Privacy notice
How we use information for your account and domains.
Updated: 16 October 2026
Configurix Limited
Configurix Limited · Company number 808025 · 2A Lower Main Street, Lucan, Co. Dublin, K78 X5P8, Ireland. Telephone: +353 83 396 1730. Trading as atdomain.at. Registered with the Companies Registration Office, Ireland. Contact and complaints: support@atdomain.at. Postal address as above.
Controller and contact
Configurix Limited, at the address above, is the controller. Send privacy requests to support@atdomain.at. We request only information necessary to identify you securely and handle the request.
Accounts, orders and registration
We process names, email addresses, secured password hashes, sessions, contact, billing and domain-holder details, selected domains, order/payment references, consent with document versions, and registration/renewal information. This is necessary for steps before a contract and its performance (GDPR Article 6(1)(b)). Required accounting, consumer and registration records are processed to meet legal obligations (Article 6(1)(c)). We cannot register a domain without the necessary account, contact and holder information. Supply another holder's information only with appropriate authority.
Payments and recipients
Card numbers and CVCs go directly to Stripe through secure Stripe fields and are not stored on our server. We receive payment references and status. Necessary information is shared with payment, hosting/security, transactional/support email, domain-registration and DNS service providers. The relevant registry receives required holder details and may verify them under its rules. Legal-entity information may appear in public Whois. DNS records and delegated nameservers are technically public. Professional advisers, authorities and courts receive information only when necessary or legally required. Providers may act as independent controllers for their own legal duties.
Security, correspondence and international processing
We process necessary technical information such as IP addresses, timestamps, requested URLs and delivery status for access security, abuse prevention, troubleshooting and legal claims, based on legitimate interests (GDPR Article 6(1)(f)). Support and withdrawal correspondence serves contract administration and legal obligations. Verification, reset and security messages are not marketing. Some providers process information outside the EEA. Where required, transfers rely on an adequacy decision or appropriate safeguards such as EU standard contractual clauses. Contact us for information and copies of applicable safeguards.
Retention and deletion
Account information is needed while your account or managed domains remain active. You may request account closure and erasure; this does not automatically terminate registration contracts or remove legally required records. We normally retain order, contract, accounting and withdrawal records for six years after the relevant financial year, longer where an unresolved claim or law requires it. Support enquiries unrelated to a contract are normally reviewed two years after closure and erased if no further purpose remains. Sessions last no more than 30 days, reset links 30 minutes and verification links 24 hours. Expired credentials become invalid; encrypted outgoing message contents are cleared following successful handoff. Necessary delivery evidence and separate contract records may remain longer. Technical logs follow the hosting platform's limited retention settings and are not used for advertising. Support handles erasure and applicable statutory exceptions.
Cookies and browser storage
An essential protected session cookie keeps you signed in. The basket stores domain names locally until you clear it or your browser storage. Stripe uses technical functions necessary for card payments and fraud prevention. We do not deploy our own advertising or analytics trackers or sell customer data. Prices are not personalised. Payment providers may run automated security checks; contact us for manual assistance if a problem occurs.
Your rights
Subject to the GDPR, you may request access, correction, erasure, restriction, portability and object to processing based on legitimate interests. Consent can be withdrawn for the future. We normally respond within one month and explain any necessary extension within that period. You may complain to a competent supervisory authority, including Ireland's Data Protection Commission (https://www.dataprotection.ie) or the authority where you normally live. These rights apply whether or not you purchase.