Skip to content
hostwala Request a Quote
LEGAL

Privacy & Terms

How we handle personal data on this website and the terms that apply to our hosting services. Questions: support@hostwala.co

Privacy Policy

Last updated: 2 October 2026

1. Who we are

hostwala ("we", "us") provides managed hosting from data centres in Germany. This policy explains how we process personal data when you visit hostwala.co, request a quote or contact us. We are the controller for this processing under the EU General Data Protection Regulation (GDPR).

For any privacy question or request, email support@hostwala.co. We reply within one business day and complete requests within one month, as required by Art. 12 GDPR.

2. What this policy covers

This policy covers our website, quote requests and email contact. When we host servers, websites or email for a client, we process the data stored on those systems on the client's behalf as a processor. That processing is governed by the data processing agreement (Auftragsverarbeitungsvertrag, AVV, Art. 28 GDPR) we sign with every client, not by this policy.

3. Visiting our website

When you open a page, the web server automatically records technical data your browser sends:

  • IP address
  • Date and time of the request
  • Page or file requested and the HTTP status code
  • Referring page, if your browser sends it
  • Browser and operating system (user agent)

We use these server logs only to deliver the website, keep it secure and investigate attacks or errors. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure, working website). Logs are deleted automatically after no more than 14 days, unless a specific entry is needed to investigate a security incident.

4. Cookies and Google Analytics

We use Google Analytics 4 to understand which pages are useful and how visitors find us. It only runs with your consent. When you first visit, a banner asks for it; until you click Accept, Google Analytics sets no cookies and stores nothing on your device. You can change your choice at any time with "Cookie settings" in the footer of every page. Declining has no effect on how the website works.

If you accept, Google Analytics sets cookies (names starting with _ga, stored for up to 2 years) and records pseudonymous usage data:

  • Pages visited, time on page and how you arrived (for example a search engine or link)
  • Device type, browser, operating system and screen size
  • Approximate location (country and city), derived from your IP address. Google Analytics 4 does not store IP addresses.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as our processor under a data processing agreement. Data may also be processed by Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision (Art. 45 GDPR). We do not use Google Analytics for advertising, and Google signals and data sharing for ads are not enabled.

Legal basis: your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw it at any time with effect for the future. Analytics data is deleted automatically after 2 months.

Apart from this, our website sets no cookies. Your consent choice itself is saved in your browser's local storage (key hw-consent) so we do not ask again; this is technically necessary (§ 25(2) TDDDG). Fonts and all other files are loaded from our own server.

5. Quote requests and contact

When you send a quote request on our homepage or on /quote/, we receive the details you enter:

  • Name and work email address
  • Company or website, and phone number if you provide them
  • The services, monthly visitors, industry, current hosting and timeline you select
  • Any notes you add

When you email us, we receive your email address, the message and any attachments.

We use this data only to answer you, prepare and send a proposal and, if you become a client, to set up and run your services. Legal basis: Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract). Providing the data is voluntary, but we cannot prepare a quote without your name and email address.

Please do not send health data, patient data or passwords through the form or by email. If your project involves such data, tell us and we will agree a secure channel.

6. How long we keep data

  • Server logs: no more than 14 days.
  • Google Analytics data (with consent): 2 months; cookies up to 2 years unless you withdraw consent or clear them.
  • Quote requests and emails that do not lead to a contract: deleted 12 months after our last contact.
  • Client correspondence and contract data: for the duration of the contract and afterwards as long as German commercial and tax law requires (generally 6 or 10 years under § 257 HGB and § 147 AO).

7. Who receives your data

We do not sell personal data and do not share it for advertising. Data is processed by our own team and by service providers we use under data processing agreements (Art. 28 GDPR):

  • The provider that hosts this website and processes the server logs
  • The provider that runs our email system, where quote requests and emails are delivered
  • Google Ireland Limited for Google Analytics, only if you have consented (see section 4)

We disclose data to authorities only where we are legally obliged to.

8. Where data is stored

We store and process personal data within the European Union. The only exception is Google Analytics, which runs only with your consent and may involve processing by Google LLC in the USA under the EU-US Data Privacy Framework (see section 4). Quote requests, emails and all client data stay in the EU. If anything else changes, we will update this policy first and use a safeguard recognised by Art. 44 to 49 GDPR.

9. Security

This website is only available over an encrypted HTTPS connection. Access to quote requests and client data is limited to the staff who need it. Our hosting infrastructure is described on our Infrastructure page.

10. Your rights

Under the GDPR you have the right to:

  • Withdraw your consent at any time (Art. 7(3)), for Google Analytics via "Cookie settings" in the footer
  • Access the personal data we hold about you (Art. 15)
  • Have incorrect data corrected (Art. 16)
  • Have your data deleted (Art. 17)
  • Restrict how we process it (Art. 18)
  • Receive your data in a portable format (Art. 20)
  • Object to processing based on our legitimate interests (Art. 21)

To use any of these rights, email support@hostwala.co. We may ask you to confirm your identity before we act on a request.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work, or where you believe the infringement happened (Art. 77 GDPR).

11. Automated decisions

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. Every quote request is read and answered by a person.

12. Changes to this policy

We update this policy when our services or the law change. The date at the top shows when it was last changed. If a change affects how we use data you have already given us, we will tell you by email.

Terms of Service

Last updated: 2 October 2026

1. Scope

These terms apply to all hosting, domain, email, security and migration services hostwala provides to business clients, and to the use of this website. Our services are offered exclusively to businesses, freelancers and public bodies, not to consumers.

The individual agreement for each client (the proposal you accept, including its service description and service levels) takes priority over these terms. The client's own terms and conditions do not apply, even if we do not object to them.

2. Quotes and contract

Information on this website, including figures about our infrastructure, is a general description and not a binding offer. After a quote request we send a written proposal. A contract is formed when you accept that proposal in writing (email is sufficient) and we confirm it.

Quotes are valid for 30 days unless the proposal states otherwise.

3. Our services

We provide the services described in your agreement from data centres in Germany. Availability targets, support hours and response times are those set out in your agreement and its service level terms.

We may carry out planned maintenance. We announce maintenance that is expected to cause downtime at least 48 hours in advance, except for urgent security work, which we carry out as needed and report afterwards.

We may change or improve technical details of our infrastructure, provided the agreed service level and the location of your data in Germany do not change to your disadvantage.

4. Your responsibilities

You are responsible for the content, software and data you store or run on our services and for keeping your login details secure. You may not use our services to:

  • Store or distribute content that is illegal under German or EU law, or that infringes the rights of others
  • Send unsolicited bulk email (spam) or host phishing pages
  • Distribute malware or attack, scan or overload other systems
  • Circumvent our security measures or access systems you are not authorised to use
  • Run workloads that put the stability of shared infrastructure at risk, unless agreed in advance

If you process personal data on our services, you remain the controller for that data and must have a lawful basis for processing it.

5. Suspension

We may temporarily suspend a service if it is being used in breach of section 4, if it endangers our infrastructure or other clients, or if we are required to by law or a court or authority. We restrict the suspension to what is necessary, tell you without undue delay and restore the service once the cause is removed.

6. Data protection

Where we process personal data on your behalf, we do so under the data processing agreement (AVV, Art. 28 GDPR) that forms part of every client contract. This includes special categories of data such as health data (Art. 9 GDPR) where agreed. Your data and backups stay in Germany.

7. Backups

Where backups are part of your agreement, we create them as described there and store them in a second German location. Unless agreed otherwise, you remain responsible for keeping your own copy of data that is essential to your business.

8. Fees and payment

Fees are those set out in your accepted proposal. Unless agreed otherwise, recurring fees are invoiced monthly in advance and one-off fees, such as migrations, after completion. Invoices are due within 14 days. All prices are net, plus the applicable VAT.

If an invoice remains unpaid more than 30 days after the due date, we may suspend services after giving at least 7 days' written notice.

9. Term and termination

The minimum term and notice period are set out in your agreement. Without such a provision, either party may terminate with one month's notice to the end of a calendar month. The right to terminate for good cause is not affected. Termination must be in writing; email is sufficient.

10. Your data at the end of the contract

You can export your data at any time. When the contract ends we help you move to another provider, in line with the switching rules of the EU Data Act. We keep your data for 30 days after the contract ends so you can complete the export, then delete it, including backups, unless the law requires us to keep it longer.

11. Liability

We are liable without limitation for damage caused intentionally or through gross negligence, for injury to life, body or health, under the German Product Liability Act and where we have given a guarantee.

For slight negligence we are liable only for breaches of essential contractual obligations, meaning obligations whose fulfilment makes proper performance of the contract possible and on which you may regularly rely. In that case our liability is limited to the damage that is typical and foreseeable for this type of contract.

We are not liable for loss of data to the extent that the loss would have been avoided if you had kept the backups required under section 7.

12. Changes to these terms

We may change these terms for future periods. We send you the changes by email at least 6 weeks before they take effect. If you do not object within this period, the changes are deemed accepted; we will point this out in our notice. If you object, either party may terminate the affected services when the changes would take effect.

13. Governing law

These terms and all contracts with us are governed by the law of the Federal Republic of Germany, excluding the UN Convention on Contracts for the International Sale of Goods (CISG), unless your agreement states otherwise. If any provision is invalid, the remaining provisions stay in effect.

14. Contact

Questions about these terms: support@hostwala.co