Controller
Christian Jakovlev, trading as KYRO VPN
Marburger Straße 17, 34497 Korbach, Germany
Email: support@vpn-protection.com
This privacy policy explains which personal data is processed when using vpn-protection.com and the KYRO VPN subscription. The service is a German B2C VPN service using WireGuard-based device configurations.
To provide VPN access, we process technically necessary data relating to the VPN devices created by you. This data is required to technically provide your VPN access, manage devices, enforce device limits according to your plan, and ensure the security of the service.
The legal basis is Art. 6(1)(b) GDPR where the processing is necessary for contract performance. Where data is processed to secure the service, analyze errors or prevent misuse, the legal basis is Art. 6(1)(f) GDPR.
We do not store activity logs about websites visited, DNS queries or your browsing behavior.
When you access our website and use our systems, technically necessary server and security logs may be generated. This data is processed to provide the website and service, detect technical errors, prevent attacks and misuse, and ensure the security of our systems.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and abuse-free operation of our online service.
When you register, we process the account and login data you provide. Your password is not stored in plain text. To activate your account, we may send you an email to verify your email address.
The legal basis is Art. 6(1)(b) GDPR.
If you subscribe to a paid plan, payment processing is carried out via PayPal. Payment and contract data may be exchanged between us and PayPal. The actual payment processing is carried out by PayPal. PayPal's privacy information applies to PayPal's processing of your payment data.
The legal basis for our processing is Art. 6(1)(b) GDPR.
If you contact us via a contact form, email or support function, we process the information you provide to handle your inquiry.
The processing is carried out to handle your inquiry. The legal basis is Art. 6(1)(b) GDPR if your inquiry is related to an existing or prospective contract. In other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is the efficient handling of inquiries and communication with users and interested parties.
To protect our forms against misuse, spam and automated attacks, security checks or captcha mechanisms may be used. Technical data may be processed, for example IP address, browser information, interaction data and timestamps.
The processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is to protect our website, user accounts and technical infrastructure against misuse.
If an external captcha or security provider is used, this provider will be named separately in this privacy policy.
We use email for account verification, important contractual and service information, support communication and security-related notices. In doing so, we process in particular your email address, the content of the respective message, sending times and technical delivery information.
The legal basis is Art. 6(1)(b) GDPR where the communication is necessary for contract performance. For security-related or organizational messages, the processing may additionally be based on Art. 6(1)(f) GDPR.
Administrative events may be logged to manage and secure the service. These logs are used for traceability, error analysis, prevention of misuse and security of the service.
The legal basis is Art. 6(1)(f) GDPR.
We store personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations. Data that is no longer required will be deleted or anonymized unless statutory retention obligations prevent this.
Personal data is only disclosed where necessary to provide the service, process payments, communicate, ensure technical security or comply with legal obligations.
Where personal data is transferred to service providers outside the European Union or the European Economic Area, this will only take place if there is an appropriate legal basis under data protection law, such as an adequacy decision by the European Commission or appropriate safeguards such as EU Standard Contractual Clauses.
KYRO VPN does not store activity logs. This means that we do not store which websites you visit, which DNS queries you make or which content you access through the VPN connection.
However, to provide, secure and bill the service, we process technically necessary account, payment, device, server and security data as described in this privacy policy.
Subject to the statutory requirements, you have rights of access under Art. 15 GDPR, rectification under Art. 16 GDPR, erasure under Art. 17 GDPR, restriction of processing under Art. 18 GDPR, data portability under Art. 20 GDPR, objection under Art. 21 GDPR and withdrawal of consent with effect for the future. To exercise your rights, you can contact us at support@vpn-protection.com.
You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.
The competent supervisory authority may in particular be: The Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, Website: https://datenschutz.hessen.de
Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.
This privacy policy may be updated if the service, technology or legal situation changes. The current version is available on this page.
