This policy explains what personal data we collect, why we process it and what rights you have, under Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
1. 1. Data controller
The data controller is REAL TECH SRL, VAT no. IT04143630160, registered office at via Alessandro Manzoni 15.
You can contact us at noreply@dominiolowcost.it or by certified email (PEC) at realtech@mail-tech.net.
2. 2. Data we collect
Account data: first and last name or company name, email address, login credentials (the password is stored only in hashed form), any passkeys and two-factor authentication settings.
Billing and registrant data: address, tax code or VAT number, phone number and the other details required by registries for domain contacts.
Payment data: amounts, status and references of transactions. Full card details never pass through or are stored on our systems.
Technical data: IP address, date and time of access, logs of account operations and data needed to run the hosting services.
3. 3. Purposes and legal bases
Performance of the contract and pre-contractual steps (art. 6.1.b GDPR): creating your account, registering and managing domains, providing hosting, support.
Legal obligations (art. 6.1.c GDPR): tax and accounting requirements, obligations imposed by registries and requests from authorities.
Legitimate interest (art. 6.1.f GDPR): system security, fraud and abuse prevention, service notices about expiries and renewals.
We do not use your data for profiling or for third-party marketing.
4. 4. Registries, registrar and WHOIS
To register and manage domains we must disclose registrant and contact data to the accredited registrar Openprovider B.V., based in the Netherlands, which acts as our supplier, and through it to the registry responsible for each extension (for example the .it Registry for .it domains and EURid for .eu domains).
Registries may publish some data in public WHOIS and RDAP lookup services, according to their own rules. On extensions that allow it we enable WHOIS protection free of charge; for .it domains, natural persons can choose not to publish their personal data.
Providing this data is necessary: without it the domain cannot be registered.
5. 5. Payments
Card, SEPA and PayPal payments are handled by Stripe, which acts as an independent controller or processor for payment data and applies fraud prevention measures. We only receive the information needed to check the outcome of the transaction.
For bank transfers we process the details in the payment reference and those provided by the bank to reconcile the payment.
6. 6. Infrastructure and suppliers
The website, the control panel and the hosting services run on infrastructure located in the European Union.
Suppliers that process data on our behalf, such as email delivery and infrastructure services, are appointed as processors under art. 28 GDPR and receive only the data needed for their tasks.
7. 7. Transfers outside the EU
Some registries are based outside the European Economic Area: registering a domain with one of these extensions involves transferring registrant data to the registry, which is necessary to perform the contract you requested (art. 49.1.b GDPR).
In other cases, transfers only take place to countries covered by a European Commission adequacy decision or under standard contractual clauses.
8. 8. Data retention
Account data is kept for the whole duration of the relationship and, after closure, for the time needed to handle any disputes.
Accounting and tax records are kept for ten years, as required by law. Technical logs are kept for limited periods consistent with security purposes.
Data disclosed to registries is retained by them according to their own policies.
9. 9. Your rights
You may at any time request access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest (arts. 15-22 GDPR).
Erasure may be limited by legal obligations or by the need to keep data for domains that are still active. Much of your data can be updated directly from the control panel.
10. 10. Security
We adopt appropriate technical and organisational measures, including encrypted connections, passwords stored with hashing algorithms, passkey login and two-factor authentication, access control and backups.
We encourage you to enable two-factor authentication and not to share your credentials.
11. 11. Contacts and complaints
To exercise your rights or for any question about data processing, write to noreply@dominiolowcost.it or realtech@mail-tech.net. We reply within the time limits set by the GDPR.
If you believe the processing breaches data protection law, you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of the EU country where you live.