Data processing agreement (dpa) — Hostinger Web Hosting

Cited by

Facts read from this source

• Contracting entities Report an error

  “Hostinger International Ltd. (a Cyprus private limited company, registered address 61 Lordou Vironos str., 6023 Larnaca, Cyprus) or Hostinger UK Limited (UK private limited company, registered address Nwms Center, 31 Southampton Row, Office 3.11, 3rd Floor, London, England, WC1B 5HJ), or Hostinger Global S.a r.l (Luxembourg private limited company, registered address 6 Avenue Pasteur, L-2310 Luxembourg, the Grand Duchy of Luxembourg)”

• Processor role Report an error

  “that Hostinger is a Processor of Customer Data under Data Protection Laws”

• No data sale Report an error

  “Hostinger shall not: (a) process, retain, use, sell, or disclose Customer Data except as necessary to provide Covered Services pursuant to the Terms of Service, or as required by law; (b) sell such Customer Data to any third party”

• Subprocessor consent Report an error

  “Customer hereby consents to Hostinger’s use of Sub-Processors as described in this Section.”

• Subprocessor objection termination Report an error

  “If Customer does not approve of a new Sub-Processor, then Customer may terminate any Covered Services without penalty by providing, within 10 days or receipt of notice from Hostinger, written notice of termination”

• Named Report an error

  “AMAZON WEB SERVICES EMEA SARL Google Cloud EMEA Limited Cloudflare, Inc. MailChannels Corporation Proofpoint, Inc. Anthropic Ireland, Limited spectra tech, UAB Vonage B.V.”

• Security incident notification Report an error

  “If Hostinger becomes aware of a Security Incident, Hostinger will without undue delay: (a) notify Customer of the Security Incident; and (b) take reasonable steps to mitigate the effects and to minimize any damage resulting from the Security Incident.”

• Audit rights Report an error

  “Customer has the right to confirm Hostinger’s compliance with this Addendum as applicable to the Covered Services by making a specific request in writing, at reasonable intervals, to the address set forth in the Terms of Service.”

• Scc Report an error

  “Module Two (Controller to Processor) EU Standard Contractual Clauses and Module Three (Processor to Processor) EU Standard Contractual Clauses are available for download at the EUR-Lex website.”

• Scc governing law Report an error

  “in Clause 17 (Option 1), the EU Standard Contractual Clauses will be governed by Cyprus law;”

• Scc dispute forum Report an error

  “in Clause 18(b) of the EU Standard Contractual Clauses, disputes will be resolved before the courts of the Cyprus;”

• Supervisory authority Report an error

  “Office of the Commissioner for Personal Data Protection (Cyprus) is the competent supervisory authority.”

• GDPR contact Report an error

  “Contact details: gdpr@hostinger.com”

• Deletion after termination Report an error

  “Deletion of Customer Data will take place thirty (30) days following Termination Date, subject to the terms of the particular Covered Services.”

• Export responsibility Report an error

  “Customer acknowledges that it is Customer’s responsibility to export, before the Termination Date, any Customer Data you want to retain after the Termination Date.”

• Data subject request assistance Report an error

  “Hostinger may, where legally permitted and appropriate and upon Customer’s specific request, provide commercially reasonable assistance in addressing the request, at Customer’s cost (if any).”

• Encryption at rest Report an error

  “Encrypting Personal Data and sensitive data at rest (databases, shared directories etc.)”

• Penetration testing Report an error

  “Penetration Testing for critical company networks and platforms hosting Personal Data Regular network and vulnerability scans”

• Ddos protection Report an error

  “DDOS protection to maintain availability”

• Backups Report an error

  “Critical data either replicated or backed up (Cloud Backups/Hard Disks/Database replication etc.)”

• Sensitive data allowed Report an error

  “Customer may upload Sensitive Data in the course of its use of the Covered Services, the type of and extent to which is determined and controlled by Customer in its sole discretion.”

• Last revised Report an error

  “Last revised: 2026-09-29 11:49:03”

• English version prevails Report an error

  “The English version of legal agreements and policies is considered as the only current and valid version of this document.”

3 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Agency Lead Scaling, migration & exit
• The Agency Lead European sovereignty
• The Freelance App Developer Security, backups & recovery
• The Freelance App Developer Scaling, migration & exit
• The Freelance App Developer European sovereignty
• The Data Protection Officer Security, backups & recovery
• The Data Protection Officer Scaling, migration & exit
• The Data Protection Officer European sovereignty
• The Shop Operator Scaling, migration & exit
• The Shop Operator European sovereignty
• The Skeptic Security, backups & recovery
• The Skeptic Scaling, migration & exit
• The Skeptic European sovereignty
• The Small-Business Owner Scaling, migration & exit
• The Small-Business Owner European sovereignty