This Privacy Policy explains how Terarium j.d.o.o. (“we”) processes personal data when you visit the Eigenflops website, create an account or use our GPU rental services. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Croatian data protection law.
1. Controller
Terarium j.d.o.o., Sokolgradska ulica 84, 10000 Zagreb, Croatia
OIB 96284727269, MBS 081626527
Email: info@terarium.xyz
2. What data we collect and why
Website visits
When you visit the website, our hosting provider processes technical data such as your IP address, browser type and the pages requested, in order to deliver the website and keep it secure. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
Forms and emails you send us
When you fill in a form on our website or email us, we process your name, email address and the information you give us (for example company, country, the GPUs and period you need, and your message) to answer you. Legal basis: steps prior to entering into a contract, or our legitimate interest in responding to enquiries (Art. 6(1)(b) and (f) GDPR).
Account and verification (KYC)
When you create an account, we collect:
- full name, email address and country;
- for companies: company name, address and VAT number;
- an identity document scan, or the result of a verification by a KYC provider;
- the result of a card check;
- information about the intended use of the Services and the end user.
We use this data to verify your identity, prevent fraud and abuse, screen against EU sanctions lists and meet our legal obligations. Legal basis: performance of a contract, compliance with legal obligations, and our legitimate interest in preventing fraud and abuse (Art. 6(1)(b), (c) and (f) GDPR).
Payments and invoices
Card payments are handled by our payment provider. We do not store full card numbers. We keep invoice and payment records to meet accounting and tax obligations. Legal basis: performance of a contract and compliance with legal obligations (Art. 6(1)(b) and (c) GDPR).
Service usage
We record technical usage data, such as GPU hours, disk size, traffic volume and connection logs, to bill you, operate the Services and detect abuse. Legal basis: performance of a contract and our legitimate interest in security (Art. 6(1)(b) and (f) GDPR).
Data you store on our servers
Data you store or process in your containers is your data. For that data, you are the controller and we are the processor, under our Data Processing Agreement. This Privacy Policy does not cover it.
3. Who we share data with
We share personal data only with service providers we need to run the business:
- website hosting provider;
- form provider, which receives the forms you send through our website;
- payment provider;
- identity verification (KYC) provider;
- email provider;
- the data center where our servers are colocated in Zagreb, Croatia;
- accountants and legal advisors;
- public authorities, when the law requires it.
Our service providers process data only on our instructions. If a provider processes data outside the EU and EEA, we make sure appropriate safeguards are in place, such as an EU adequacy decision or the EU Standard Contractual Clauses.
4. How long we keep data
- Form submissions, emails and enquiries: up to 2 years after our last contact, unless they become part of a customer relationship.
- Account and KYC data: while your account is active and for 5 years after it is closed, to handle legal claims and meet anti-fraud and sanctions obligations.
- Invoices and accounting records: 11 years, as required by Croatian accounting law.
- Technical and connection logs: up to 12 months.
- Data stored in your containers: deleted when the Rental ends.
5. Your rights
You have the right to:
- access your personal data and get a copy;
- have incorrect data corrected;
- have your data deleted, where we have no legal reason to keep it;
- restrict or object to processing based on our legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, where processing is based on consent.
To use these rights, email info@terarium.xyz. We reply within one month. You can also complain to the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, azop.hr), or to the supervisory authority in your own EU country.
6. Security
We protect personal data with technical and organisational measures appropriate to the risk, including access control. Our servers are located in a data center certified to ISO/IEC 27001.
7. Cookies
See our Cookie Policy.
8. Changes
We may update this Privacy Policy. The date at the top shows the latest version.