Legal

Data Protection

GDPR and Compliance

GalaxyNode adheres to GDPR and maintains records of processing activities with an appointed Data Protection Officer (DPO).

Security Measures

  • Encryption at rest and in transit with AES-256 and TLS 1.2+.
  • Access controls with role-based permissions and MFA for staff.
  • Network security via firewalls, IDS/IPS, and DDoS mitigation.
  • Physical security in Tier III data centers with 24/7 monitoring.

Retention and Deletion

Personal data is retained only as needed and deleted within 30 days of account closure.

Incident Response

Our Incident Response Team notifies affected stakeholders within 72 hours of breach detection.

International Transfers

Data transfers outside the EEA use Standard Contractual Clauses or rely on adequacy decisions.

Contact

For data protection inquiries, please email [email protected].