Legal

AUP

Acceptable Use Policy

As of: 14 September 2026

This English version is provided for convenience. Only the German version is legally binding.

This Acceptable Use Policy ("AUP") forms part of our GTC. It describes how our services may be used, how we handle notices of illegal content and which measures we take in the event of violations. It also contains the information on restrictions, procedures and redress required under Art. 14 of Regulation (EU) 2022/2065 (Digital Services Act, "DSA").

1. Scope

This AUP applies to all services of gh0stservice GmbH, in particular gh0stcloud Self-Service and Managed Packages. It applies to our customers and to all persons to whom a customer grants access to our services or to applications operated on them. The customer remains responsible for their actions.

2. Permitted use

Our services may be used for all lawful private and business purposes, in particular for operating websites, applications, interfaces and databases, for development and testing, and for storing and processing lawful data. Security testing of your own applications and resources is permitted; testing of our platform or of other customers' applications is permitted only in accordance with our vulnerability disclosure policy.

3. Prohibited use

The following in particular is not permitted:

storing, distributing or making available child sexual abuse material, terrorist content, content that incites violence or hatred and is punishable under applicable law, and other illegal content
infringing copyrights, trademark rights, personality rights, data protection rights or other rights of third parties
phishing, fraud, identity theft or misleading business models
operating, distributing or controlling malware, botnets, ransomware or spyware
attacks on systems, networks or services, including denial-of-service attacks, port scans, brute-force attacks or unauthorised access attempts
sending spam or unsolicited bulk messages, and operating open mail relays or open proxies
unauthorised collection, processing or publication of personal data
cryptomining and comparable sustained high load without prior agreement with us
circumventing limits, security rules, billing mechanisms or tenant isolation
any use that violates sanctions, embargoes, export control regulations, or anti-money laundering or counter-terrorist financing regulations
any use that endangers the stability, security or integrity of our platform or of other customers' services

4. Customer responsibility

You are responsible for all content, data, applications and activities carried out via your account. You take appropriate security measures, keep access credentials secret and prevent misuse of your resources. If you yourself operate a service for third parties via our services, you are responsible for its lawfulness and for your own obligations as a provider.

5. No general monitoring

We do not generally monitor the content of your applications and do not actively search it for illegal content. We use automated means to detect attacks, misuse of network and resources, and security incidents. Decisions on content and on measures against customers are made by a human.

6. Notice procedure for illegal content

Anyone can notify us of content they consider illegal. The procedure and the required information are described on the page Reporting illegal content. We confirm receipt of a notice without undue delay, review it diligently, objectively and in a timely manner, and inform the notifying person of our decision and of the available redress options.

We are not required to pursue manifestly unfounded or abusive notices.

7. Measures in the event of violations

If we establish a violation of applicable law or of this AUP, or if a violation is sufficiently probable, we may act in a graduated and proportionate manner:

request for a statement or remedy within a reasonable period
blocking or removal of individual content or endpoints
restriction of resources or network access
temporary suspension of individual applications or of the account
extraordinary termination in the event of serious or repeated violations

In the event of acute security threats, serious infringements of the law or danger to third parties, we act without prior request. In each case, we choose the least restrictive effective measure.

8. Statement of reasons and redress

If we take a measure under clause 7, we inform the affected customer in text form no later than when the measure takes effect. The statement of reasons under Art. 17 DSA contains:

the type and scope of the measure and, where applicable, its duration
the facts and circumstances on which the decision is based, including whether it is based on a notice
whether automated means were used in the detection
the legal basis or the provision of this AUP that has been violated
the available redress options

You may object to a measure by email to abuse@gh0stservice.com and set out your view. We review the objection without undue delay and lift a measure if it proves to be unfounded. Independently of this, you may bring the matter before the ordinary courts or lodge a complaint with the Bundesnetzagentur (Federal Network Agency) as Digital Services Coordinator.

A statement of reasons is omitted only where a legal obligation or an official order requires this.

9. Criminal offences involving a threat to life or safety

If we become aware of information giving rise to a suspicion that a criminal offence involving a threat to the life or safety of one or more persons has taken place, is taking place or is likely to take place, we inform the competent law enforcement or judicial authorities without undue delay (Art. 18 DSA).

AUP