Greenhost

Greenhost is a domain provider and VPS provider.

7.3/10

How we calculate ratings →

Handling

Does the policy allow personally-targeted or behavioral marketing? No

10/10

Does the service allow you to permanently delete your personal data? Yes, by contacting someone

3/5

Even if there is a reasonable delay before the data is fully deleted (as is common), the data still counts as "permanently deleted" and satisfies the parameters for this question.

Score

Yes, by contacting someone

60%

Yes, using an automated mechanism

100%

N/A

The service doesn't collect any personal information.

100%

Citation

You are entitled to access and correct your data, or ask us to delete it. Many changes can be made in our Self Service Centre. You are also entitled to withdraw previously given consent to this privacy statement, or to object to our processing of your data. You are also entitled to data portability, which means that we will provide you with a copy of the data we have on you, upon your request. If you want to use any of these rights, please send your specific request to support@greenhost.net. We will respond to your request as soon as possible, but at the latest 4 weeks after your request.

Note that these rights do not apply if they conflict with other legal obligations, such as the obligation to keep records for all contracts and invoices for a period of 7 years.

Does the service allow third-party access to private personal data? Yes, not all parties specified (but only to critical service providers)

7/10

This may come in the form of outright data sharing or by using local third-party analytics software (such as Google Analytics, which collects a plethora of user information).

Note that whether the policy allows sharing aggregated user data does not affect this question.

If the personal data is encrypted when it passes through the third-party, it does not count as third-party access (as the data is inaccessible to that party).

If personal data has been made public by, for example, posting it to a blog, it does not count as private personal information (and is therefore not considered by this question).

Score

Yes

The policy allows sharing personal data with third parties (not just critical service providers), and does not explicitly list the third parties.

Yes, all parties specified (including non-critical service providers such as advertisers)

30%

Yes, not all parties specified (but only to critical service providers)

70%

Yes, all parties specified (only to critical service providers)

80%

100%

Citation

We do not sell or otherwise voluntarily provide the non personal browsing information we collect about you or your website usage to third parties. In general it is not our practice to disclose personal information to third parties. An exception can be made in a good faith belief that disclosing your personal information to a third party is reasonably necessary to: - take action regarding suspected illegal activities; - enforce or apply our Terms and Conditions or Privacy Policy; - comply with legal processes, such as a search warrant, subpoena, statute, or court order; or - protect our rights, reputation, and property, or that of our users, affiliates, or the public.

If we do provide your data to a third party, we only do so after entering into a processors agreement with that third party to maintain a comparable level of security and confidentiality. Greenhost will remain responsible for the processing.

If Greenhost is required to provide a third party with your personal information (whether by subpoena or otherwise) Greenhost will use reasonable means to notify you promptly of that event, unless prohibited by law or if Greenhost is otherwise advised in legal proceedings.

When does the policy allow law enforcement access to personal data? When reasonably requested

3/5

Score

Always

This includes cases in which law enforcement either runs the service or has a known backdoor into (or relationship with) the service.

Not specified

When reasonably requested

60%

Only when required by a court order or subpoena

80%

N/A (no personal data to share)

The service would have no personal data to share with law enforcement.

100%

Never (special legal jurisdiction)

The service operates in a jurisdiction in which sharing data with law enforcement is never required.

100%

Citation

An exception can be made in a good faith belief that disclosing your personal information to a third party is reasonably necessary to: - take action regarding suspected illegal activities; - enforce or apply our Terms and Conditions or Privacy Policy; - comply with legal processes, such as a search warrant, subpoena, statute, or court order; or - protect our rights, reputation, and property, or that of our users, affiliates, or the public.

Transparency

Does the policy outline the service's general security practices? Somewhat

1/3

Score

Somewhat

The policy provides only a very vague overview of its security practices.

30%

Yes

60%

Yes, including audits

"Reviews," "monitoring," etc. also count as audits.

80%

Yes, including independent audits

Independent "reviews," "monitoring," etc. also count as independent audits.

100%

N/A

The service doesn't collect any personal information.

100%

Citation

Greenhost has implemented reasonable measures to protect against unauthorised access to and unlawful interception or processing of personal information that Greenhost stores and controls. However, it is impossible to fully eliminate security risks. Third parties may circumvent our security measures to (un)lawfully intercept data we collect, Greenhost transmissions or private communications. If any such security breach occurs we will inform relevant authorities of the breach and we will post a notice to the Websites.

Is the policy's history made available? No

0/5

Does the policy require users to be notified in case of a data breach? Yes, eventually

5/7

Will affected users be notified when the policy is meaningfully changed? No

0/5

Collection

Does the service collect personal data from third parties? No

10/10

Is it clear why the service collects the personal data that it does? Yes

10/10

Does the service allow the user to control whether personal data is collected or used for non-critical purposes? N/A (no data used for non-critical purposes)

10/10

Does the policy list the personal data it collects? Yes, generally

7/10

Score

The policy does not claim to not collect personal data, but it also doesn't provide any meaningful insight into the types of personal data it collects.

Only summarily

The policy uses overly vague language to provide a summary of the types of collected personal data.

30%

Yes, generally

All general categories of collected personal data are listed, though not all types of personal data are explicitly mentioned (for example, the list might use a phrase like 'such as' when listing types of personal data).

70%

Yes, exhaustively

All types of collected personal data are listed specifically

100%

N/A (no personal data is collected)

100%

Citation

What information do we collect
Name, address, place of residence
Telephone number
Email address(es)
Payment details, such as account numbers and ways of payment
Type of customer (individual, business, NGO)
Other details, that are actively provided while placing an order, in email correspondence, or by phone
Contact history
Services you are subscribing to

Last Updated

May 14, 2021

Sources

Source #1 ↗

Contributors

doamatto