Privacy Policy

Last updated: 2026-02-09

1. Data Controller

The data controller for this website is:
Portalix UG (haftungsbeschränkt)
Thalkirchner Str. 103
81371 Munich, Germany
Email: datenschutz@brandeddns.com
Phone: +49 179 2274171

2. Collection and Storage of Personal Data

2.1 What data is collected?

When using our DNS service, the following data is collected:

  • Email address: For contact and authentication
  • DNS zones and records: The DNS entries you manage
  • Timestamps: To document changes
  • IP addresses: For DNS queries (anonymized in logs)

2.2 Legal Basis

Your data is processed based on:

  • Art. 6(1)(b) GDPR: Contract fulfillment (DNS service)
  • Art. 6(1)(a) GDPR: Consent (waitlist, newsletter)
  • Art. 6(1)(f) GDPR: Legitimate interest (security, abuse prevention)

3. Use of Data

Your data is used exclusively for the following purposes:

  • Providing the DNS service (nameservers, zones, records)
  • Authentication and account management
  • Technical support for inquiries
  • Billing and invoicing
  • Security and abuse detection

Your data will NOT be shared with or sold to third parties.

4. DNS Service and Data Processing

4.1 DNS Queries

As a DNS provider, we process DNS queries for the domains you configure. We do not log DNS queries. Neither IP addresses nor queried domains are stored.

Only in case of technical errors, error messages are temporarily logged that do not contain personal data.

4.2 Anycast Infrastructure

Our DNS service uses 4 anycast locations in Europe and the USA. Your DNS data is replicated to all locations to ensure high availability. All locations are subject to the same data protection standards.

5. Storage Duration

Your data is stored as long as you use our service. After cancellation, your DNS zones and records will be deleted within 30 days. Billing data is retained according to legal retention periods (10 years).

6. Your Rights

You have the right at any time to:

  • Access (Art. 15 GDPR): What data do we have stored about you?
  • Rectification (Art. 16 GDPR): Correction of incorrect data
  • Erasure (Art. 17 GDPR): Deletion of your data ("right to be forgotten")
  • Restriction (Art. 18 GDPR): Restriction of processing
  • Data portability (Art. 20 GDPR): Export of your DNS zones
  • Objection (Art. 21 GDPR): Objection to processing

Contact for data protection inquiries:
Email: datenschutz@brandeddns.com

7. Hosting & Data Security

All data is transmitted encrypted (SSL/TLS).

7.1 Hosting Providers

Main Application & Primary DNS Server (Unicast):

  • Noez GmbH, Frankfurt am Main, Germany
  • Location: Frankfurt (EU)
  • Customer data (email, payment data) and DNS zone data are stored here

DNS Infrastructure (Anycast Network):

  • Frantech Solutions LLC (BuyVM), 325 E Warm Springs Rd, Suite 110, Las Vegas, NV 89119, USA
  • Locations: Miami (USA), Las Vegas (USA), New York (USA), Bern (Switzerland)
  • Only DNS zone data is replicated here (no customer data)

7.2 Data Transfer to Third Countries

To provide our anycast DNS network, DNS zone data is replicated to servers in the USA. This transfer is based on:

  • Switzerland: EU Commission adequacy decision
  • USA: EU Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR

Note: Only DNS zone data (domains, IP addresses) is stored on DNS servers. Personal customer data (email, payment data) remains on the EU server.

7.3 Technical Security Measures

  • Encrypted data transmission (HTTPS, DNS over TLS)
  • Access control and authentication
  • Regular security updates
  • Redundant data storage

8. Cookies & Tracking

This website does not use tracking cookies. We only use technically necessary session cookies required for authentication, which are automatically deleted at the end of your session.

9. Third-Party Service Providers

9.1 Stripe (Payment Processing)

For payment processing, we use Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA.

When making a payment, the following data is transmitted to Stripe:

  • Email address
  • Payment information (entered directly at Stripe)
  • Billing address (if provided)

Stripe is certified under the EU-US Data Privacy Framework. Privacy policy: https://stripe.com/privacy

9.2 Cloudflare Turnstile (Bot Protection)

To protect our forms from automated attacks, we use Cloudflare Turnstile.

Cloudflare is certified under the EU-US Data Privacy Framework. Privacy policy: https://www.cloudflare.com/privacypolicy/

9.3 Mailgun (Email Delivery)

For sending emails, we use Mailgun with EU infrastructure. Privacy policy: https://www.mailgun.com/legal/privacy-policy/

9.4 Simple Analytics (Web Analytics)

To analyze website usage, we use Simple Analytics (Simple Analytics B.V., Netherlands). Simple Analytics is a privacy-friendly analytics service that:

  • Does not use cookies
  • Does not collect personal data
  • Does not store IP addresses
  • Is GDPR-compliant without requiring consent

Only aggregated, anonymous data is collected (page views, referrer, country based on timezone). Data processing is based on Art. 6(1)(f) GDPR (legitimate interest in analyzing website usage).

Simple Analytics' privacy policy: https://simpleanalytics.com/privacy

10. Right to Complain

You have the right to lodge a complaint with a data protection supervisory authority about our processing of personal data.

Competent authority in Germany:
Federal Commissioner for Data Protection and Freedom of Information (BfDI)
Graurheindorfer Str. 153, 53117 Bonn, Germany
Email: poststelle@bfdi.bund.de

11. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy to comply with changed legal requirements or changes to our service.

← Back to Homepage