Privacy Policy
Privacy Notice
Who are we and how can you contact us?
This privacy notice aims at giving you information on how your personal data are processed. In this notice, we refer to ourselves as ‘we’, ‘us’ and ‘our’.
Who processes your personal data
| Your jurisdiction | Who processes your personal data | Address | Registration number |
|---|---|---|---|
| — when registering an Account before 01.12.25: Kenya, the EU and all other countries of the world except the CIS and Georgia; — when registering an Account after 01.12.25: Kenya, the EU and all other countries of the world except Uzbekistan and Kazakhstan | Servercore Africa Ltd | Cavendrys, 3rd floor upper level, Kalamu House, Grevillea Grove, off Brookside Drive, Westlands, Nairobi | PIN: P052153652V |
| the Republic of Uzbekistan | Servercore, FE LLC Servercore, Foreign enterprise in the form of a limited liability company | 100015, Republic of Uzbekistan, Tashkent city, Mirabad district, Turkestan Street, 12A, office No 326 | INN: 306843624 |
| — when registering an Account before 01.12.25: Kazakhstan, CIS countries (except Uzbekistan) and Georgia; — when registering an Account after 01.12.25: Kazakhstan only | MSS LLP Modern Server Solutions LLP | Z10K8H7, Astana, Saryarka district, Beibitshilik Street, building 14, Office 910 | BIN: 221140046930 |
If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact us using:
- our email: privacy@servercore.com
- our DPO’s email: privacy@servercore.com
The policy extends to:
- our products and services
- our website: https://servercore.com/
our email: privacy@servercore.com and other emails of our company to which data subject may refer.
- registered users of the site;
- unregistered site users;
- counterparties – individuals, individual entrepreneurs;
- representatives of counterparties – legal entities and individual entrepreneurs, including employees, owners, including beneficial owners, representatives acting on the basis of a power of attorney and other representatives of counterparties with whom we have civil law contracts or who intend to enter into contractual relations with us;
- Our employees with whom we have concluded or has concluded labor contracts, including former employees with whom labor contracts have been terminated (terminated);
- applicants for our vacant positions (candidates for employment) who submitted their CVs or questionnaires containing personal data in person or through specialized recruitment organizations (recruitment agencies), including through specialized websites on the Internet;
- representatives of personal data subjects who contact us on behalf of personal data subjects;
- visitors to our guarded premises who do not have the right to permanently enter such premises.
- lawfulness, fairness and transparency;
- purpose limitation;
- data minimisation;
- accuracy;
- integrity and confidentiality;
- storage limitation;
- accountability.
For the purposes of market research, we take into account the collection and processing of anonymous digital data. We do not process biometric personal data.
Browser
Your internet browser (such as Mozilla Firefox, Google Chrome, or Microsoft Internet Explorer) automatically transmits some information to us every time you access content on one of our internet domains. Examples of such information include the URL of the particular Web page you visited, the IP (Internet Protocol) address of the computer you are using, or the browser version that you are using to access the website.
Directly from you
We may obtain personal data directly from you, e.g. when you contact us, when our cookies are enabled on the clients’ websites. You may see here our Cookie policy.
What data, for what purposes, on what basis, and for how long do we process?
Servercore will only collect personal data about you insofar as is necessary to achieve the purposes set out in this Privacy Notice.
| Purpose of Data Processing | Legal Basis | Data Categories | Retention Period |
|---|---|---|---|
| Registration on the platform | Contract
except Consent for the Republic of Kazakhstan |
Email Password | until deletion of user account |
| Manage services | Contract
except Consent for the Republic of Kazakhstan |
Full name Account ID Date of registration Billing settings Email Consumptions Limits Payment methods User Id Product Total cost SSH keys Authentication log Bank card details Address City Country Region Postal code/ZIP | until deletion of user account |
| Prevent unauthorized access by keeping logs of referring to end-points | Legitimate interest to maintain security of our services
except Consent for the Republic of Kazakhstan |
Account ID Date and time of login IP User agent Browser Browser version Operating system Device brand Result of login | until deletion of user account or the exercise of the right to opt out |
| Archiving and backups to restore information | Legitimate interest to maintain continuity of our services
except Consent for the Republic of Kazakhstan |
Logs of actions with services | until deletion of user account or the exercise of the right to opt out |
| Select a payment processor | Contract
except Consent for the Republic of Kazakhstan |
Country Account ID Full name Company name Address, City Postal code/ZIP Phone number Email | until deletion of user account |
| Issue invoice | Contract
except Consent for the Republic of Kazakhstan |
Email Full name Billing settings Payments Date of invoice Invoice Status Invoice Number Due date of payment Company name City Country Address Postal code/ZIP Amount of payment Customer Services | until deletion of user account Fill in client’s data in CRM system to maintain relations with them |
| Answer questions and requests, technical support via chat, sales | Contract
except Consent for the Republic of Kazakhstan |
Email Account ID Other information from you Attached files IP address Ticket ID | until deletion of user account |
| Communicate developments / updates to customers | Legitimate interest to inform our clients about changes to services
except Consent for the Republic of Kazakhstan |
Full name Telephone number Service information Email | until deletion of user account or the exercise of the right to opt out |
| Assess the efficiency of our service with your feedback and reactions | Legitimate interest to improve our services
except Consent for the Republic of Kazakhstan |
Reaction Feedback text Account ID User Id | until deletion of user account or the exercise of the right to opt out |
| Fill in client’s data in CRM system to maintain relations with them | Legitimate interest to maintain relations with our clients
except Consent for the Republic of Kazakhstan |
User Id Full name City, Country Time zone Status (no owner) Last seen Last contacted Last heard from Last opened email Last clicked on link on email Number of web sessions Browser language Language override Browser Browser version Operating system Unsubscribed from emails Marked email as spam Has hard bounced Utm campaign Utm content Utm medium Utm source Utm term Referral url Email | until deletion of user account or the exercise of the right to opt out |
| Storage of data in our database | Contract
except Consent for the Republic of Kazakhstan |
Email Company name Client type Legal_mapper Phone number Contact Person | until deletion of user account |
| Purpose of Data Processing | Legal Basis | Data Categories | Retention Period |
|---|---|---|---|
| Approval of contract on tax risks and provisions | Contract
except Consent for the Republic of Kazakhstan except Legitimate interest for the Republic of Uzbekistan |
Position Full name Passport data Registration (if by power of attorney) Power of attorney Customer Services Company name | until contract termination |
| Concluding contracts | Contract
except Consent for the Republic of Kazakhstan |
Position Full name Passport data Registration (if by power of attorney) Power of attorney Customer Services Company name | until contract termination |
| Preparation of analytics reports | Legitimate Interest to develop our business strategy
except Consent for the Republic of Kazakhstan |
Full name Contact data Service information Payment data (balance data) Bank details Information about arrears Position Revenue Expenses (if the counterparty is an IE) Client ID | until deletion of user account or the exercise of the right to opt out |
| Preparation of finance reports | Legal Obligation | Name of contractor Bank Dates of payments and amounts of payments Taxation system Full name Registration address Country of registration Contact Person Tax number Service information Contracts Information about users in the system Closing documents Bills payable Payment amounts Email TIN User Id Company name Revenue | according to national legislation |
| Registration of labor relations (conclusion of a contract, registration of the contract on the state platform) – director, DPO
Calculation and calculation of wages, compensation and other payments, as well as compliance with other guarantees and the provision of benefits in accordance with the requirements of labor legislation Calculation, withholding and transfer of individual income tax, as well as submission of tax reports in accordance with the requirements of tax legislation |
Legal Obligation | Full name INN Address Citizenship Passport data Bank details (number of bank account, name and BIC of the bank) Date of birth Gender Signature Data of a personal personnel record sheet and a personal card form T-2 Contact details Information about education, qualifications, availability of special knowledge or professional training Marital status and family composition A copy of the employment record Information about military duty and military service The presence and group of disability and the degree of restriction to work | according to national legislation |
| Requests from state bodies (financial supervision, tax administration, law enforcement agencies, migration authorities) | Legal Obligation | Information requested by the relevant state body | according to national legislation |
| Purpose of Data Processing | Legal Basis | Data Categories | Retention Period |
|---|---|---|---|
| Marketing newsletter | Consent | Email Full name IP address User Id Service information | until the consent withdrawal |
| Handling incoming inquiries and consulting on services | Contract
except Consent for the Republic of Kazakhstan and the Republic of Uzbekistan |
Email Phone Full name Company name User Activity Client ID Server ID Customer Services IP | until request for data deletion |
| Targeted advertising for potential clients | Legitimate Interest to promote our services
except Consent for the Republic of Kazakhstan and the Republic of Uzbekistan |
Interests and Preferences | until the exercise of the right to opt out |
| To measure effectiveness of advertising campaign | Consent | Client ID Actions on the website Data inferred by Google | until the withdrawal of consent |
| Purpose of Data Processing | Data Categories | Retention Period |
|---|---|---|
| Processing of data by our equipment and facilities | all data provided by our client | until contract termination with our client |
- When the data is processed for Registration on the platform, you will not be able to register on the platform.
- When the data is processed to Manage services in a personal account, you will not be able to use platform.
- When the data is processed to Select a payment processor, your payment will not be processed.
- When the data is processed to Issue invoice, you will not receive an invoice.
- When the data is processed to Answer questions and requests, technical support via chat, sales, you will not get technical support.
- When the data is processed for Storage of data in our database, you will not be able to use our platform.
- When the data is processed for Approval of contract on tax risks and provisions and Concluding contracts, we will not be to enter into contract.
- When the data is processed for the purpose of Handling incoming inquiries and consulting on services, we will not be able to consult you.
Personal data that we process to comply with a legal obligation are necessary to provide you with our services. So, we could breach one or more obligations under applicable laws if you choose not to give your data for the following purposes:
- Preparation of finance reports
Information about these companies and their data protection practices:
| Third party | Details of data transfer | ||
| EU and other countries | Kenya | Kazakhstan | |
| Typeform
The service is provided by TYPEFORM, S.L. located in Spain. Relevant Privacy Notice.
|
Standard Contractual Clauses are used to transfer data. | The transfer is necessary for a contract performance with data subject under Article 48© of the Data Protection Act of Kenya. | The recipient is established in Spain, which is a State that ensures an adequate level of protection of personal data in accordance with Article 237 of the Enhanced Partnership and Cooperation Agreement between the European Union and its Member States, on the one hand, and the Republic of Kazakhstan, on the other hand (Astana, December 21, 2015)
The transfer is based on the consent of the data subject in accordance with paragraph 3 of Article 16 of the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V “On personal data and their protection”
|
| AmoCRM
The service is provided by JSC “AmoCRM” located in Russia. Privacy Notice.
|
Unfortunately, the country of data recipient doesn’t ensure an adequate level of protection of your personal data. Standard Contractual Clauses are used to transfer data. | The recipient is established in Russia, The transfer is based on the consent of the data subject in accordance with paragraph 3 of Article 16 of the Law of the Republic of Kazakhstan dated May 21, 2013, No. 94-V “On personal data and their protection” | |
| Mindbox.Cloud B.V.
The service is provided by Mindbox. Cloud B.V., located in the Netherlands. Privacy Policy.
|
The Recipient is established in the Netherlands, which is a State that ensures an adequate level of protection of personal data in accordance with Article 237 of the Enhanced Partnership and Cooperation Agreement between the European Union and its Member States, on the one hand, and the Republic of Kazakhstan, on the other hand (Astana, December 21, 2015) | ||
| SMSC
Deksoft Ltd. located in Russia. Privacy Policy.
|
Unfortunately, the country of data recipient doesn’t ensure an adequate level of protection of your personal data. Standard Contractual Clauses are used to transfer data. | The recipient is established in Russia, The transfer is based on the consent of the data subject in accordance with paragraph 3 of Article 16 of the Law of the Republic of Kazakhstan dated May 21, 2013, No. 94-V “On personal data and their protection” | |
| REDSMS Ltd.
located in Russia. Privacy Policy.
|
Unfortunately, the country of data recipient doesn’t ensure an adequate level of protection of your personal data. Standard Contractual Clauses are used to transfer data. | The recipient is established in Russia, The transfer is based on the consent of the data subject in accordance with paragraph 3 of Article 16 of the Law of the Republic of Kazakhstan dated May 21, 2013, No. 94-V “On personal data and their protection” | |
Request information about the processing of your personal data
Obtain access to the personal data held about you
Under Article 15 of the GDPR and/or in accordance with applicable local laws, individuals have a right of access that gives them the right to obtain a copy of their personal data, as well as other supplementary information. It helps individuals to understand how and why companies are using their data, and check the lawfulness of the processing.
Ask for incorrect, inaccurate or incomplete personal data to be corrected
Under Article 16 of the GDPR and/or in accordance with applicable local laws, individuals have the right to have inaccurate personal data rectified. An individual may also be able to have incomplete personal data completed – although this will depend on the purposes for the processing.
Request that personal data be erased when they are no longer needed or if processing is unlawful
Under Article 17 of the GDPR and/or in accordance with applicable local laws, individuals have the right to have personal data erased. This is also known as the ‘right to be forgotten’. The right is not absolute and only applies in certain circumstances.
Request the restriction of the processing of your personal data in specific cases
Article 18 of the GDPR and/or applicable local laws give individuals the right to restrict the processing of their personal data in certain circumstances. This means that an individual can limit the way that an organization uses their data. This is an alternative to requesting the erasure of their data.
Receive your personal data in a machine-readable format and send them to another controller (‘data portability’)
Under Article 20 of the GDPR and/or in accordance applicable local laws, individuals have the right to data portability that gives individuals the right to receive personal data they have provided to a controller in a structured, commonly used and machine readable format. It also gives them the right to request that a controller transmits those data directly to another controller.
Object to the processing of your personal data for marketing purposes or on grounds relating to your particular situation
Article 21 of the GDPR and/or applicable local laws give individuals the right to object to the processing of their personal data at any time. This effectively allows individuals to stop or prevent you from processing their personal data.
Request that decisions based on automated processing concerning you or significantly affecting you and based on your personal data are made by natural persons, not only by computers. You also have the right in this case to express your point of view and to challenge the decision
Withdraw your consent at any time
The GDPR and/or in accordance with applicable local laws give a specific right to withdraw consent. You need to tell people about their right to withdraw, and offer them easy ways to withdraw consent at any time.
Lodge a complaint with a supervisory authority
In accordance with Article 77 of the GDPR and/or in accordance with applicable local laws, you, as a data subject, have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or where an alleged infringement of the GDPR and/or in accordance with applicable local laws has taken place. If you have any questions about the protection of your personal data, you can contact us by using our email: privacy@servercore.com
The following technical and organizational security measures are taken to ensure the integrity and confidentiality of the data:
- authentication logs
- our employees are bind by NDAs
- our staff passes annual training on Informational Security and Privacy
- measures for ensuring the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident
- implementation of log access management and data breach reporting processes to timely define, manage and report all personal data breaches in accordance with respective corporate policies
- regular data backups in electronic form on a daily basis
- storage of backups on an external secure server
- access control policy
- encryption of data before sending it on a physical medium (DVD, USB stick, portable hard drive) or to a third party
- external networks are used exclusively (VPN, dedicated line)
- additional security measures when sending data through the network
- other measures taken in accordance with applicable local laws.
Amendments to this Privacy Notice
We reserve the right to amend or modify this privacy notice from time to time and your continued use of our products and services constitutes your agreement to be bound by the terms of any such amendment or variation. Any amendment or modification to this statement will take effect from the date of notification on the Servercore website