ISO 27001
certified data centres
Data centre
Where your data actually lives.
Who has access, how the power supply is secured, which law applies – all the key facts about your server location. Your servers are housed in an ISO 27001-certified data centre in Germany: German infrastructure, German law, German contracting party.
BSI C5
Type 2 attestation
N+1
redundant power & cooling
DE
location & law
Location and certification
Your server location in Germany.
Your web and cloud server infrastructure is housed in a data centre in Germany. It is certified to ISO/IEC 27001:2022 and has a BSI C5 Type 2 attestation; the operator is also classified by the BSI as KRITIS (critical infrastructure). The data centre offers redundant supply paths for power and cooling, so that maintenance is possible during ongoing operation.
The location is in Germany and is fully subject to German and European data protection law (GDPR, BDSG, TKG). There is no CLOUD Act risk, because neither the server hardware nor the operator falls under US jurisdiction.
The most important key facts
What your server location specifically offers.
| Location | Germany |
|---|---|
| Certification | ISO/IEC 27001:2022, BSI C5 Type 2 attestation, KRITIS (§8a BSIG) |
| Power supply | Redundant power and network connection with uninterruptible supply |
| Cooling | Redundant precision cooling with cold/hot aisle separation and temperature monitoring |
| Network connection | Redundant via several independent upstream providers |
| Fire protection | Early fire detection and automatic extinguishing technology |
| Access control | Multi-stage access control with video surveillance and documented entry |
| Backups | Web hosting: daily, on the server and off-site – we restore free of charge. Cloud servers with the backup option: daily snapshot, weekly off-site |
| Data protection | GDPR-compliant, data processing under Art. 28 GDPR available |
| Maintenance window | Daily 00:00–02:00 for updates and necessary restarts, announced on the status page |
In practice
What “servers in Germany” specifically means.
Low latencyTypically 5–25 ms to German end customers, depending on the visitor’s connection.
German & EU lawNo conflict with US authority access, no unwarranted transfer to third countries.
Data processingA DPA under Art. 28 GDPR incl. TOMs – concluded directly in the customer center.
Green electricityOperation with certified green power – a German data centre with EMAS environmental certification.
Operated around the clockThe data centre is operated and monitored 24/7; our team in Osnabrück is available to you on working days.
Backups on separate storageBesides the copy on the server, every web hosting backup is also stored on a separate storage system.
Frequent questions
The data centre – briefly explained.
Can I tour the data centre?
We cannot freely promise a tour of the data centre – access is subject to the location’s strict security requirements. For compliance questions we instead provide you with the relevant documents (e.g. certificates, DPA).
Do I get a data processing agreement (DPA)?
Yes. You conclude the GDPR-compliant DPA incl. technical and organisational measures (TOMs) directly in the customer center and save it there as a PDF.
What availability do you guarantee contractually?
In our terms and conditions we commit to 99.9 % availability per calendar month, measured at the checkpoints of our status page. If it falls below that, you receive a credit on the monthly price on request. Planned work in the daily maintenance window (00:00–02:00) counts as maintenance, not as an outage.
Are the servers really in Germany?
Actually physically in Germany, with the German operator, with a German contracting party. No US hyperscaler in a “Frankfurt region”.
What happens during a regional power outage?
The data centre is operated and monitored around the clock and has an uninterruptible power supply as well as emergency power. If the power fails regionally, operation therefore continues.
Where are backups stored?
Web hosting backups run twice every night: on the server itself and additionally, encrypted, on a separate storage system. Cloud servers are additionally backed up in full once a week to separate storage, on top of the snapshots. A further copy at another location is available as an individual quote.
Compliance questions?
Documents for auditors & data protection officers.
For sectors with heightened requirements (tax advisers, healthcare professionals, law firms, ISO-certified companies) we compile a DPA with a TOM annex, data-flow documentation and, where relevant, a sub-processor list.
All hosting data stays exclusively in Germany.+49 (0) 541 – 93 93 90 19Personally available
kontakt@promedia24.deA reply the next working day