1. Who is responsible for your data
Raweb is the controller of the personal data you share with us when you use the control panel at next.raweb.al and the services connected to it. This notice covers visitors to our website, account holders, and people who contact our support team. It does not cover how you, as a customer, handle the personal data of your own site visitors, where you are the controller and we act as your processor.
2. What we collect
We keep the data collection to what we actually need to run the services:
- Account details: your name, email address, password (stored only as a secure hash) and the organisation you represent.
- Billing details: your plan, billing address and tax details, and the payment records we need for invoicing. Card numbers are handled by our payment provider and are not stored on our servers.
- Service data: the configuration of your sites, databases, mailboxes, DNS zones and similar resources that you create through the panel.
- Technical data: IP addresses, request and access logs, and security events such as failed logins and blocked traffic, which we use to operate and protect the platform.
- Support data: the messages, tickets and diagnostics you send us when you ask for help.
3. Why we use it
- to create and manage your account and provide the services you signed up for.
- to take payment, send invoices and prevent fraudulent transactions.
- to keep the platform secure, investigate abuse, and meet our acceptable-use rules.
- to answer your questions and provide support.
- to send service messages such as renewal notices, security alerts and important changes. We only send marketing email if you have asked for it, and you can opt out at any time.
- to meet legal, accounting and regulatory obligations.
4. Our legal bases
We rely on the performance of our contract with you to provide the services and take payment, on our legitimate interest in keeping the platform secure and improving it, on your consent where we ask for it (for example, optional marketing), and on our legal obligations where the law requires us to keep certain records.
5. Who we share it with
We do not sell your personal data. We share it only where it is needed to run the services, with a limited set of providers acting on our behalf:
- our payment provider, to process payments and renewals.
- email delivery, used to send the service and support messages described above.
- providers that help us run and protect our infrastructure.
We may also disclose data if the law requires it, to protect our rights or the safety of others, or as part of a business transfer, in which case we will tell you. Each provider is bound to use your data only for the purpose we engage them for.
6. Where your data is held
We run our own servers and aim to keep data within the regions we operate in. Where a provider processes data outside your country, we make sure appropriate safeguards are in place so your data keeps a comparable level of protection.
7. How long we keep it
We keep account and service data for as long as your account is active. After you close your account we delete or anonymise personal data after a short grace period, except where we are required to keep certain records, such as invoices for tax purposes, for a longer period set by law. Security and access logs are kept only for as long as they are useful for operating and protecting the platform.
8. How we protect it
We protect data with measures that match the sensitivity of the information, including encryption in transit, isolated environments for each customer, access controls for our team, and monitoring for unusual activity. No system is perfectly secure, but we work to reduce risk and to respond quickly if something goes wrong.
9. Your rights
Depending on where you live, you have the right to access the personal data we hold about you, to correct it, to ask us to delete it, to object to or restrict certain processing, to receive a copy in a portable format, and to withdraw any consent you have given. To exercise these rights, email privacy@raweb.al and we will respond within the time the law allows. If you are unhappy with how we have handled your data, you can also complain to your local data protection authority.
10. Cookies
The control panel uses cookies that are strictly necessary to keep you signed in and to protect against cross-site request forgery. We do not use advertising cookies and we do not track you across other websites. Any analytics we use is limited and focused on keeping the service reliable.
11. Children
The services are intended for adults and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, contact us and we will remove it.
12. Changes to this notice
We may update this notice as our services and the law change. We will post the updated version here with a new date, and where a change is significant we will let active customers know.
13. Contact
For any privacy question, or to exercise your rights, email privacy@raweb.al.