GDPR

For your account, billing and support data, Zentrix Data is the controller: we decide why and how it is processed, and we are answerable for it.

For the traffic you route through Service, you are the controller and we act as your processor. We carry your requests, meter them and keep them secure; we do not decide what you use Service for, and you are responsible for having a lawful basis for the traffic you send. Where you need a data processing agreement to cover that relationship, write to contact@proxies.fo and we will put one in place.

Contract. Everything required to open your account, authenticate you, route and meter your traffic, take payment and answer your support requests.

Legitimate interests. Securing Service and preventing abuse, and understanding in aggregate how Service is used so we can improve it. We have weighed these against your interests and rights, and you may object at any time.

Consent. Marketing communications and non-essential cookies, and nothing else. You may withdraw consent at any time without affecting processing already carried out or the Service you receive.

Legal obligation. The tax, accounting and abuse records we are required to keep, and our responses to binding requests from competent authorities.

Access. To be told whether we process your personal data and to receive a copy of it.

Rectification. To have inaccurate data corrected and incomplete data completed.

Erasure. To have your data deleted where we no longer have a basis to keep it. Records we must retain by law are the exception, and we will tell you which they are.

Restriction and objection. To have processing paused while a dispute is resolved, and to object to processing we base on our legitimate interests.

Portability. To receive the data you gave us in a structured, commonly used, machine-readable format, and to have it sent to another controller where that is technically feasible.

Automated decisions. Not to be subject to a decision based solely on automated processing that significantly affects you. We do not make such decisions; our abuse controls flag accounts for a person to review rather than deciding alone.

Email contact@proxies.fo from the address registered to your account, telling us which right you wish to exercise. There is no charge, and using a right is never a reason for us to treat your account differently.

We respond within one month. If a request is complex or you have made several, we may extend that by up to two further months and will tell you why within the first month.

We may ask you to confirm your identity before we act, and we may decline a request that is manifestly unfounded or excessive — in which case we will explain the decision and how to challenge it.

Service runs on infrastructure in multiple regions, so your personal data may be transferred outside the EEA or the UK.

Where it is, the transfer is covered by an adequacy decision for the destination country, or by the European Commission's Standard Contractual Clauses (with the UK Addendum where the UK GDPR applies), together with the technical and organisational measures our Privacy Policy describes. You may request a copy of the safeguards applying to a specific transfer at contact@proxies.fo.

We engage third parties to host our infrastructure and network capacity, take payment, deliver email and run support. Each is bound by a written agreement no less protective than this page and our Privacy Policy, and processes data only on our instructions.

Write to contact@proxies.fo for the list of subprocessors currently in force.

Where a breach of security leads to the accidental or unlawful destruction, loss, alteration or unauthorised disclosure of personal data, we notify the competent supervisory authority within 72 hours of becoming aware of it, unless the breach is unlikely to result in a risk to you.

Where the risk to you is high, we notify you directly and without undue delay, and tell you what happened, what we are doing about it and what you should do. Where we act as your processor, we notify you rather than the authority, so that you can meet your own obligations.

If you are unhappy with how we have handled your personal data, tell us first at contact@proxies.fo — we would rather fix it than have you take it elsewhere unresolved.

You also have the right to complain to a supervisory authority, either in the country where you live or work, or where the alleged infringement took place. Exercising that right does not require you to come to us first.

Please send data protection requests, and any question about this page, by email: contact@proxies.fo.