores your language preference. The portal uses session and login security mechanisms. We currently use no analytics or marketing cookies.
Your rights
Subject to the conditions of the GDPR, you may request access, rectification, erasure, restriction of processing or data portability and object to processing. Where consent is the basis, it can be withdrawn. You may lodge a complaint with the Czech Office for Personal Data Protection. Before handling a request, proportionate identity verification may be necessary.
Required data
Without an email address, phone number and password, the current account registration and verification cannot be completed. Billing details are optional in the account; whether they are needed for paid services depends on the order.