Skip to content
Client area

Host4Biz privacy policy

The services offered by Host4Biz are fully commercial. Your privacy and security are a substantial part of how we run the business. This policy rests on four pillars:

  1. Processing of the client’s personal data.
  2. Protecting the service with a password.
  3. The «cookies» policy.
  4. Audit of personal data processing.

Last updated: 17 September 2026.

PROCESSING OF THE CLIENT’S PERSONAL DATA

In accordance with Article 13(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR), we inform you that:

  1. The controller of your personal data is Host4Biz Spółka z ograniczoną odpowiedzialnością, with its registered office in Warsaw at ul. Świeradowska 47, 02-662 Warszawa, entered in the register kept by the District Court for the Capital City of Warsaw, 13th Commercial Division of the National Court Register, under KRS number 0000566570, NIP 5213701344, REGON 362016680 (hereinafter: Host4Biz).
  2. Contact address of the data protection officer at Host4Biz: [email protected].
  3. Your personal data will be processed on the basis of Article 6(1)(a)–(c) GDPR in order to conclude and to perform your contract with Host4Biz for the services it offers, as well as to fulfil the legal obligations incumbent on Host4Biz, to detect and prevent abuse, to establish, defend and pursue claims, for direct marketing, for compiling summaries, analyses and statistics, for verifying payment reliability, for handling complaints and requests, for technical support and for financial settlements, including issuing accounting documents.
  4. Host4Biz is entitled to transfer your personal data to third parties (hereinafter: Host4Biz subcontractors), as well as to domain name registries and certification authorities, for the purpose and to the extent necessary for the proper and due performance of the contract concluded between you and Host4Biz. Accordingly, your personal data may be transferred to Host4Biz subcontractors under a personal data processing agreement concluded between Host4Biz and those subcontractors. The transfer of your personal data to domain name registries takes place under the domain name registration agreement concluded between you and the registry. The transfer of your personal data to certification authorities takes place under the SSL certificate agreement concluded between you and the certification authority. Host4Biz is also obliged to transfer your personal data under mandatory provisions of law, including at the request of authorised courts, authorities and institutions.
  5. As a rule, your personal data is not transferred outside the EEA. A transfer outside the EEA may nevertheless occur where it is necessary in order to deliver your service, including where delivery requires the involvement of Host4Biz subcontractors established outside the EEA.
  6. Your personal data will be stored for the term of the contract for the services offered by Host4Biz in connection with which the data is processed, and after that period until the limitation period for claims under that contract expires. Personal data recorded in accounting documentation will be stored for the period indicated in applicable law, including tax law.
  7. Subject to the limitations arising from the GDPR and other provisions of law, you have the right of access to your personal data and the right to rectify it, to erase it, to restrict its processing, the right to data portability, the right to object, and the right to withdraw consent at any time where processing is based on the consent you have given.
  8. You have the right to lodge a complaint with a supervisory authority within the meaning of the GDPR where you consider that the processing of your personal data infringes the GDPR.
  9. To the extent necessary to perform the contract for the services offered by Host4Biz, to take action at your request, and to fulfil a legal obligation incumbent on Host4Biz, the processing of your personal data takes place on the basis of law, namely Article 6(1)(b) and (c) GDPR, without the need for your consent. Beyond that, providing your personal data is voluntary. Where consent to the processing of your personal data has been given by you solely for marketing purposes, providing the data is voluntary, but a refusal to give consent or its withdrawal will make it impossible for Host4Biz to inform you about new offers and promotions.
  10. You may be subject to a decision based solely on automated processing of personal data, including profiling, where applicable law entitles us to do so or where you have given your prior consent.

PROTECTING THE SERVICE WITH A PASSWORD

Every service launched on Host4Biz servers is protected by an access password. The password must meet requirements as to the number of characters, including letters, digits and special characters, providing a level of security adequate to the risk involved in processing personal data. Access to an account or a domain is therefore possible only after correct authorisation. Using the mechanisms available in the control panel, you may change the password at any time. If you have forgotten your password, a formalised procedure for issuing a new one is described in the help section on host4.biz.

THE «COOKIES» POLICY

“Cookies” are text files, data stored on users’ devices and intended for use with websites. Among other things, they make it possible to identify the type of the user’s device and to display pages adapted to individual preferences. “Cookies” most often contain the address of the website, the storage period on the user’s device and their own unique identifier.

Cookies allow us to:

  • keep the site and the client area working correctly,
  • remember your settings — the currency you chose and your consent decision,
  • use analytics tools,
  • use marketing tools.

Consent to cookies. On your first visit we show a consent window with three categories: necessary, analytics and marketing. The necessary ones always work — without them neither the site nor the client area functions, so we do not ask for consent to them. Analytics and marketing start only once you switch them on; refusing is as easy as agreeing and breaks nothing on the site.

We keep your decision for 182 days. You can change it at any time with the «Cookie settings» button in the footer of every page — it opens the same window, and once consent is withdrawn the corresponding files are deleted. The same can be done in your browser: delete the files for the host4.biz domain or block them entirely. The currency selector, the stored consent and signing in to the client area will then stop working.

The full list — what exactly the site sets, what the client area sets, how long each file lives and what it is for — is on the Cookies page.

First-party cookies. Cookies can be divided into first-party cookies and those coming from third parties. As for first-party cookies, we use them so that our services work correctly. In the applications provided by Host4Biz, accepting «cookies» is required for the correct use of, among other things, the billing system (the client area).

Third-party cookies. Our site, like most modern websites, uses functions provided by third parties, which involves the use of cookies coming from those third parties. Such use is described below.

Analytics and statistics. We collect site statistics: the number of visitors, the type of operating system and browser, time spent on the site, pages visited. For this we use Google Analytics (Google LLC) and Matomo. We keep Matomo on our own server, so those statistics go nowhere else.

We look at statistics in aggregate rather than per person: we do not join them with the data from your contract and do not try to establish your identity from them. The files themselves, however, contain identifiers that tell one browser from another — which is why they start only after your consent.

Using these tools involves placing tracking code supplied by their providers into the page. That code relies on cookies, but may also use other tracking technologies.

Marketing. We use Google Ads and the Meta Pixel to see which advertising brings customers and to avoid showing it to those who have already ordered. The codes on the page are loaded by Google Tag Manager — a manager of other people’s tags rather than an advertising tool itself. All of them fire only after your consent to the «marketing» category; without it Google and Meta receive only a signal that consent is absent and set no files. One file — fr — is set not by our domain but by facebook.com itself.

Social networks. The footer contains links to our social network profiles. A link by itself sets no files — they are set by the service you go to, on its own terms. There are no social plugins and no comment system on the site.

Payments. When you pay for an order, the payment page belongs to the payment provider, and it sets files there under its own rules. We have no influence over them and no access to them.

SERVER LOGS

Using our services involves sending requests to the server on which the site is stored. Every request addressed to the server is recorded in the server logs.

The logs include, among other things, your IP address, the server date and time, and information about the browser and operating system you use. The logs are written and stored on the server.

The data recorded in the server logs is not associated with specific people using the site and is not used by us to identify you.

The server logs are solely auxiliary material for administering the site, and their contents are not disclosed to anyone other than persons authorised to administer the server.

AUDIT OF PERSONAL DATA PROCESSING

A data controller who has entrusted Host4Biz with the processing of personal data, or an auditor authorised by that controller, is entitled to audit Host4Biz with respect to the processing of the entrusted personal data for compliance with the GDPR, applicable Polish law and the personal data processing agreement. The data controller may exercise the right of audit in the following ways:

  1. electronically, by Host4Biz sending the data controller, at the controller’s request, a list containing the data necessary to exercise the audit right provided for in the GDPR, in the form used by Host4Biz. Information provided under the electronic audit procedure is supplied free of charge once in each successive twelve-month (12) period of the personal data processing agreement. Any further information provided under the electronic audit procedure within the period indicated in the preceding sentence is sent to the data controller after prior payment of the fee provided for in the price list available at https://host4.biz, or of an advance corresponding to the expected fee where the price list provides for an hourly rate. In the latter case, once the audit is completed Host4Biz and the controller will make a final settlement of Host4Biz’s remuneration for the audit on the basis of the working time actually spent by Host4Biz taking part in it.
  2. in the form of a paid on-site audit at the registered office of Host4Biz during Host4Biz working hours, with at least 21 days’ written notice, after prior payment of the fee provided for in the price list available on the Host4Biz website, or of an advance corresponding to the expected fee where the price list provides for an hourly rate. In the latter case, once the audit is completed Host4Biz and the controller will make a final settlement of Host4Biz’s remuneration for the audit on the basis of the working time actually spent by Host4Biz taking part in it. An on-site audit takes place on the terms agreed between the data controller and Host4Biz in a schedule.

This policy was drawn up in Polish. The Russian, English and Ukrainian versions are translations provided for convenience; in the event of any discrepancy, the Polish version prevails.