This policy explains what personal data NeverIX Velbert processes, why, and what rights you have under the EU General Data Protection Regulation (GDPR).
01Who we are
NeverIX Velbert is operated by Austin Hadley, Sole Proprietorship (Business Tax ID 92-0839915), which is the controller of the personal data described here. Contact for all privacy matters: noc@neverix.net.
02Data we process
- Member and contact data: names, email addresses and roles of member contacts, ASN, AS-SET and company details you provide.
- Portal accounts: username, email, password hash, two-factor authentication data, and login records.
- Network data: port and traffic counters, latency measurements, BGP session state and routes announced to our route servers and collector.
- Server logs: IP address, time, requested page and user agent when you visit this website or the portal.
- Email: the content and metadata of messages you send us.
03Why we process it
- To provide and secure the exchange and the member portal (performance of our agreement with members, Art. 6(1)(b) GDPR).
- To operate, monitor and troubleshoot the network and prevent abuse (legitimate interest, Art. 6(1)(f) GDPR).
- To comply with legal obligations (Art. 6(1)(c) GDPR).
04What is public
As at most Internet exchanges, some member information is published: network name, ASN, peering policy, peering addresses, port speed, aggregate traffic graphs, and the routes visible in the looking glass and peering matrix. Personal contact details are never published.
05Cookies
This website does not use cookies or trackers. The member portal uses only the cookies strictly needed for login sessions and security (for example CSRF protection).
06Who we share it with
- We do not sell personal data.
- Email to @neverix.net addresses is hosted by Apple (iCloud Mail).
- DNS for neverix.net is provided by bunny.net.
- All other services (website, portal, route servers, monitoring) run on our own infrastructure in Germany.
- We may disclose data where legally required.
07Retention
Member and contact data is kept for the duration of membership and deleted or anonymised within 12 months after it ends, unless we must keep it longer by law. Server logs are kept for a limited period for security and troubleshooting. Aggregated traffic statistics may be kept indefinitely.
08Your rights
You have the right to access, rectify, erase or restrict processing of your personal data, to data portability, and to object to processing based on legitimate interest. To exercise these rights, email noc@neverix.net. You also have the right to lodge a complaint with a data protection supervisory authority.
09Changes
We may update this policy. The current version is always published on this page, with the date of the last change.