Privacy Policy

1. Data controller information

Data controller / Service provider: SecureLayer Kft

Registered address: 5720 Sarkad, Árpád utca 21., Hungary

Tax number: 33057138-2-04

EU VAT number: HU33057138

Business registration number: 04-09-018160

E-mail: support@securelayer.hu

Privacy contact: please use [GDPR] in the e-mail subject whenever possible.

2. Technical nature of the service

Communication between the SecureLayer EDGE layer and the Customer’s origin server occurs over the public internet. Therefore network-related and operational log processing is necessary for security and operational purposes.

3. Categories of processed data

3.1 Account and contact data

• username
• e-mail address
• password stored in hashed form
• security settings, including 2FA status

3.2 Billing data

• billing name, address and tax information
• invoice metadata
• payment status information

3.3 Service configuration data

• DNS zones and DNS records
• EDGE site configuration
• DNSSEC status and metadata
• SSL certificate management related states
• hosting and VPS configuration metadata
• dedicated server and colocation related technical metadata

3.4 SecureLayer Challenge

• site key / secret management
• domain whitelist configuration
• verification events

3.5 Hosting / VPS / infrastructure data

• assigned IP addresses
• virtual machine metadata
• resource allocation information
• network usage related operational data
• remote management access metadata

3.6 Log data

• IP address, user agent, timestamp, host, URL and response codes
• login and administration events
• DNS and SSL operational logs
• system and error logs
• security and abuse prevention logs

4. Purpose and legal basis of data processing

Main purposes

• account and access management
• service delivery and infrastructure operation
• billing and accounting obligations
• fraud prevention and incident handling
• error handling and system stability
• security monitoring and abuse prevention

Legal bases

• Contract performance: GDPR Article 6(1)(b)
• Legal obligation: GDPR Article 6(1)(c)
• Legitimate interest: GDPR Article 6(1)(f)
• Consent: GDPR Article 6(1)(a), where separately requested

5. Data retention periods

• Account data: for the duration of the account and typically up to 5 years afterwards
• Billing data: typically 8 years
• EDGE / DNS / SSL operational logs: generally 7–90 days depending on package
• Audit logs: generally 6–12 months
• Infrastructure and security logs: depending on operational and security requirements

6. Data processors and data transfers

The Service Provider may use data processors including infrastructure, data center, e-mail delivery and billing partners.

6.1 Typical processor categories

• data center / infrastructure providers
• billing providers
• e-mail delivery providers
• domain registrar and registry partners

6.2 Certificate issuance and CT logs

During TLS certificate issuance or renewal, domain names may be transferred to certification authorities and may appear in Certificate Transparency logs.

7. Data subject rights

• access
• rectification
• erasure
• restriction
• data portability
• objection

Requests may be submitted via: support@securelayer.hu

8. Complaints and legal remedies

Complaints regarding unlawful data processing may be submitted to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).

E-mail: ugyfelszolgalat@naih.hu

Postal address: 1363 Budapest, Pf.: 9.

Address: 1055 Budapest, Falk Miksa utca 9-11.

9. Data security

• TLS encrypted communication
• hashed password storage
• RBAC-based access control
• security and operational logging
• updates and incident handling procedures

10. Cookies

The website and panel primarily use technical cookies required for authentication, secure operation and access management.

11. Changes to this policy

This Privacy Policy may be updated due to service improvements or legal changes.