Privacy Policy (GDPR)

1. Data Controller

This Privacy Policy outlines how the service provider EOFH Development (operated by a private individual / non-incorporated service provider, email: info@eofh.ee) collects and processes personal data in accordance with the EU General Data Protection Regulation (GDPR 2016/679) and the Estonian Personal Data Protection Act.

2. Personal Data We Collect

We process only data necessary to deliver services, ensure network security, and provide technical support:

• Identity Data: Username, Discord ID, and avatar hash (retrieved via public Discord API);
• Contact & Billing Data: Email address, payment identifiers (transaction IDs, invoices);
• Technical Data: IP address, access logs, browser headers, cookies (language preferences);
• Support Data: Communications and support ticket data submitted in Discord.

3. Purposes & Legal Basis for Processing

Data processing is conducted under GDPR Article 6(1):

• Performance of Contract (Art 6(1)(b)): Hosting FiveM servers, bot management, and support ticket resolution;
• Legal Obligation (Art 6(1)(c)): Compliance with tax and statutory accounting laws under Estonian law;
• Legitimate Interests (Art 6(1)(f)): Protecting server infrastructure, mitigating DDoS attacks, and system maintenance.

4. Data Security & Retention

We apply robust technical and organizational security controls (SSL/TLS encryption, firewalls, strict access controls):

• Server access logs are retained for security audit purposes for up to 90 days;
• Accounting and billing records are stored for 7 years as required by Estonian law;
• Account data is retained for the duration of service provision and erased upon request.

5. Third-Party Data Transfers

EOFH does not sell or rent personal data. Data is shared exclusively with verified data processors (such as payment gateways PayPal/bank links and data center operators) strictly to the extent necessary to deliver the service.

6. Your Data Rights (GDPR)

Under the GDPR, you have the right to:

• Request access to your personal data and obtain a copy;
• Request rectification of inaccurate personal data;
• Request erasure ("Right to be forgotten");
• Lodge a complaint with the Estonian Data Protection Inspectorate (AKI, info@aki.ee, www.aki.ee) or your local EU supervisory authority.

7. Contact Us

For any privacy inquiries or to exercise your GDPR rights, please contact us at: info@eofh.ee or open a ticket in our official Discord server.