Privacy statement

1. Who is responsible#

OnHolland, trading as ServerScope, is the controller for the processing of personal data described in this statement.

• Chamber of Commerce (KvK): 93721382
• Address: Louise de Colignystraat 35 C, 1055 XE Amsterdam
• Privacy contact: serverscopesupport@gmail.com

2. Which data we process and why#

Account. Name, e-mail address, password (stored only in encrypted form), language preference, confirmation of your e-mail address and, if you set it up, two-step verification data. If the terms are shown when you create your account, we also store when you accepted them and which version. Purpose: create your account, let you sign in and provide the Service. Basis: performance of the agreement.

Team and use. Team name, members with their role, invitations (the e-mail address of the invitee) and a log of actions in your team: who did what and when. Purpose: collaboration, security and detecting misuse. Basis: performance of the agreement and our legitimate interest in securing the Service.

Monitoring data. Names and hostnames of your servers and domains, IP addresses, measurements such as processor, memory and disk usage, check results (availability, certificate, DNS, registration), incidents and notifications, webhook addresses (we store a Discord address encrypted) and API tokens (only as a non-reversible fingerprint). The agent on your server only sends measurements, no files or content. Purpose: provide the Service. Basis: performance of the agreement. See also section 5.

Payments. Your chosen plan, payment status, the link to your customer and subscription number at Mollie and your invoice details (company name, address, country, VAT number and amounts). Only Mollie processes your card or bank details; we never see them. Purpose: process payments and issue invoices. Basis: performance of the agreement and our statutory bookkeeping obligation.

Contact and waiting list. Message and e-mail address if you contact us. On the waiting list we store your e-mail address, language, chosen plan and the moment of your consent, to let you know once that registration has opened. Basis: your consent; you can always have yourself removed.

Technical data. Your IP address and technical details of your request end up in our server logs, for security and to detect outages and misuse. Basis: our legitimate interest.

3. Cookies and tracking#

• The application uses one necessary session cookie (to keep you signed in and for security) and stores preferences such as the theme and collapsed menus locally in your browser.
• We use no tracking or advertising cookies and no visitor profiles.
• On the information site we anonymously count how often pages are viewed per day, without personal data.

4. Who we share data with#

We do not sell personal data. We only share it with parties we need to provide the Service:

• our hosting provider (STRATO), where our servers in the Netherlands run;
• Mollie B.V., to process payments. Mollie is itself responsible for its own legal obligations;
• services you connect yourself, such as Discord or your own webhook addresses;
• our accountant, for bookkeeping.

5. When we are a processor#

You decide what the data you enter about your own servers, domains and team members is used for. For that data we are the processor and you are the controller. If you want a data processing agreement for it, e-mail serverscopesupport@gmail.com.

6. How long we keep data#

• Account and team data: as long as your account exists. You can have your account deleted by e-mailing serverscopesupport@gmail.com. After that we delete your data, except what we are legally required to keep.
• Backups: we keep backups for at most one month. Data you had deleted can therefore remain in a backup for up to a month and then disappears automatically.
• Monitoring history: according to your plan, as stated on the pricing page. Older history is deleted.
• Invoices and payment data: 7 years, because tax law requires it.
• Waiting list: until you unsubscribe, or until we have told you registration is open and you have yourself removed.
• Server logs: no longer than needed for security and outages.

7. Security#

We protect data with, among other things, encrypted connections (HTTPS), encrypted passwords, API tokens stored only as a fingerprint, encrypted storage of sensitive addresses and strict separation between the data of different teams. You can enable two-step verification.

8. Your rights#

You may ask us for access to your data, and for correction, deletion, restriction of processing and portability. You can object to processing and withdraw consent you gave. E-mail serverscopesupport@gmail.com; we respond within one month. If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. Changes#

We may change this statement. The date at the top of the page shows when it was last changed. For a material change we will let you know.