Personal Data Processing Consent
Last updated: October 2026
By ticking the consent box at checkout, submitting forms on the website or otherwise providing their data, the user (personal data subject), acting freely, by their own will and in their own interest, gives specific, subject-matter, informed, conscious and unambiguous consent to the processing of their personal data on the terms set out below, in accordance with Art. 9 of Federal Law No. 152-FZ of 27.07.2006 "On Personal Data".
1. Data controller (operator)
The operator is GPT FINANCE - PAYMENT SERVICES PROVIDER EST. (INN 9909643654 | KPP 772587001; address: Ontario Tower, Business Bay, office C1804-99, Dubai, UAE), providing services under the SotaVPS designation. Personal data contact: support@sotavps.com.
2. Personal data covered
Consent is given to the processing of: • email address; • IP address, browser and device information, cookies; • order details: selected plan, payment method, payment identifier, payment status, selected operating system; • support requests: name, subject, message text. Bank card details (number, expiry date, verification code) are not transferred to or processed by the operator: they are entered and stored by a PCI DSS-compliant payment service.
3. Purposes of processing
• conclusion and performance of the virtual server rental agreement, including creating credentials and emailing access details and the unique server ID; • processing payments, recurring charges and refunds; • handling support requests, including refund requests; • sending service notifications (operational, not promotional); • security, fraud and abuse prevention (including per-IP rate limiting); • compliance with applicable law, including accounting and tax requirements.
4. Processing operations
Consent is given to the following operations, with or without automation: collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (provision, access), cross-border transfer, depersonalization, blocking, deletion and destruction of personal data.
5. Transfer to third parties and cross-border transfer
To achieve the processing purposes, data may be transferred to: • the payment service — to the extent necessary for payments, recurring charges and refunds (email address, payment identifier); • hosting and infrastructure providers operating the website and servers; • the operator's own service notifications of limited scope (email, plan, IP address) delivered via the Telegram Bot API. Data may be stored and processed on servers located outside the user's country; cross-border transfer is performed in compliance with Art. 12 of Federal Law No. 152-FZ. Personal data is not sold or transferred to other third parties except as required by law (including requests of authorized state bodies).
6. Processing and retention periods
Data is processed until the purposes are achieved: account and order information — for the service period and up to 3 years after termination; payment records — for the periods required by accounting legislation; security logs — up to 12 months. Upon expiry, data is destroyed or depersonalized.
7. Withdrawal of consent
Consent may be withdrawn at any time by emailing support@sotavps.com with the subject "Withdrawal of personal data processing consent" from, or specifying, the address the consent was given for. The operator stops processing and destroys the data within 30 days of receiving the withdrawal, except for data it must retain by law. Withdrawal does not affect the lawfulness of processing carried out before it. Withdrawal may make further provision of services impossible.
8. Rights of the data subject
Under Art. 14 of Federal Law No. 152-FZ the subject may: obtain information about the processing of their personal data; demand clarification, blocking or destruction of data that is incomplete, outdated, inaccurate, unlawfully obtained or unnecessary for the stated purpose; appeal the operator's actions or omissions to the authorized personal data protection body (in the Russian Federation — Roskomnadzor) or in court.
9. Cookies
The website uses strictly necessary technical cookies required for its operation. The user may restrict or disable cookies in browser settings; some website features may then work incorrectly.
10. Final provisions
The consent is effective from the moment it is given until withdrawn or until the retention periods in section 6 expire. The current version of this document is permanently available on this page. Additional information about data processing is provided in the Privacy Policy.
Personal data enquiries: support@sotavps.com