Privacy Policy
Last updated: November 01, 2026
Via-Registry (operated by VIRTUA SYSTEMS SAS) is committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and French data protection laws.
Overview
Data Controller
VIRTUA SYSTEMS SAS
49 rue de Ponthieu, 75008 Paris, France
RCS Paris: 810 613 638
Contact us
Purpose of This Policy
This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our ASN registration and IP resource management services.
What Data We Collect
2.1. Account Information
- Full legal name or company name
- Email address
- Phone number
- Postal address
- Company registration details (for business accounts)
2.2. Identity Verification Data
- Government-issued ID documents (passport, national ID card)
- Verification selfies (processed by our third-party verification provider)
- Date of birth
2.3. Technical Information
- Network information (ASN, IP blocks, routing details)
- BGP peering information
- Technical contact details
2.4. Payment Information
- Billing address
- Payment method details (processed securely by Stripe)
- Transaction history
2.5. Usage Data
- Login timestamps and IP addresses
- Presales chat conversations, with IP address and browser information, kept 90 days for abuse prevention
- Support ticket communications
- Service usage patterns
2.6. Registry Data of Resource Holders
We monitor the public RIPE Database for Internet number resources (AS numbers, IPv4 and IPv6 assignments) whose sponsoring LIR relationship has ended, so that we can offer sponsorship to their holders.
- Source: the RIPE Database published by the RIPE NCC (organisation name, handle, country, resources, maintainer references, and on request the published contact e-mail).
- Legal basis: our legitimate interest in offering sponsoring LIR services to holders who need one.
- Retention: contact details are deleted 90 days after we record the case if we never contact you, 30 days after the case closes otherwise; the case itself is reduced to registry identifiers after one year.
- You have the right to object at any time by writing to support@via-registry.com; we then delete your contact details and never contact you again.
2.7. Sanctions Screening
When an organisation asks us to sponsor Internet number resources it already holds, we screen the organisation, the representatives named in its public register extract and the person who completed identity verification against the EU, UN, UK, US and Swiss sanctions lists.
- Legal basis: compliance with the sanctions regulations that bind us as a RIPE NCC member; the representatives' names come from a public register, and this policy is their information notice.
- The names are matched locally against the official list files; a possible match is reviewed by a person before any decision, and the record is kept with the sponsorship file.
How We Use Your Data
We process your personal data for the following purposes:
Service Provision (Contract Performance)
- Processing ASN registrations and IP resource allocations
- Managing your account and services
- Communicating about your services
- Processing payments and billing
Legal Compliance
- RIPE NCC due diligence requirements
- Identity verification (KYC)
- Publishing WHOIS data (RIPE policy requirement)
- Tax and accounting obligations
- Responding to legal requests
Legitimate Interests
- Fraud prevention and security
- Abuse monitoring and prevention
- Service improvement
- Business analytics
AI Registration Assistant (Contract Performance)
- If you opt in to our AI assistant, your conversation (including the registration details you discuss) is processed by an AI system to guide you through the registration
- Conversations are processed on our behalf by Anthropic (see section 4.1) and are not used to train AI models
- The assistant is optional: the classic forms provide the same service without it
- Conversation transcripts are stored with your registration file and reviewed by our team for quality
- Registration files are checked automatically against RIPE NCC requirements before submission; you can request a human review of any outcome at any time via support@via-registry.com
- The pre-sales chat on our public pages and inside the ASN order pages is also AI-processed (via Anthropic) and optional; conversations are not linked to any account, we record your IP address and browser information for abuse prevention, your email is stored only if you ask for a follow-up, and chat data is deleted after 90 days
Data Sharing and Transfers
IMPORTANT: Public WHOIS Data
Your registration data (name, address, email) will be published in the RIPE database and made publicly available on the internet. This is a mandatory requirement for internet resource registration.
4.1. Third-Party Service Providers
- RIPE NCC: Required for resource allocation and management
- Stripe: Payment processing (PCI-compliant)
- Identity Verification Provider: KYC compliance
- Email Service Providers: Service communications
- Anthropic: AI processing for our registration assistant and automated review of registration files (registration documents, signed agreements, supporting invoices and the organization and peering details you submit; US provider; transfers safeguarded under GDPR Chapter V; documents are not used to train their models)
- OpenAI: Automated reading of registration documents (US provider; transfers safeguarded under GDPR Chapter V; documents are not used to train their models)
4.2. Legal Disclosures
We may disclose your data when required by law, court order, or to protect our legal rights.
4.3. Data Retention
- Account data: Retained while your account is active plus 7 years for legal compliance
- Financial records: 10 years (tax law requirement)
- Identity verification: 5 years after account closure
- Support communications: 3 years
Your Rights Under GDPR
You have the following rights regarding your personal data:
Right to Access
Request a copy of your personal data we hold
Right to Rectification
Correct inaccurate or incomplete data
Right to Erasure
Request deletion of your data (subject to legal retention requirements)
Right to Data Portability
Receive your data in a structured, machine-readable format
Right to Object
Object to processing based on legitimate interests
Right to Lodge a Complaint
File a complaint with the French Data Protection Authority (CNIL)
To exercise your rights: Contact us. We will respond within 30 days.
Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- Encryption in transit (TLS/SSL)
- Encryption at rest for sensitive data
- Regular security audits
- Access controls and authentication
- Staff training on data protection
- Incident response procedures
Data Breach Notification: In the event of a data breach affecting your rights, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.
Contact Us
For any questions about this Privacy Policy or to exercise your rights, please contact us:
VIRTUA SYSTEMS SAS
Website: https://www.via-registry.com
Questions? Ask the AI assistant. It answers most questions instantly. Contact form.
You also have the right to lodge a complaint with the French Data Protection Authority (CNIL): www.cnil.fr
Questions about your data?
Contact our support team for any privacy-related inquiries.
Contact Support