Privacy Policy
Last updated: 01.01.2026
This Privacy Policy explains how BNC s.r.o (“Kryptoberg”, “we”, “us”, “our”) collects and processes personal data when you visit our website, interact with us or use our services related to crypto-mining hardware and hosting (together the “Services”).
This document is intended to meet the information requirements of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
1. Controller and Contact
The controller responsible for data processing on this website is:
BNC s.r.o
Lichardova 19
04001, Kosice, Slovakia
info@kryptoberg.eu
If you have any questions about data protection or wish to exercise your rights, you can contact us using the details above.
2. What Data We Process
2.1 Data you provide to us
We process personal data that you actively provide, in particular:
Contact data - name, business e-mail address, phone number, company, role, country.
Enquiry data - content of your message, selected miner / hosting location, budget, interest in consultation.
Order and contract data (if you purchase miners or hosting) - billing address, delivery address, tax/VAT details, chosen product, contract documents, payment status (but no full card data, see 2.3).
Account data (if we later offer login areas) - username, password, settings.
Communication data – e-mails or messages in connection with support and sales.
Providing this data is voluntary, but without it we may not be able to answer your enquiry or enter into a contract.
2.2 Data we collect automatically when you visit our site
When you visit our website, technical data is automatically processed:
IP address (shortened/anonymised where possible)
Date and time of access
URLs accessed, HTTP status codes
Referrer URL (page from which you came)
Browser type and version, operating system, device type
Basic location derived from IP (e.g. country, city)
This data is technically necessary to display the website, ensure stability and security and to prevent misuse. It is stored in server log files.
Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in operating a secure and stable website.
2.3 Payment processing
If you buy miners or hosting from us, payments may be processed by external payment providers (e.g. Stripe, PayPal or bank transfer providers – insert your actual providers here).
We only receive the information necessary to confirm the payment (e.g. successful/failed, last digits of account, amount). Detailed card/banking data is stored and processed only by the payment provider.
Legal basis: Art. 6(1)(b) GDPR – performance of a contract.
3. Use of Framer as Hosting Provider
Our website is created and hosted using Framer (Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands). When you visit our website, your personal data (such as IP address, device information and usage data) is processed on Framer’s servers. Framer may use necessary cookies to deliver the site and ensure security.
We have concluded a data processing agreement with Framer in accordance with Art. 28 GDPR.
Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in reliable and efficient hosting of our website.
4. Cookies and Analytics
4.1 Cookies
Our website uses cookies and similar technologies. Cookies are small text files stored on your device.
We use:
Essential cookies – required to operate the site (e.g. security, load balancing, saving your cookie settings).
Analytics cookies (Matomo) – to understand how visitors use our site and to improve usability and content, if you have given consent via our cookie banner.
You can manage your cookie preferences at any time via our cookie banner or your browser settings. If you block certain cookies, some features of the website may no longer function properly.
Legal basis:
Essential cookies: Art. 6(1)(f) GDPR (legitimate interest in technically correct operation).
Analytics cookies: Art. 6(1)(a) GDPR and § 25(1) TTDSG – only after your consent.
4.2 Matomo (Web Analytics)
We use the free Matomo web analytics software to analyse how visitors use our website and to improve content and usability over time. Depending on the configuration, Matomo can operate either:
with cookies (e.g. to recognise returning visitors), or
without cookies, using anonymised usage data only (e.g. a truncated IP address and browser/device information).
In our current setup, Matomo is operated on servers of our service provider / hosting provider Websupport within the EU/EAA, and the data is not shared with third parties nor used for advertising networks or cross-site tracking. IP addresses are stored only in truncated (shortened) form so that a direct personal reference is no longer possible.
Legal basis:
If Matomo is used without cookies and with IP anonymisation, the legal basis is our legitimate interest in analysing the use of our website and improving it, Art. 6(1)(f) GDPR.
If Matomo is used with cookies / consent banner, the legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TTDSG.
Opt-out / objection:
You can object to the processing by Matomo at any time:
by rejecting analytics in our cookie banner (if used), or
by using the opt-out function that we provide on this website **e.g. a Matomo opt-out iframe / link – add where technically implemented**
5. Purposes and Legal Bases in Summary
We process your personal data for the following purposes and on the following legal bases:
To operate the website and ensure IT security
Art. 6(1)(f) GDPR
To answer enquiries and provide support
Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contract) and Art. 6(1)(f) GDPR
To perform contracts (sale of miners, hosting, invoicing, customer account)
Art. 6(1)(b) GDPR
For direct marketing and newsletters (if implemented)
Art. 6(1)(a) GDPR (consent) or Art. 6(1)(f) GDPR (legitimate interest in marketing to existing customers, within legal limits)
To comply with legal obligations (e.g. tax and commercial law retention duties)
Art. 6(1)(c) GDPR
6. Recipients of Personal Data
We share personal data only where necessary and in accordance with data protection law, for example with:
IT and hosting providers (e.g. Framer)
Analytics provider (Matomo web analytics, operated on EU-based servers / via our hosting provider)
Payment service providers (for processing payments)
Professional advisors (tax advisors, lawyers) where required
Public authorities where we are legally obliged to do so
These service providers act partly as processors bound by our instructions under Art. 28 GDPR, and partly as independent controllers with their own responsibility (e.g. payment service providers, banks). We do not sell your personal data.
7. International Data Transfers
Some of our service providers may, in individual cases, process personal data outside the EU/EEA. Where this is the case, we use the legally required safeguards pursuant to Art. 44 ff. GDPR to protect your data, in particular:
an adequacy decision of the European Commission, if available, and/or
Standard Contractual Clauses (SCCs) approved by the Commission, and
additional technical and organisational measures where necessary
However, we cannot fully exclude that authorities in such countries may access data under local laws. By consenting to analytics cookies or using our services, you are aware of these risks.
8. Storage Periods
We store personal data only as long as necessary for the respective purposes:
Server logs: usually for 30-60 days for security and troubleshooting, then deleted or anonymised (adjust to your actual setting).
Contract and billing data: up to 10 years, in line with applicable commercial and tax law retention obligations.
Enquiries via contact form / e-mail: as long as needed to process your request and for follow-up; typically 6-24 months.
Analytics data: according to the retention periods configured in Matomo (13 months); afterwards, data is deleted or anonymised.
After expiry of these periods, data is deleted or anonymised unless legal obligations require longer storage.
9. Your Rights under GDPR
As a data subject you have, under the legal conditions, the following rights:
Right of access (Art. 15 GDPR) – to obtain information about the personal data we hold about you.
Right to rectification (Art. 16 GDPR) – to correct inaccurate or incomplete data.
Right to erasure (Art. 17 GDPR) – to have your data deleted, where no legal grounds for further storage apply.
Right to restriction of processing (Art. 18 GDPR).
Right to data portability (Art. 20 GDPR) – to receive your data in a structured, commonly used, machine-readable format.
Right to object (Art. 21 GDPR) – especially against processing based on legitimate interests or for direct marketing.
Right to withdraw consent (Art. 7(3) GDPR) – at any time with future effect.
To exercise these rights, contact us using the details in section 1.
Right to lodge a complaint
You also have the right to lodge a complaint with a data protection authority, in particular:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
Website: https://www.lda.bayern.de/de/index.html
10. Children
Our website and services are intended for adults and business users. We do not knowingly collect personal data from children under 16. If you believe a child has provided personal data to us, please contact us so we can delete it.
11. Security
We implement appropriate technical and organisational measures to protect your data from loss, misuse, unauthorised access and alteration. However, no internet transmission is completely secure, so we cannot guarantee absolute security.
We use TLS/SSL encryption where supported by your browser. You can recognise an encrypted connection by “https://” and the lock symbol in the address bar.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time, for example if we introduce new services, tools or legal requirements change. The current version is always available on this page and is indicated by the “Last updated” date at the top.