Privacy Policy

1. Introduction

ShiftProxies ("we", "us", or "our"), operated by Keno Coco, Am Taubenschlag 5, 41352 Korschenbroich, Germany, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website shiftproxies.com and use our services.

We process personal data in compliance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

3.1 Information You Provide

When you use our contact form, we collect:

• Name
• Email address
• Message content
• Subject/category of inquiry

3.2 Automatically Collected Information

When you visit our website, we automatically collect:

• IP address (anonymized)
• Browser type and version
• Operating system
• Referrer URL
• Pages visited and time spent
• Date and time of access

3.3 Dashboard Data

When you register for and use our dashboard at dashboard.shiftproxies.com, we additionally collect:

• Account credentials (email, hashed password)
• Payment information (processed by Stripe)
• Usage data (proxy usage, bandwidth consumption)
• Order history and transaction records

4. How We Use Your Data

We use your personal data for the following purposes:

• Service Delivery: To provide and maintain our proxy services
• Communication: To respond to your inquiries and provide customer support
• Payment Processing: To process transactions through Stripe
• Analytics: To analyze website usage and improve our services
• Legal Compliance: To comply with legal obligations
• Security: To detect and prevent fraud or abuse

5. Legal Basis for Processing

We process your personal data based on the following legal grounds (Art. 6 GDPR):

• Contract Performance (Art. 6(1)(b)): Processing necessary to fulfill our contractual obligations to you
• Legitimate Interests (Art. 6(1)(f)): Processing for website analytics and security purposes
• Legal Obligation (Art. 6(1)(c)): Processing required by law (e.g., tax records)
• Consent (Art. 6(1)(a)): Processing based on your explicit consent (e.g., marketing communications)

6. Cookies and Analytics

6.1 Essential Cookies

We use essential cookies that are strictly necessary for the operation of our website. These do not require consent.

6.2 Analytics Services

We use the following analytics services to understand how visitors interact with our website:

Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies to analyze your use of our website. The information generated is usually transferred to a Google server in the USA. We have enabled IP anonymization, so your IP address is truncated within the EU before transmission. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Vercel Analytics

Our website is hosted on Vercel, which provides privacy-friendly analytics. Vercel Analytics collects anonymous usage data without using cookies and without tracking individual users across sites.

7. Third-Party Services

We use the following third-party services that may process your data:

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Contact form submissions: 2 years after last contact
• Account data: Duration of account existence plus 3 years
• Transaction records: 10 years (German tax law requirement)
• Analytics data: 26 months (Google Analytics default)
• Server logs: 7 days

9. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Art. 15): You can request a copy of your personal data we hold
• Right to Rectification (Art. 16): You can request correction of inaccurate data
• Right to Erasure (Art. 17): You can request deletion of your data ("right to be forgotten")
• Right to Restriction (Art. 18): You can request limitation of processing
• Right to Data Portability (Art. 20): You can request your data in a machine-readable format
• Right to Object (Art. 21): You can object to processing based on legitimate interests
• Right to Withdraw Consent (Art. 7): You can withdraw consent at any time

To exercise these rights, please contact us at support@shiftproxies.com.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmission
• Secure password hashing
• Regular security updates and monitoring
• Access controls and authentication

11. International Data Transfers

Some of our third-party service providers (Google, Vercel, Stripe) may transfer your data to servers located outside the European Economic Area (EEA), including the United States. These transfers are safeguarded by:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• The EU-U.S. Data Privacy Framework (where applicable)

12. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

The competent supervisory authority for North Rhine-Westphalia is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44, 40102 Düsseldorf
www.ldi.nrw.de

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: