Provider Switching and Transparency - RaiaWeb
Version 1.0 - Last updated: 2 July 2026
Courtesy translation. This English version is provided for convenience only. In the event of any discrepancy, the Portuguese version prevails.
This page complies with Articles 26 and 28 of Regulation (EU) 2023/2854 (the Data Act) and forms an integral part of Annex B of RaiaWeb's General Terms and Conditions of Service. It applies to the Data Processing Services: shared hosting, email and virtual private servers (VPS).
Provider: Alex Nabais Gomes (RaiaWeb) · Tax ID (NIF) 268386625 · Rua da Fonte Mestre, N.º 22, 6320-637 Soito, Portugal · support@raiaweb.pt
1. How to switch provider or export your data
You may, at any time and at no charge for switching or for data retrieval (egress), switch to another provider, transfer your data to your own infrastructure, or simply export it. The process, timeframes (maximum transition period of 30 days, 30-day data retrieval period following termination) and assistance provided by RaiaWeb are set out in Annex B of the Terms and Conditions. To begin, open a ticket in the Client Area or write to support@raiaweb.pt.
2. Register of export formats and methods (Article 26)
| Service | Exportable data | Formats and methods | Known restrictions |
|---|---|---|---|
| Shared hosting (cPanel) | Website files, databases, email accounts and messages, configurations (crontabs, zone DNS, redirects) | Full cPanel backup (tar.gz), generated by you in the panel or on request; database dumps (SQL) via phpMyAdmin or the command line; files via FTP/SFTP or File Manager | The full cPanel backup is an open format (tar.gz archives with a structure documented by cPanel LLC), but fully automated restoration assumes a compatible panel at the destination; without a compatible panel, restoration is manual (files + SQL) |
| Messages, folders, contacts configured in webmail | IMAP (direct synchronisation/migration to another server), export of messages in EML/mbox format | Filtering rules and server-specific settings may need to be reconfigured at the destination | |
| Virtual private servers (VPS) | All server content: system, applications, data | Permanent root access (rsync, scp, dumps, tools of the client's choice); disk snapshots/images when made available by the infrastructure [TO BE CONFIRMED: which exportable snapshot/image formats are made available by OVH on the resold plans] | Disk images depend on hypervisor compatibility at the destination; export over the network is limited by the plan's bandwidth |
Exportable data includes data you imported and data you generated, together with relevant configurations and metadata; excluded are components protected by third-party rights (for example, panel licences) and information on the internal operation of the infrastructure.
3. Jurisdiction of the ICT infrastructure (Article 28)
| Service | Infrastructure | Location of data centres | Applicable jurisdiction |
|---|---|---|---|
| Shared hosting and email | Innov4web | Portugal | Portuguese / European Union |
| Virtual private servers (VPS) | OVH SAS and companies within the same group | Chosen by the Client during the order process, from the regions listed in table 3.1 | That of the country of the chosen region |
3.1. Data centre regions available for VPS
For virtual private servers, the data centre region is chosen by the Client during the order process and the server remains in that region. The available regions, and the jurisdiction to which they subject the data hosted in them, are as follows:
| Region | Country | Jurisdiction | Basis for the transfer |
|---|---|---|---|
| Gravelines · Strasbourg · Roubaix (EU-WEST-RBX) | France | French / European Union | No transfer outside the EEA |
| Frankfurt | Germany | German / European Union | No transfer outside the EEA |
| Warsaw | Poland | Polish / European Union | No transfer outside the EEA |
| Milan (EU-SOUTH-MIL) | Italy | Italian / European Union | No transfer outside the EEA |
| Beauharnois | Canada | Canadian | European Commission adequacy decision (commercial organisations subject to PIPEDA) |
| London | United Kingdom | British | European Commission adequacy decision |
| Singapore | Singapore | Singaporean | No adequacy decision - Standard Contractual Clauses |
| Sydney | Australia | Australian | No adequacy decision - Standard Contractual Clauses |
| Mumbai | India | Indian | No adequacy decision - Standard Contractual Clauses |
The availability of each region depends on the infrastructure provider's stock and may vary. The region applicable to each service is the one selected by the Client at the time of ordering and stated in the corresponding confirmation.
Shared hosting and email are always located in Portugal and are not transferred outside the European Economic Area.
For VPS, the choice of region is the Client's. If the Client chooses a region outside the European Union, the data hosted there is subject to the jurisdiction of that country, and that choice constitutes a documented instruction from the Client for the purposes of clause 4.1 of the Data Processing Agreement (DPA). A Client wishing to keep data exclusively within the European Union must choose one of the EU regions listed in table 3.1.
4. Measures against unlawful governmental access from third countries (Article 28)
- Shared hosting and email in data centres in Portugal, subject to EU law and the law of the Member States;
- For VPS, the Client chooses the region and may keep data exclusively within the European Union by selecting one of the EU regions in table 3.1; regions outside the European Union are only used following the Client's express choice at the time of ordering;
- Where the Client chooses a region outside the European Union, the infrastructure in that region is operated by companies within the provider's group subject to local jurisdiction, and transfers to countries without a European Commission adequacy decision are carried out under Standard Contractual Clauses, as set out in table 3.1;
- No RaiaWeb operations or subsidiaries in third countries that could give rise to extraterritorial access requests directed at RaiaWeb;
- Any access or transfer request from third-country authorities will be subject to legal assessment and will only be complied with if compatible with Union law or the law of the applicable Member State (Article 32 of the Data Act), limited to the minimum necessary;
- Unless legally prohibited, the affected client is notified before any disclosure;
- Technical and organisational measures described in Annex II of the DPA (encryption in transit, access control, event logging).
5. Interfaces and parity
RaiaWeb provides, free of charge, the export tools and interfaces described in section 2. As a provider of infrastructure and hosting services, the applicable functional parity obligations are limited to those set out in Article 30(1) of the Data Act.
Contact: support@raiaweb.pt
