Privacy Policy
- Controller Information and Contact Details
Filip Pavel (doing business as: Phrixboosting), located at Stockerauer-strasse 4D, Hausleiten 3464, Austria ("Controller," "we," "us," or "our") is the data controller responsible for the processing of your personal data in accordance with the General Data Protection Regulation (GDPR) and Austrian Data Protection Act (DSG).
For any questions regarding data protection or to exercise your rights, you can contact us at:
Email: support@phrixboosting.com
Postal Address: Stockerauer-strasse 4D, Hausleiten 3464, Austria
- Legal Basis for Data Processing
We process personal data exclusively in accordance with applicable legal regulations, particularly:
- EU General Data Protection Regulation (GDPR)
- Austrian Data Protection Act (Datenschutzgesetz - DSG)
- Austrian Telecommunications Act 2021 (TKG 2021)
- Austrian Consumer Protection Code
Our data processing is based on the following legal grounds under Article 6 GDPR:
Contract performance (Art. 6(1)(b) GDPR) - for providing our game boosting services
Legitimate interests (Art. 6(1)(f) GDPR) - for business operations and fraud prevention
Your consent (Art. 6(1)(a) GDPR) - for marketing communications and optional features
Legal obligation (Art. 6(1)(c) GDPR) - for tax and accounting requirements
- Personal Data We Collect
- Data You Provide Directly
Account Information: Name, email address, username, password, date of birth
Payment Information: Billing address, payment method details (processed by third-party payment processors)
Gaming Account Details: Gaming platform usernames, account credentials (temporarily for service delivery)
Communication Data: Messages, support tickets, feedback, and correspondence with our team
- Data Collected Automatically
Technical Data: IP address, browser type, device information, operating system
Usage Data: Pages visited, time spent on site, clickstream data, session recordings
Service Data: Order history, service preferences, completion status, performance metrics
- Data from Third Parties
Payment processors may provide transaction confirmation and fraud prevention data
Gaming platforms may provide account status and verification information
Social media platforms if you choose to connect your accounts
- Data You Provide Directly
- Purposes of Data Processing
- Service Provision
Creating and managing your account on our platform
Processing orders and delivering game boosting services
Providing customer support and responding to inquiries
Managing cashback rewards and loyalty programs
- Business Operations
Processing payments and managing billing
Preventing fraud and ensuring security
Analyzing service performance and user satisfaction
Complying with legal and regulatory requirements
- Marketing and Communications
Sending service updates and important notifications
Marketing communications (with your consent)
Personalizing your experience on our platform
- Service Provision
- Data Sharing and Recipients
- Third-Party Service Providers
Payment processors for handling transactions securely
Cloud hosting providers for data storage and website functionality
Customer support tools and communication platforms
Analytics providers for understanding website usage
- Legal Requirements
Austrian tax authorities for VAT and income tax compliance
Law enforcement agencies when required by law
Legal advisors in case of disputes or legal proceedings
- Business Transfers
In case of merger, acquisition, or sale of business assets, your data may be transferred to the new entity
- Third-Party Service Providers
- International Data Transfers
Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your personal data to countries outside the EEA, we ensure adequate protection through:
European Commission adequacy decisions
Standard Contractual Clauses approved by the European Commission
Binding Corporate Rules or certification schemes
Your explicit consent for specific transfers
- Data Retention Periods
- Account Data
Customer account information is retained for 3 years after account closure or last activity
- Transaction Data
Payment and order records are retained for 7 years to comply with Austrian tax and accounting laws
- Communication Data
Support tickets and correspondence are retained for 2 years after resolution
- Technical Data
Website analytics and technical logs are retained for 12 months
- Marketing Data
Marketing consents and preferences are retained until withdrawn or for 3 years of inactivity
- Account Data
- Your Rights Under GDPR
- Right of Access (Art. 15 GDPR)
You have the right to obtain confirmation whether we process your personal data and receive a copy of your data
- Right to Rectification (Art. 16 GDPR)
You can request correction of inaccurate or incomplete personal data
- Right to Erasure (Art. 17 GDPR)
You can request deletion of your personal data under certain circumstances
- Right to Restriction (Art. 18 GDPR)
You can request limitation of processing in specific situations
- Right to Data Portability (Art. 20 GDPR)
You can receive your data in a structured, machine-readable format
- Right to Object (Art. 21 GDPR)
You can object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent
You can withdraw consent at any time where processing is based on consent
- Right of Access (Art. 15 GDPR)
- Cookies and Tracking Technologies
- Essential Cookies
Necessary for website functionality, user authentication, and security
- Analytics Cookies
Help us understand how visitors use our website to improve user experience
- Marketing Cookies
Used for personalized advertising and tracking campaign effectiveness (with consent)
- Cookie Management
You can manage cookie preferences through your browser settings or our cookie banner
Disabling certain cookies may affect website functionality
- Essential Cookies
- Data Security Measures
We implement appropriate technical and organizational measures to protect your personal data:
SSL/TLS encryption for data transmission
Secure data centers with physical access controls
Regular security assessments and vulnerability testing
Access controls and authentication systems
Employee training on data protection and security
Incident response procedures for data breaches
- Data Breach Notification
In case of a data breach that poses a high risk to your rights and freedoms, we will:
Notify the Austrian Data Protection Authority within 72 hours
Inform affected individuals without undue delay
Provide clear information about the breach and recommended actions
Implement immediate measures to contain and remedy the breach
- Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children under 18.
If we become aware that we have collected personal data from a child under 18 without parental consent, we will delete such information immediately.
Parents or guardians who believe their child has provided personal data should contact us immediately.
- Automated Decision-Making and Profiling
We may use automated systems for:
Fraud detection and prevention
Risk assessment for payment processing
Personalization of services and recommendations
You have the right not to be subject to decisions based solely on automated processing that produce legal effects or significantly affect you
- Third-Party Websites and Services
Our website may contain links to third-party websites or integrate with external services. This privacy policy does not apply to third-party websites.
We recommend reviewing the privacy policies of any third-party services you access through our platform.
We are not responsible for the privacy practices of third-party websites or services.
- Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements.
Material changes will be communicated through email or prominent notice on our website at least 30 days before taking effect.
Continued use of our services after changes constitute acceptance of the updated privacy policy.
The current version will always be available on our website with the effective date clearly marked.
- Contact Information and Complaints
For questions about this privacy policy or to exercise your rights, contact us at:
Filip Pavel (doing business as: Phrixboosting)
Stockerauer-strasse 4D
Hausleiten 3464
Austria
Email: support@phrixboosting.com
Response Time: We will respond to your requests within 30 days
You also have the right to lodge a complaint with the Austrian Data Protection Authority:
Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna, Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
- Effective Date and Version
This Privacy Policy is effective as of August 01, 2025.
Version: 1.0
Last Updated: August 01, 2025
This privacy policy complies with the requirements of the GDPR and Austrian data protection laws.