Last Revised: 2026-08-18 08:51

Domain Registration & Management Policy

(Domain Registration Policy)

Article 1: Object & Scope

1.1. This document defines the legal, operational, and technical terms governing the registration, renewal, transfer, DNS zone management, and deletion of Domain Names provided by Prootzos Online (hereinafter referred to as the "Provider").

1.2. This Policy forms an integral part of the Provider's unified regulatory framework and is incorporated by reference into the General Terms of Service (DOC-001). All terms used herein shall be strictly interpreted in accordance with the Common Definitions Registry (DOC-002).

1.3. The Provider operates strictly under a Remote-First Model, maintaining its registered tax seat and postal address at Karkavitsa 46, 27131, Pyrgos Ilia, Greece (VAT ID: EL 047648274, Tax Office: Pyrgos). All commercial transactions, management tasks, requests, and technical configurations are conducted exclusively through digital channels via the Client Area and the Controller.

Article 2: Provider Role & Regulatory Registry Framework

2.1. The Provider acts as an official reseller/partner registrar through accredited entities (Accredited Registrars, including Openprovider) and serves as an intermediary between the Client (hereinafter the "Registrant/Owner") and the respective Registries.

2.2. Domain name registration and management are directly and bindingly governed by the rules of the competent regulatory authorities and registries:

Domain Names under [.gr] and [.ελ]: Fully governed by the applicable Regulation on Management and Assignment of [.gr] Domain Names issued by the Hellenic Telecommunications and Post Commission (EETT).
Generic (gTLDs) and New Generic TLDs (nTLDs): Governed by ICANN policies, guidelines, and agreements (including UDRP, URS, Registrant Rights and Responsibilities, and the ICANN Transfer Policy).
Other Country Code TLDs (ccTLDs): Governed by the specific regulatory frameworks of the respective national registries (Registry Policies).

2.3. In the event of any conflict between the provisions of this Policy and the mandatory regulations of EETT or ICANN, the rules of the competent regulatory authority/registry shall prevail.

Article 3: Application Process & Service Activation

3.1. Applications for domain registration or renewal must be submitted exclusively online through the Client Area.

3.2. First-Come, First-Served Principle: Placing an order and settling the invoice within the Client Area does not constitute an automated or guaranteed assignment of the Domain Name. Assignment is concluded solely upon successful acceptance and final registration by the competent Registry.

3.3. Disclaimer for Intermediate Registrations: The Provider shall not be held liable if, during the time elapsed between order submission, payment confirmation, and data transmission to the Registry, the Domain Name is registered by a third party.

Article 4: Registrant Obligations, Warranties & Contact Data

4.1. Accuracy and Maintenance of Data: The Client warrants that all contact details for the Registrant, Administrative, Technical, and Billing contacts provided during order placement are complete, truthful, accurate, and up to date. Any changes must be updated without undue delay via the Client Area.

4.2. ICANN WHOIS Accuracy Program Verification: For gTLDs/nTLDs, the Client is obligated to verify their email address within fifteen (15) calendar days from receipt of the verification link. Failure to complete verification results in automatic suspension (ClientHold) by the Registry, without any right to compensation.

4.3. Warranty of Non-Infringement: The Client expressly declares and warrants that:

The selection and use of the Domain Name do not infringe upon any third-party intellectual, industrial, or commercial property rights (including trademarks, trade names, or registered business names).
The Domain Name is not registered or used for malicious, deceptive, or unlawful purposes (such as Cybersquatting, Typosquatting, Phishing, or malware distribution).
The Client assumes full and exclusive civil and criminal liability against any third-party claims or regulatory sanctions, indemnifying the Provider in full.

4.4. Security of Authorization Code (Auth-Code / EPP): The domain authorization code is strictly confidential. The Client bears sole responsibility for its secure storage and safeguarding.

Article 5: Domain Lifecycle, Renewals & Expiration

5.1. Expiration Notifications: The Provider issues automated expiration reminder notifications via email to the registered address in the Client Area at scheduled intervals before and on the expiration date.

5.2. Timely Payment Obligation: Renewals are processed exclusively upon verified settlement of the renewal invoice prior to the expiration date. The Provider bears no liability for domain loss resulting from late payment.

5.3. Domain Lifecycle Stages:

[Active Domain] ──> [Expiration Date] ──> [Grace Period] ──> [Redemption Period] ──> [Pending Delete] ──> [Available]

Active Status: The domain resolves normally and is served by the designated nameservers.
[.gr] / [.ελ] Grace Period (EETT Grace Period): Strictly set at fifteen (15) calendar days following expiration pursuant to EETT regulations. During this period, the domain ceases resolving on the internet but can be renewed at the standard renewal fee without extra surcharges.
gTLD / ccTLD Renewal Grace Period: Lasts between 0 and 45 days (depending on the specific TLD and Registry rules). Renewal is executed at standard renewal rates.
Redemption Grace Period / Quarantine: Following the expiration of the Grace Period for gTLDs and select ccTLDs, the domain is deleted from the zone. Restoration is possible exclusively through a formal restoration procedure, which incurs a mandatory Registry Restoration Fee and constitutes a Billable Professional Service (DOC-009).
Pending Delete / Release: The domain can no longer be restored and is permanently purged by the Registry, becoming available for public registration.

Article 6: Domain Transfers & Change of Registrant

6.1. Inbound Transfers: To initiate a domain transfer to the Provider, the Client must:

Ensure the domain is set to "Active / Unlocked" status at the losing registrar.
Disable any active privacy protection services (WHOIS Privacy / ID Protection).
Provide a valid Authorization Code (Auth-Code / EPP).
Ensure that at least sixty (60) days have elapsed since initial registration or prior transfer (for gTLDs pursuant to ICANN Transfer Policy).

6.2. Outbound Transfers: The Provider provides the Authorization Code (Auth-Code) directly via the Client Area without retention, provided there are no pending court orders or formal suspension directives from regulatory authorities (EETT / ICANN).

6.3. Change of Registrant & Transfer Lock (Trade Lock):

Any transfer of domain ownership or modification of registrant details is executed according to the official procedures of the competent Registry (e.g., EETT Assignment Declaration).
For generic top-level domains (gTLDs), modifying core registrant information (Name, Organization, Email) automatically triggers a 60-day Change of Registrant Transfer Lock under the ICANN Transfer Policy, unless the Registrant explicitly opts out during the email confirmation process.

Article 7: DNS Management, Limitations & Infrastructure Baseline

7.1. DNS Management Interfaces: Configuration of standard DNS records (A, AAAA, CNAME, MX, TXT, SRV) is managed:

Via the Client Area: For domains utilizing default registrar nameservers.
Via the Controller: For domains linked to active hosting packages and hosted on the Authoritative DNS servers of Prootzos Online.

7.2. Free DNS Service Eligibility Scope:

Free DNS hosting and zone management are provided exclusively for domain names actively registered with Prootzos Online or directly attached to an active hosting service (Shared Hosting, Managed VM, Managed Dedicated).
If a domain is transferred away or the associated hosting plan is terminated, the free DNS service is automatically discontinued.
Standalone DNS management without active core services is provided exclusively as a paid subscription service (Standalone DNS Plan).

7.3. DNS Limitations & SSL Validation:

Standard DNS services do not include DNSSEC, Anycast enterprise routing, or automated load-balancing failover profiles.
The Client bears sole responsibility for the syntax and accuracy of configured DNS records.
Automated Let's Encrypt SSL certificate issuance (DOC-012) requires that DNS A/AAAA records route exclusively to our server IP and that access to the /.well-known/acme-challenge/ directory is not blocked by external proxies, CDNs, or custom rewrite rules. Issuance failures caused by external DNS configurations do not constitute an infrastructure defect.

Article 8: Scope Creep Protection & Professional Services

8.1. Excluded Tasks (Core Support Baseline): The standard domain registration and DNS management service EXCLUDES:

Legal representation, dispute mediation, or submission of briefs to dispute resolution panels (EETT, WIPO, UDRP, Courts).
Configuration of external third-party nameservers.
Troubleshooting, syntax checking, or creation of custom external DNS records (custom SPF, complex TXT verification, DKIM/DMARC alignment) beyond standard automated platform defaults.

8.2. Billable Professional Services (DOC-009): The following services are provided exclusively under separate billable agreements:

Domain Restoration from Redemption / Quarantine: Technical registry restoration management.
DNSSEC & Advanced DNS Engineering: Deployment of DS records, DNSSEC keys, and custom DNS failover routing.
Bulk Zone Migration: Importing and auditing multiple DNS zones from external control panels.
Professional Consulting / Mail Deliverability Support: Deliverability audits and RBL blacklist removal resulting from Client actions.

Article 9: Financial Terms, Cancellations, Upgrades & Account Credits

9.1. Non-Refundable Fees & Waiver of Statutory Right of Withdrawal:

Domain registration, renewal, transfer, and restoration fees are disbursed immediately and upfront to the relevant Registries.
The Client (including when acting as a consumer) expressly acknowledges and agrees that order submission constitutes immediate performance of the contract and unconditionally waives the statutory 14-day right of withdrawal (pursuant to Article 3ib of Greek Law 2251/1994 and EU Directive 2011/83/EU).
Once an order has been submitted to the Registry, no refunds shall be granted and no cancellations shall be accepted.

9.2. Account Credit Policy (DOC-011):

The Provider does not issue cash, card, or bank refunds.
In the event of a technical rejection by the Registry (e.g., prior registration by a third party), the amount paid shall be credited exclusively as an Account Credit in the Client Area for future use.

9.3. Service Upgrades & Prorated Billing: When adding optional add-ons (such as ID Protection) or upgrading linked hosting packages via the Client Area during an active billing cycle, automated prorated billing (Prorata) applies. The Client is invoiced solely for the price difference corresponding to the remaining period until the next regular renewal date.

9.4. Promotional Pricing & Subsequent Renewal Cycles: Any promotional discount, introductory price, or coupon code applied to an initial registration or transfer applies strictly to the first (1st) billing cycle (first year). Subsequent renewals are billed automatically at the standard, official rate list of Prootzos Online (DOC-011).

Article 10: Data Protection, RDAP, WHOIS Privacy & Tracking

10.1. Processing & Data Retention Automation:

The Provider processes Registrant data exclusively for contract execution and Registry compliance (DOC-005, DOC-007).
Following domain deletion or transfer, personal data is retained solely for statutory periods mandated by tax laws and registry regulations. Upon expiration of these periods, automated data erasure and anonymization routines (Data Retention Automation) are executed within the Client Area.

10.2. Public Data Display (RDAP / WHOIS) & International Transfers:

Personal data of natural persons is redacted by default from public directory services (RDAP/WHOIS) in compliance with the GDPR.
The optional ID Protection / WHOIS Privacy add-on provides proxy privacy protection in registries where automatic redaction is not supported or for legal entities, excluding ccTLDs (such as [.gr] / [.ελ]) governed by specific EETT disclosure rules.
For international domain names (gTLDs) or third-country ccTLDs, data transfers to non-EEA Registries are performed pursuant to Article 49(1)(b) of the GDPR as strictly necessary for the performance of the registration contract.

10.3. Lawful Disclosure: The Provider and associated Registries reserve the right to disclose actual registrant details pursuant to official prosecutorial warrants, court orders, or formal written requests from law enforcement authorities investigating criminal acts.

10.4. Tracking & Prior Consent (ePrivacy & Consent Mode v2): Domain availability searches and checkout processes in the Client Area fully comply with the ePrivacy Directive (DOC-006). Integrated via Google Tag Manager with Google Consent Mode v2, no non-essential cookies, analytics, or advertising tags are executed prior to obtaining explicit, active user consent (Prior Consent / Opt-in).

Article 11: Acceptable Use, Suspension Protocols & Security Incidents

11.1. Acceptable Use Violations (DOC-003): Using domain names for hosting or redirecting to Outbound Abuse activities, phishing, malware distribution, Command & Control (C2) botnets, mass spamming, or activities violating national or international laws is strictly prohibited.

11.2. Separation of Suspension Mechanisms (Billing vs. Abuse Quarantine):

Billing Suspension: Executed automatically by the Client Area upon invoice overdue status, disabling domain management and active DNS routing.
Abuse Quarantine / Technical Suspension: Executed immediately at the infrastructure level (Controller / L1-L4 Firewalls / Nameservers) without prior notice in cases of Outbound Abuse, Phishing, C2 endpoints, or formal CSIRT/EETT/law enforcement orders, neutralizing the DNS zone to safeguard IP reputation.

11.3. Security Incident Notifications (NIS2 Compliance - DOC-012): In the event of a significant security incident affecting DNS zone integrity or involving unauthorized modification of domain records (Domain Hijacking), the Provider follows the statutory notification timeline defined in DOC-012:

Within 24 hours: Early Warning notification to competent supervisory authorities (CSIRT/EETT) and affected clients.
Within 72 hours: Formal Incident Notification including severity assessment and initial mitigation measures.
Within one (1) month: Final Comprehensive Root Cause Analysis (RCA) Report.

Article 12: Final Provisions & Enforceability

12.1. Hierarchy & Language: The Greek version of this Policy represents the official, primary, and legally binding document (Master Version). Any English translation is provided strictly for convenience. In the event of interpretive discrepancies, the Greek version shall prevail.

12.2. Amendments: The Provider reserves the right to update this Policy in accordance with the Governance Framework established in DOC-001. Substantive amendments shall be communicated via the Client Area and/or email.

12.3. Company Identity & Contact (Remote-First Single Source of Truth):

Company Name: Prootzos Online (Representative: Prountzos Nikos)
Registered Address (Tax / Postal): Karkavitsa 46, 27131, Pyrgos Ilia, Greece
VAT ID: EL 047648274 | Tax Office: Pyrgos
Digital Support: Client Area (Tickets) | Email: contact@prootzos.com | Telephone: +30 2621 121 373
Official Website: [https://prootzos.com](https://prootzos.com)