New on the WhiteboardPerimeter Security Design for Data Centers: Fences, Barriers, and Bollards→ The WhiteboardWrite for us
All In Data CenterAll In Data CenterCenter of the ecosystem
Contact Sign In / Register →
GDPR Compliant EU / EEA Visitors

GDPR — Your Data Rights.

How we comply with the General Data Protection Regulation.

The General Data Protection Regulation (GDPR) is the European Union's data protection law, in effect since 25 May 2018. It gives individuals in the EU and EEA strong rights over their personal data and requires organisations to handle that data lawfully, fairly and transparently. This page explains your rights under GDPR and how All In Data Center supports them. It supplements — but does not replace — our Privacy Policy.

Effective date: August 2026
Overview

What is GDPR?

A regulation built around the individual.

GDPR (Regulation EU 2016/679) is one of the world's most comprehensive data protection frameworks. It applies whenever personal data — any information that can identify a living person — is collected or processed in relation to individuals located in the EU or EEA, regardless of where the organisation handling the data is based.

For All In Data Center, this means the rights and protections described here apply to visitors and users in the EU and EEA. We extend the same standards of transparency, fairness and security to all users where reasonably possible.

Your rights

Your rights under GDPR.

GDPR gives you eight fundamental rights regarding your personal data. Open each right to read the full detail.

You have the right to know what personal data is collected about you, why it is collected, who it is shared with, and how long it is kept. This information is set out in our Privacy Policy and Cookie Policy.

You have the right to request a copy of the personal data we hold about you and to confirm that it is being processed lawfully. We will respond to such requests within one calendar month, in line with GDPR Article 15.

If any personal data we hold about you is inaccurate, incomplete or out of date, you can request that we correct or update it. We will action reasonable rectification requests promptly.

In certain circumstances — including when data is no longer needed for its original purpose, when you withdraw consent, or when processing is unlawful — you can request the deletion of your personal data. Some data may need to be retained where we are legally required to do so.

You can ask us to limit how we process your data, for example while we verify its accuracy or while we investigate an objection you have raised. During restriction, your data is stored but not actively processed.

Where processing is based on consent or contract and is carried out by automated means, you have the right to receive the personal data you have provided in a structured, commonly used and machine-readable format, and to transmit it to another controller.

You can object to certain types of processing — including processing based on legitimate interests, direct marketing, or processing for research and statistical purposes. Where you object to direct marketing, we will stop such processing immediately.

You have the right not to be subject to decisions based solely on automated processing — including profiling — that produce legal or similarly significant effects on you. All In Data Center does not currently use automated decision-making of this kind.

Article 6

Legal bases for processing.

GDPR Article 6 sets out six lawful bases for processing personal data. We rely on one or more of the following, depending on the activity.

Consent

When you actively provide your information — for example through a contact form, newsletter sign-up or cookie banner.

Contract

Where processing is necessary to fulfil a contract you are party to, or to take steps at your request before entering into one.

Legal obligation

Where we must process data to comply with applicable law — for example tax, accounting or record-keeping requirements.

Vital interests

Where processing is necessary to protect someone's life or physical safety. Rarely applicable to a publishing platform like ours.

Public task

Where processing is in the public interest or in the exercise of official authority. This basis is rarely used by private publishers.

Legitimate interests

Where we have a clear, balanced interest — such as running the website securely, preventing fraud, or improving user experience — provided your rights are not overridden.

Our commitments

Our commitments to you.

Lawful processing

We process data only where a valid legal basis under GDPR Article 6 applies.

Transparency

We tell you, in plain language, what we collect, why we collect it, and how long we keep it.

Security

We apply reasonable technical and organisational measures to protect your data.

User control

You can exercise your GDPR rights at any time by contacting us with a written request.

In practice

Compliance details.

Specific operational details on how we apply GDPR principles in practice.

Who is the data controller?

For the purposes of the GDPR, the Data Controller responsible for personal data collected through this website is All In Data Center, operated by Ziya Demir — Bahnhofstraße 20, 85609 Aschheim-Dornach, Munich, Germany (email info@allindatacenter.com). The Controller decides the purposes and means of processing.

We do not currently operate a formal Data Protection Officer (DPO) role, as the scale and nature of our processing does not require one under GDPR Article 37. However, all data protection enquiries are handled directly by our team and can be raised at any time.

For all GDPR enquiries, contact: info@allindatacenter.com

International data transfers.

Some service providers we use — such as hosting, analytics, email delivery, or CDN services — may store or process data outside the European Economic Area (EEA), including in the United States or other countries.

Where international transfers occur, we rely on recognised GDPR safeguards, including:

  • Adequacy decisions — transfers to countries that the European Commission has confirmed offer an adequate level of protection.
  • Standard Contractual Clauses (SCCs) — pre-approved contractual terms ensuring equivalent protection.
  • EU–US Data Privacy Framework — for certified US providers, where applicable.

We choose service providers with care and review their data protection practices where reasonably possible.

Data breach notification procedure.

In the unlikely event of a personal data breach, All In Data Center follows the notification procedure required by GDPR Articles 33 and 34:

  • The breach is assessed promptly to determine its scope, nature and risk level.
  • Where a breach is likely to result in a risk to individuals' rights and freedoms, the relevant supervisory authority will be notified within 72 hours of becoming aware of it.
  • Where a breach is likely to result in a high risk, affected individuals will be informed directly and without undue delay.
  • Internal records are kept of all breaches, regardless of whether external notification is required.

If you believe a breach involving your personal data may have occurred, please contact us immediately so we can investigate.

Exercise your rights

How to exercise your rights.

You can exercise any of the GDPR rights described above by following these four steps.

1

Send a written request

Email info@allindatacenter.com clearly stating which right you wish to exercise.

2

Verify your identity

We may ask for reasonable verification to confirm the request is from you, protecting your data from unauthorised access.

3

We review & respond

We assess your request and respond within one calendar month, as required by GDPR Article 12(3).

4

Action or explanation

We either action your request, or explain in writing why we cannot — including your right to complain to a supervisory authority.

GDPR enquiries

Exercise your rights, ask questions, or request information.

info@allindatacenter.com

Supervisory authority

You also have the right to lodge a complaint with your local EU data protection authority.

Find your local authority