Privacy

Last update: 17. September 2025

1. Introduction

The Controller within the meaning of the GDPR (hereinafter "we," "us/our") shall take appropriate measures to protect your privacy and the security of your personal data. This privacy notice describes how we collect, use, store, and disclose your personal data when you visit our websites, use our products and services, or interact with us.

In the context of providing our products and services, we also act as a Processor. The clauses that regulate the data processing we made as a Processor in the provision of our products and services are available in the Data Processing Agreement.

2. Information and Contact details of the Controller

The Controller is:

World4You Internet Services GmbH
FN 232485s
Wolfgang-Pauli-Straße 2, BT3
4020 Linz
Österreich

E-Mail: dataprotection@world4you.com

You can reach our Data Protection Officer at:

World4You Internet Services GmbH
FN 232485s
Wolfgang-Pauli-Straße 2, BT3
4020 Linz
Österreich

E-Mail: dataprotection@world4you.com

3. What Data We Process

We may process various types of personal data about you, including but not limited to:

• Identity Data: Name, username, title.
• Contact Data/Inventory Data: Contract data such as billing address, delivery address, email address, phone numbers.
• Financial Data: Payment details, bank account details.
• Transaction Data: Details of payments to and from you, and details of products and services you have purchased from us.
• Technical Data: IP address, browser type and version, operating system, device information.
• Profile Data: Username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
• Usage Data: Information about how you use our website, products, and services.
• Marketing and Communication Data: Your preferences for receiving marketing communications from us and your communication preferences.

4. How We Process Your Data

We process your data in various ways, including but not limited to:

• Direct Interactions: You give us your data when you create an account, order products or services, fill out forms, visit our website, contact us, or provide feedback.
• Automated Technologies or Interactions: We collect data about your devices, browsing actions, and patterns when you use our website, through cookies and similar technologies.
• Third parties or publicly available sources: We may receive personal data about you from various third parties and publicly available sources (e.g., through business partners or web crawling).

5. How We Use Your Data

We use your personal data for the following purposes:

• Provision and management of our products and services

  We process your personal data to fulfill our contractual obligations and to ensure smooth use of our offers. This includes, among other things, the collection of inventory data, payment information, and usage data. This data is used to manage your orders, provide technical support, and continuously improve our services, as well as to implement any changes you make in the customer area.

• Access to partner programs

  If you intend to become our business partner, we generally process your contact information, company data, and contract-specific information. We use this information to manage participation in our programs, to fulfill contracts, to facilitate communication, and to optimize collaboration.

• Processing of orders and payments

  For this purpose, we process your personal data such as your name, contact details, and payment information. This data is necessary to process your orders, secure the payment process, and ensure a smooth purchase transaction. In addition, we also use this data to provide you with invoices.

• Customer support

  We process your personal data such as name, contact details, communication history, and the content of your inquiry to customer support. This information is necessary to efficiently process your request and to ensure the desired support.

• To manage your account and authenticate you

  To manage and authenticate your account, we process personal data such as your name, email address, and login information. This data is necessary to secure access to your account, verify your identity, and enable you to use our services in a personalized way.

• To improve and personalise our website

  To improve and personalise our website, we process data such as usage behavior, IP addresses, and cookies. This information helps us to optimize the functionality of our website, adapt content to your interests, and offer you a personal user experience. You can find more information in our Cookie Policy under point 14.

• To send you marketing communications or for telephone advertising

  To send you marketing communications or for telephone advertising, we process your inventory data and your usage data. We use this information to inform you about our products, services, and offers that might be of interest to you. You can find more information about our marketing activities in particular under point 6.

• To send you contractual information

  We process your contact data, such as your email address or postal address. This data is used to ensure that you receive important information about your contracts and our services. For example, we send you information about the function and use of your products, contract extensions, or price adjustments.

• Compliance with legal obligations

  We process your personal data to comply with legal obligations, in particular to fulfill tax, accounting, and record-keeping obligations, as well as to comply with regulations for combating money laundering and terrorist financing, and if necessary, also due to official orders in connection with the relevant telecommunications laws. In addition, in certain cases, we are also obliged to address complaints about customer pages due to the Digital Services Act (DSA).

• Fulfillment and enforcement of contractual obligations

  In this context, we process your personal data, such as contact details and contract information. This data is necessary to fulfill our contractual obligations, ensure contract execution, and enforce our claims in the event of payment defaults.

• Fraud prevention and prevention of payment defaults

  For fraud prevention and prevention of payment defaults, we process certain personal data, including transaction and payment information. This data processing helps us to detect suspicious activities, minimize risks, and ensure financial security for both you and us. We check whether there are indications of misuse of our web service or attempted fraud by means of the terminal device you are using during your online order. In addition, your device data is compared with data from devices from which fraudulent acts have been carried out in the past or where there was a corresponding suspicion. As a rule, employees of IONOS or a service provider also manually check the results at relevant points.

• Business Intelligence Analyses

  For Business Intelligence analyses, we process data to gain insights that help us optimize our business processes and make strategic decisions. We use aggregated and anonymized data whenever possible to identify trends and improve the efficiency of our services.

• Improvement of our products and services

  To improve our products and services, we process information such as feedback, usage data, and market analyses. This data helps us to optimize our offers, develop new functions, and continuously improve your customer experience.

• Conducting product tests

  We process your personal data for the purpose of conducting free product tests. We use your registration data, such as your name, contact details, and other login information, to enable you to access the product test and to send you advertisements for the same or similar products via email.

• Conducting webinars and product demos

  To provide you with optimal support in selecting the right product, we offer free product presentations in the form of webinars or product demos. To conduct webinars and product demos, we process your registration data such as your name, contact details, and other login information. This data is necessary to enable you to access our events.

• Troubleshooting errors in products and services

  To troubleshoot errors in our products and services, we process relevant data such as technical logs, error messages, and usage data. This data is necessary to quickly identify and resolve technical problems to ensure your smooth use of our offers.

• Participation in and conducting raffles

  We process your personal data for registration and participation in raffles. Further information on data processing within the scope of the raffle can generally be found in the respective terms and conditions of participation for the raffle.

• Use and training of Artificial Intelligence ("AI")

  In the context of the use and training of AI, we process data to provide you with AI applications and to improve the performance and efficiency of our AI applications. This applies to applications in the areas of products and services, fraud prevention, customer support, and marketing. We generally process aggregated data here. However, if we process personal data, corresponding deletion routines have been implemented.

• Recording and storing telephone conversations for quality and verification purposes

  For the recording and storage of telephone conversations for quality and verification purposes, we process call data to improve service quality and, if necessary, to provide communication records.

• Checking against sanctions lists

  To check against sanctions lists, we process your personal data to ensure that we comply with our legal obligations and conduct business in accordance with international regulations. This check serves to identify potential risks and ensure compliance with trade restrictions.

• Webcrawling

  As part of web crawling activities, we collect public data from the internet to analyze trends, improve our services, and conduct market research. In doing so, we ensure that we only process publicly accessible information to comply with data protection regulations.

• Data transfer within the group

  Within the corporate group, data may be exchanged with affiliated companies of IONOS Group SE or United Internet AG to create synergies and, in particular, to optimize administrative processes, web presences, and services/products.

• Provisioning of Social Media Presences

  We also process your personal data when you visit one of our social media presences. This includes, in particular, the information that you provide yourself.

6. Data Processing for Marketing Purposes

We also use your personal data for marketing purposes to provide you with individualised offers and information about our products and services. In doing so, we are guided by our legitimate interests in strengthening our customer relationships and continuously improving our services and products. We also use machine learning to calculate individual product recommendations. Machine learning serves the purpose of efficiently and specifically directing advertising to our customers. The basis for the calculations is the respective usage behavior of customers within our websites and, if applicable, also the websites of the affiliated companies of IONOS Group SE. We have an overriding legitimate interest in optimising business processes or making products more appealing through the use of machine learning. However, to protect your data, we have anonymised all personal data as far as possible or implemented corresponding deletion routines.

To deliver targeted advertising in the form of ads on portals of our marketing partners, we also use services such as Meta Custom Audiences, LinkedIn Matched Audiences, TikTok Custom Audiences, Reddit Custom Audiences, and Google Customer Match. We transmit inventory data (email address, phone number, postal code, country) to our marketing partners. However, the data is not sent in plain text but is hashed in advance using the SHA-256 algorithm and then transmitted. The marketing partner then compares this with its own, identical data to then display targeted, personalised advertising in the form of ads on the respective marketing partner's portals or our affiliated companies.

Type of data:

• Inventory data (e.g., contract data such as email address, phone number) Information about your interactions with our services (e.g., pages visited, products purchased)
• Demographic data (e.g., age, gender)
• Your preferences and interests
• Usage data (data that arises when using our websites, services, and products, including analysis of click behavior)

Purposes of use:

• Sending newsletters and promotional emails
• Displaying personalised advertisements on our websites and on other platforms Conducting customer surveys and market research
• Analysing customer behavior data to improve our products and services Telephonic contact for advertising purposes
• Use and training of AI
• Data transfer between affiliated companies

Legal basis

The legal basis for processing your personal data for marketing purposes is our legitimate interest and the consent you have given for selected data processing.

Right to Object:

You have the right to object at any time to the processing of your personal data for marketing purposes. As a Customer you can change your settings for receiving newsletters, telephone contact, and advertising emails at any time through your customer account (Control Panel) or exercise your objection by emailing: dataprotection@world4you.com.

7. Legal Bases for Processing

We process your personal data on the following legal bases:

• Contract Fulfillment: The processing is necessary for the performance of a contract with you or for the implementation of pre-contractual measures.
• Consent: You have given your consent to the processing of your personal data for specific purposes.
• Legitimate Interests: The processing is necessary for our legitimate interests, as long as your interests or fundamental rights and freedoms do not prevail. The legitimate interests we pursue include, in particular: financial interests, direct marketing, fraud prevention, use and training of AI, data transmission to affiliated companies, improvement of our technical infrastructure, improvement of our products/services and web presence, cost savings and process optimisation.
• Legal Obligation: The processing is necessary for the fulfillment of a legal obligation to which we are subject.

8. Disclosure of Your Data

We may disclose your personal data to the following categories of recipients if necessary:

• Technology and Functionality Service Providers:

  Your data may also be shared with technology providers that offer various technical services to support and optimize the online offerings. This category includes providers of cookies and other tracking technologies, anti-fraud software such as reCAPTCHA, Friendly CAPTCHA, and fraud detection tools like Crif and ThreatMetrix, as well as companies that operate social media platforms, including Facebook Ireland Ltd., Twitter Inc., Google LLC, LinkedIn Ireland Unlimited Company, and Xing New Work SE.

• Marketing and Analytics Tools:

  This includes partners that assist in implementing digital marketing strategies, user data analytics, and audience analysis. Examples include Google Analytics for web analytics, HubSpot for CRM and marketing automation services, and other specialized marketing partners such as Meta, LinkedIn, and Reddit.

• Product and Service Partners:

  To offer a comprehensive service range, data is also shared as part of partnerships for product development and marketing purposes. Partners like Salesforce for CRM solutions, OpenAI for AI-powered services, or Atlassian for status information services fall into this category. Additionally, we utilize payment processors such as PayPal, debt collection agencies, and service providers in customer service.

• Authorities:

  In compliance with legal obligations, data may be shared with government authorities, judicial bodies, or other official entities, both for meeting legal requirements and protecting the company's rights.

• Affiliated Companies:

  Within the corporate group, data exchange may occur with affiliated companies of IONOS Group SE or United Internet AG to optimize administrative processes and services.

9. International Data Transfer

We may transfer your personal data to countries outside the European Union (EU) and the European Economic Area (EEA). In such cases, we will ensure that appropriate safeguards are in place to protect your data in accordance with legal requirements, unless you have given us your consent for the data transfer in individual cases.

10. Data Security

We have taken appropriate security measures to protect your personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction

11. Data Storage

We generally store your personal data only for as long as is necessary for the purposes stated in these privacy notices or as we are obligated or entitled to do so due to legal retention periods. For example, we store your personal data for the duration of a contract concluded with you. If, on the other hand, data processing is based on the legal basis of consent or a legitimate interest, we generally store your data until you issue your withdrawal or objection.

Further information on case-specific retention periods is listed below as examples.

• Contract fulfillment and legal obligations:

  Contract data: Stored for the duration of the contractual relationship and beyond, provided that legal retention obligations (e.g., 10 years due to tax and commercial law provisions) exist.

  Invoice data: Until the termination of the contract and beyond, to comply with legal obligations (up to 10 years).

  Chat and Communication data/Telephone recordings: Chat - or Conversation histories are stored for 90 days. If a chat or a phone call leads to a contract, the relevant part is stored for the duration of the contract + legal period if necessary (up to 10 years).

  Raffles: Data processed within the framework of raffles is generally deleted after the raffle ends, unless further retention periods exist or the participant has consented to the further use of the data.

  Information requests: If data subjects assert their right to information against us, we store the data for the duration until the complete information is provided and beyond for up to 3 years.

  Contact forms/contact points: Data processed within the framework of inquiries via contact forms or contact points is generally stored until the inquiry is fully processed, unless there are further legal retention periods.

• Legitimate interests:

  Analysis and tracking data: Data used to improve services is generally stored for a short time, e.g., for the duration of the cookie lifespan.

  Security and fraud prevention data: Generally stored for up to 6 months. However, longer storage periods are possible for specific purposes.

  Friendly Captcha and reCAPTCHA data: Stored until the purpose is achieved (security check).

  Marketing data: Is generally stored until an objection is raised.

  AI-based data: Generally, this is aggregated data. If personal reference cannot be excluded, the data is stored until the purpose is achieved and then deleted.

• Consent-based processing:

  Marketing and newsletter data: Stored until the withdrawal of consent or fulfillment of the purpose.

  Evaluation and survey data: Until the termination of the contract or fulfillment of the purpose, such as at the latest 24 months after a survey for its improvement.

  Google Analytics and similar tracking services: Limited in time by cookie settings or until the withdrawal occurs.

• Special product and services:

  Comments in blogs: Comments remain until the blog is deleted or the comment is deemed legally questionable.

  Webinars and demos/product tests: Data is stored until the webinar/demo or product test is conducted and may be used for follow-up communication.

  Cloud data and IT services: Storage until deleted by the user or at the end of the contract

  CDN and web services: Data is stored until the termination of the service or by the user's deletion request.

• Short-term storage and log data:

  Logfiles and temporary storage data: Often between a few days and a maximum of 60-90 days, depending on the specific security or operational needs.

12. Automated Decision-Making/Profiling

No automated decision-making including profiling, takes place that has legal effect on you or significantly impairs you, unless this is permitted by law.

13. Your Rights

You have the following rights regarding your personal data:

• Right to Access: You have the right to request information about your stored data.
• Right to Rectification: You have the right to correct inaccurate data.
• Right to Erasure: You have the right to request the deletion of your data.
• Right to Restriction of Processing: You have the right to restrict the processing of your data.
• Right to Data Portability: You have the right to receive your data in a portable format.
• Right to Object: You have the right to object to the processing of your data.
• Right to Withdraw Consent: You have the right to withdraw a previously given consent at any time.
• Right to Lodge a Complaint with a Supervisory Authority: You also have the right to lodge a complaint with a competent data protection supervisory authority at any time.

To exercise your rights, please use the contact information provided under point 2. If you are a client, you can also check and modify your personal data at any time in the Control Panel/Customer Area tool.

14. Cookies and Similar Technologies

We use cookies and similar technologies to improve and personalise your experience on our website, as well as to display targeted advertising. For more information, please refer to our Cookie-Policy.

15. Changes to these Privacy Notices

We may update this privacy notice from time to time. The current version will be published on our website and will take effect as soon as it has been updated.