Privacy Policy

Last Updated: 20.01.2026

This Privacy Policy describes how Kernel Labs (“we,” “us,” or “our”) collects, uses, and shares personal data when you use our  services (including Web Hosting, Email Hosting, VPS, Dedicated Servers, Web Develpment and Branding & Strategy services) available through our website at www.kernelabs.com (the “Service”).

§1 General Provisions

1. The Data Controller of your personal data, as defined by the General Data Protection Regulation (EU) 2016/679 (“GDPR”), is Kernel Labs, located at 60 Landford Avenue, Liverpool.
2. We are committed to protecting your privacy and ensuring that your personal data is processed in accordance with GDPR and other applicable data protection laws.
3. We take special care to protect the interests of data subjects, ensuring that data is:
   • Processed lawfully, fairly, and in a transparent manner.
   • Collected for specified, explicit, and legitimate purposes.
   • Adequate, relevant, and limited to what is necessary.
   • Accurate and, where necessary, kept up to date.
   • Kept in a form which permits identification of data subjects for no longer than is necessary.
   • Processed in a manner that ensures appropriate security.

§2 Purpose and Legal Basis for Data Processing

We process your personal data for the following purposes:

1. To provide and perform our contract with you for our services, including processing orders, managing payments, providing technical support, and communicating with you about your account.
   • Legal Basis: Art. 6(1)(b) of GDPR (processing is necessary for the performance of a contract).
2. To comply with our legal obligations, such as those arising from accounting and tax laws.
   • Legal Basis: Art. 6(1)(c) of GDPR (processing is necessary for compliance with a legal obligation).
3. For direct marketing of our own products and services and sending commercial information.
   • Legal Basis: Art. 6(1)(f) of GDPR (our legitimate interest) or Art. 6(1)(a) of GDPR (your explicit consent).
4. To establish, exercise, or defend legal claims related to the services provided.
   • Legal Basis: Art. 6(1)(f) of GDPR (our legitimate interest).
5. To ensure the security of our services, prevent fraud and abuse, conduct statistical analysis, and improve the functionality of our website.
   • Legal Basis: Art. 6(1)(f) of GDPR (our legitimate interest).

§3 Our Role as a Data Processor

1. When you use our services (e.g., web hosting, email hosting, VPS), you may store or process personal data on our infrastructure for which you are the Data Controller (e.g., your customers’ data in a database, emails in a mailbox).
2. In such cases, you are the Data Controller, and kernel Labs acts as the Data Processor, processing this data solely on your documented instructions.
3. The terms of this data processing are governed by a separate Data Processing Agreement (DPA), which forms an integral part of our Terms of Service or is available upon request.
4. As a Data Processor, we implement appropriate technical and organizational measures to ensure the security of the data entrusted to us, in accordance with Articles 28 and 32 of the GDPR.

§4 Data Retention Period

1. Personal data processed for the performance of a contract will be stored for the duration of the contract and thereafter for a period necessary for:
   • After-sales service (e.g., handling complaints).
   • Securing or pursuing any legal claims.
   • Fulfilling legal obligations (e.g., from tax and accounting regulations).
2. Data processed based on your consent will be stored until you withdraw your consent.
3. Data processed based on our legitimate interest will be stored until you effectively object to the processing.

§5 Data Recipients

We may share your personal data with third-party service providers who perform services on our behalf. These include:

• Payment processing companies.
• Domain registrars (when registering a domain on your behalf).
• Accounting firms and legal advisors.
• Providers of marketing, CRM, and customer support systems.
• Data centers and infrastructure providers.

These third parties are contractually obligated to process your data only on our instructions and to ensure a level of data protection equivalent to our own. Your data may also be disclosed to public authorities if required by law.

§6 Rights of the Data Subject

Under GDPR, you have the following rights regarding your personal data:

1. Right of Access: To request access to your personal data and receive a copy of it.
2. Right to Rectification: To request correction of inaccurate personal data.
3. Right to Erasure (“Right to be Forgotten”): To request the deletion of your personal data.
4. Right to Restriction of Processing: To request the restriction of the processing of your data.
5. Right to Data Portability: To receive your data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
6. Right to Object: To object to the processing of your data based on our legitimate interests.
7. Right to Withdraw Consent: To withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
8. Right to Lodge a Complaint: To lodge a complaint with a supervisory authority (in your country of residence or the location of the alleged infringement) if you believe the processing of your data violates GDPR.

To exercise any of these rights, please contact us at: [claims@kernelabs.com].

§7 Use of Cookies

1. Our website uses “cookies,” which are small text files stored on your device.
2. We use cookies for the following purposes:
   • Strictly Necessary Cookies: Essential for the website to function correctly, such as maintaining your session.
   • Analytical/Performance Cookies: To collect anonymous statistics about how our website is used (e.g., via Google Analytics) to help us improve our services.
   • Marketing Cookies: To personalize advertising and marketing content.
3. You can manage your cookie preferences through your web browser’s settings. Please note that restricting cookies may impact the functionality of our website.

§8 Final Provisions

1. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or damage.
2. This Privacy Policy may be updated from time to time. We will notify you of any significant changes by posting the new policy on our website and/or by sending you an email.
3. For matters not covered by this Privacy Policy, the provisions of GDPR and other relevant laws shall apply.