PRIVACY POLICY

weGOTservers is the trade name of HOSTEAZA SRL, a Romanian legal entity with its registered office at Strada Secundara, No. 187, Sipotu, Gorj, registered with the Trade Register under number J2023000138182 and having unique fiscal registration code 47595860 (hereinafter referred to as “weGOTservers” or “we”).

We collect the following types of information about you:

Personal information is data that can be used to identify you directly or indirectly. This may include your first and last name, company name, email address, telephone number, billing address and country of residence, as well as your IP address and other online identifiers. In the context of providing hosting services, personal information may also include technical data such as domain names, DNS settings, control panel authentication data, and access and usage logs. These data are collected and processed to the extent necessary for concluding and performing the contract, delivering hosting services, billing, and complying with applicable legal obligations.

(a) Information We Collect Directly From You

We collect personal information when:

• You create an account on the Site, in which case personal data and supporting documents necessary for identification and processing may be requested;
• You contact us by email, mail, phone, WhatsApp or when visiting our office.
• You provide us with information by completing online forms on our Site.
• You open a support ticket through the client portal, in which case we collect data such as your name, email address, details of your request, any attachments and other information you choose to provide in order to resolve the request.

(b) Information We Collect From You Automatically

We use third-party analytics tools, such as Google Analytics and Tracking Pixel, to collect data about how you browse our Site. These data include:

• Pages visited
• Session duration
• Other details regarding browsing behavior.

This information helps us improve our Site and better understand the needs of users.

(c) Cookies

When you visit our website, we use cookies and similar technologies. These are small files stored on your device that contain information about your use of the website.

• Strictly necessary cookies, essential for the functioning of the website, which cannot be disabled.
• Analytics and performance cookies, which help us understand how the website is used and improve the user experience (e.g. Google Analytics).
• Marketing and advertising cookies, used to provide you with personalized advertisements (e.g. Google Ads, Meta Ads).

When you first access the Site, you will be shown a consent banner through which you can accept or reject the use of cookies that are not strictly necessary. You may also change your cookie preferences at any time through the settings available in the banner or by configuring your browser.

(d) Payment Information

When you purchase a subscription through our Platform, you may be asked to provide payment information, such as your billing address. We do not store sensitive bank card details such as card number or CVV code. Payment information is securely processed through our authorized payment processors, Netopia Payments, Stripe, PayPal or BitPay. We also retain the card expiration date so that we can notify you before expiration and the billing address, if necessary for issuing an invoice.

(e) Notifications Regarding Illegal Content and Appeals

When you report content hosted on our Services or appeal a moderation decision, we process the name, email address, content of the notification and the evidence submitted, as well as the data of the affected Client, in order to assess the notification, communicate the decision, resolve appeals and respond to authorities. Processing is based on the legal obligations provided by Regulation (EU) 2022/2065 on digital services and on our legitimate interest in protecting our Services and defending our rights. The identity of the notifier is not disclosed to the affected Client, except where this is strictly necessary, for example in a copyright dispute. The data may be transmitted to the competent authorities, in accordance with the law, and are retained for 3 years from the closure of the case.

weGOTservers will collect your personal data only for the following purposes:

1. Performance or conclusion of a contract: Processing is necessary for fulfilling contractual obligations or for pre-contractual steps at your request.
2. Our legitimate interest: For improving and developing our services.
3. Consent: Where processing requires your explicit consent.
4. Legal obligations: Where processing is necessary to comply with legal requirements.

We do not sell, provide or transfer your personal data to other third parties. We will share personal information with external service providers that process personal data on behalf of weGOTservers for the purpose of payment processing, data storage and management, traffic and user behavior analysis, and management of email communications.

In this regard, we work with trusted partners such as Netopia Payments, Stripe, PayPal or BitPay for payment processing, RoTLD, ResellerClub, NicSRS and Cloudflare for storage and cloud services, Google Analytics for web analytics, and Tawk.to and WhatsApp Business for managing communications and business relations.

We also use advertising tools and platforms (Google Ads and Meta Ads) to run interest-based advertisements regarding weGOTservers services or to display relevant advertising when you use our services.

These companies have access to your information only for the purpose of performing these tasks and are required to protect your personal data in accordance with this Privacy Policy and applicable law.

We may need to use your information in order to comply with our legal obligations. For example, we may be required to disclose your information pursuant to a court order or as a result of other legal proceedings.

Your personal data may be transferred and processed outside the European Economic Area (EEA), including in the United States of America, to the extent necessary for providing our services.

Such transfers may occur, for example, when we use global service providers such as Google LLC (including Google Analytics and Google Ads), Meta Platforms, Inc. (including Meta Ads and WhatsApp Business), PayPal Holdings, Inc. (payment processing) or Cloudflare, Inc. (security and web performance services).

These companies may process your data outside the EEA. In all cases, we ensure that transfers comply with applicable legal data protection requirements by implementing appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission and, where necessary, additional security measures.

Through these mechanisms, we undertake to ensure a level of protection equivalent to that required by European Union legislation and to appropriately protect the fundamental rights and freedoms of data subjects.

We will retain your personal data only for the period necessary to achieve the purposes described in this policy and in accordance with legal obligations, contractual obligations or industry practices.

Data relating to your account will be retained for as long as the account is active. If you close your account, we will delete the related data within a reasonable period, except where retention is necessary for compliance with our legal obligations. Data stored in the database are retained for a maximum period of 90 days before being permanently deleted, unless there is a legal basis for longer retention.

Data relating to financial transactions will be retained for 10 years, in accordance with applicable tax legislation.

Under data protection legislation applicable at European Union level, the data subject may exercise the following rights:

1. Access: to obtain confirmation as to whether or not the data subject’s personal data are being processed and the right to access them; requests that are manifestly unfounded, excessive or repetitive may not receive a response;
2. Rectification: correction/obtaining the correction of personal data if they are inaccurate or not up to date and completion of the data if they are incomplete;
3. Erasure/right to be forgotten: in certain cases, obtaining the deletion of the personal data provided; this is not an absolute right, as the Data Controller may have legitimate and/or legal reasons to retain them;
4. Restriction: the data will be stored but may not be further processed, in the cases provided by the regulation;
5. Portability: moving, copying or transferring data from the Data Controller’s databases to third parties. This applies only to data provided by the data subject for the performance of a contract or for which explicit consent has been given, and where the processing is carried out by automated means;
6. Objection to direct marketing;
7. Withdrawal of consent at any time, where the processing is based on consent.

You may exercise these rights by email at gdpr@wegotservers.com or by submitting a request to our registered office at Strada Secundara, No. 187, Sipotu, Gorj.

weGOTservers will respond within 30 days of receiving the data subject’s official request.

The security of your personal information is important to us. We are committed to using appropriate tools and procedures that ensure the security and confidentiality of your personal data within our systems.

This website is intended exclusively for users over the age of 18. We do not intend to process the personal data of children under the age of 18.

If we become aware that we have accidentally collected personal data belonging to minors, we will take steps to delete such data without undue delay, except where there is a legal obligation to retain them.

We do not make decisions based solely on automated processing of your data that produce legal effects concerning you or similarly significantly affect you.

Our Site contains links to other websites. This Privacy Policy applies only to this Site, so when you connect to other websites, you must read their own privacy policies.

You may lodge a complaint with the National Supervisory Authority for Personal Data Processing, at its headquarters in Bucharest, B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Postal Code 010336, Romania, or at the email address anspdcp@dataprotection.ro. More information is available at www.dataprotection.ro.

This Privacy Policy may be amended and updated by us from time to time, as necessary. We will notify you of any material or substantial change to this Privacy Policy and will ensure that the notification is made in such a way that it is reasonably brought to your attention.

If you have any questions regarding our Privacy Policy, you may write to us at gdpr@wegotservers.com or by mail at: