Skip to content
domainspacesi

Privacy policy

1. Controller

The controller of your personal data is Studio 404 d.o.o., Gradišče 15c, 1360 Vrhnika, Slovenia, VAT ID: SI42531357. Contact: hello@domainspace.si.

2. What data we process

  • Account data: name, email address and a hashed password.
  • Registrant data you enter at checkout: type (individual or company), name, company name, VAT or registration number, postal address, country, phone number and email address.
  • Order data: the domain, price, payment status, the language you used, your confirmation of immediate performance, and the campaign parameters (such as utm_source or gclid) of the ad or link you arrived from.
  • Technical data: server logs such as IP address and browser information, needed to run and secure the site.
  • Support chat, if you open it: your messages and attachments, a random visitor ID, browser language, time zone and the page you are on. If you are logged in, the chat also receives your account name, email address, user ID and language, so that we know who we are talking to.
  • Customer record (CRM): your account name, email address, user ID and language, the campaign parameters of the link you arrived from, and what happens with your account and orders: sign-up, start of checkout, domain registered or renewed, order refunded, with the domain, the amount and the order number. If you register a domain for a company, also the company name and its VAT or registration number. We never send card data, passwords, access tokens or your postal address.
  • If you accept it: identifiers set by analytics and advertising providers (see the cookie policy).

3. Why we process it, and on what basis

  • To register and manage your domain, take payment and provide the dashboard: performance of a contract (Art. 6(1)(b) GDPR).
  • To keep accounting and tax records: legal obligation (Art. 6(1)(c)).
  • To secure the service, prevent fraud and handle disputes, and to understand which campaigns lead to orders: our legitimate interests (Art. 6(1)(f)).
  • To answer your support requests, keep a record of our customers and orders and see how our marketing leads to sign-ups and orders (support chat and customer record): performance of a contract (Art. 6(1)(b)) and our legitimate interests (Art. 6(1)(f)).
  • To measure ads and use of the site with Google or Meta tools: your consent (Art. 6(1)(a)), which you can withdraw at any time.

4. Who receives your data

  • Openprovider, our registrar platform, and the .si registry (Register.si / ARNES): registrant data is passed to them to register the domain. The registry may publish or disclose limited holder data according to its own policy: https://www.register.si/en/disclosure-of-information-about-a-si-domain-holder/
  • Stripe, which processes card payments. We do not receive or store your card number.
  • Our hosting and infrastructure providers, who process data on our behalf.
  • Hal (chatwithhal.com), which provides our support chat and customer record and processes this data on our behalf.
  • Google (Google tag / Google Ads), which receives conversion events even before you choose, without cookies; with cookies and for personalised ads only if you accept.
  • Authorities and courts, where the law requires it.

Some of these providers may process data outside the European Economic Area. Where they do, we rely on adequacy decisions or standard contractual clauses.

5. How long we keep it

Account data until you ask us to delete the account. Registrant and order data for as long as the domain is registered and afterwards for as long as tax, accounting and limitation rules require. Server logs for a short period.

6. Your rights

You can ask for access to your data, correction, deletion, restriction, a portable copy, and you can object to processing based on legitimate interests. You can withdraw consent at any time through the cookie settings link in the footer.

Write to hello@domainspace.si. You also have the right to complain to the supervisory authority, in Slovenia the Information Commissioner (Informacijski pooblaščenec, www.ip-rs.si), or to the authority in your own country.

Note that some registrant data cannot be deleted while the domain is registered, because the registry requires it.

7. Changes

We may update this policy; the current version is always on this page.