This policy explains how BOOSTER28 ADS S.R.L. processes personal data of visitors of https://booster28ads.com and of people who contact us, in line with Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018 implementing the GDPR.
1. Who is responsible (controller)
| Controller | BOOSTER28 ADS S.R.L. |
|---|---|
| Registered office | Strada Lungă 149, Ap. P3, 500051 Brașov, România |
| Trade Register no. / Tax ID (CUI) | J2023001944087 / 48459815 |
| Privacy contact | info@booster28ads.com |
We have not appointed a Data Protection Officer, because we are not required to do so under Article 37 GDPR. For any privacy question or request, write to info@booster28ads.com.
2. What data we process, why, and on what legal basis
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | Name, email, company, website (optional), service of interest, budget range (optional), your message, and your confirmation that you have read this policy | To read and answer your request, to prepare a proposal or a possible contract | Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) |
| Follow-up business communication | Same data | To continue the business conversation with you or your company (B2B) and to keep a record of it | Art. 6(1)(f) GDPR (our legitimate interest in developing business relationships with companies; you can object) |
| Security and anti-spam | IP address, date and time, user agent (browser/device type), technical form signals (hidden field, time to fill in the form, number of requests) | To protect the Website and the form against spam, abuse and attacks | Art. 6(1)(f) GDPR (our legitimate interest in the security and proper working of the Website) |
| Server logs of the hosting provider | IP address, date and time, requested page, browser data | Technical operation and security of the hosting service | Art. 6(1)(f) GDPR |
| Contract performance (if we start working together) | Contact and business data of your company and its representatives | To perform the contract, invoice, comply with accounting and tax laws | Art. 6(1)(b) and 6(1)(c) GDPR |
Providing the data marked as required in the form is necessary to answer you. Without it we cannot process your request. We do not ask for special categories of data (Art. 9 GDPR), please do not send them.
We do not use cookies or tracking tools on the Website. See the Cookie Policy.
3. How long we keep data
| Data | Retention |
|---|---|
| Contact form messages and related emails, when no contract follows | 24 months from our last contact, then deleted |
| Data needed for a contract and for accounting/tax records | For the period required by applicable law (accounting and tax law) and until claims are time-barred |
| Technical anti-spam and rate-limit data | Only for the short period needed for the protection mechanism, then deleted automatically |
| Hosting server logs | According to the hosting provider's own retention rules (see section 4) |
When the retention period ends, we delete or anonymise the data.
4. Who receives your data (recipients and processors)
We do not sell your data and we do not share it for advertising. We use service providers that process data on our behalf, under data processing terms as required by Art. 28 GDPR:
| Recipient | Role | Purpose |
|---|---|---|
| Hostinger group (for EU customers, HOSTINGER INTERNATIONAL LIMITED, Cyprus, with group companies in Lithuania) | Hosting provider and processor | Hosting of the Website and sending of the form message by email |
| Google (email service we use for our business mailbox) | Processor | Receiving and storing the messages sent through the form and by email |
We may also disclose data to public authorities, courts, lawyers, accountants or auditors when the law requires or when needed to establish, exercise or defend legal claims.
5. Transfers outside the EU/EEA
Some providers, in particular Google, may process data outside the European Economic Area, including in the United States. Hostinger states in its privacy policy that some of its servers are located outside the EU/EEA. Such transfers rely on a valid transfer mechanism under Chapter V GDPR: an adequacy decision of the European Commission (for example the EU-US Data Privacy Framework, where the recipient participates in the framework) or the Standard Contractual Clauses approved by the Commission, with additional safeguards where needed. You can ask us for information on these safeguards at info@booster28ads.com.
6. Your rights
Under the GDPR you have the right to: access your data (Art. 15); have it corrected (Art. 16); have it erased (Art. 17); restrict processing (Art. 18); data portability (Art. 20); object to processing based on legitimate interest (Art. 21); and withdraw consent where processing is based on consent, without affecting earlier processing (Art. 7(3)). Write to info@booster28ads.com. We answer within one month (Art. 12 GDPR), which may be extended where the law permits. We may ask you to confirm your identity.
7. Complaints
You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority in Romania is:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, cod poștal 010336, București, Romania Website: https://www.dataprotection.ro (complaints form in the "GDPR complaints" section) Email (general): anspdcp@dataprotection.ro
You may also complain to the authority of the EU Member State where you live or work. You also have the right to a judicial remedy (Art. 79 GDPR). We would appreciate the chance to resolve your concern first.
8. Automated decisions
We do not take decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects on you (Art. 22 GDPR). Anti-spam checks only decide whether a technical request is accepted by the form.
9. Security
We use appropriate technical and organisational measures (Art. 32 GDPR): HTTPS encryption in transit, restricted access to the mailbox that receives form messages, spam protection, and the contact form's destination is not disclosed on the Website. No method of transmission over the internet is completely secure.
10. Children
The Website and our services are addressed to businesses and are not intended for persons under 18. We do not knowingly collect data from children.
11. Links and third parties
The Website does not load content from third parties (no external fonts, scripts, videos or maps). If you follow a link to another website, its own privacy policy applies.
12. Changes
We may update this policy. The current version is always published here with its "Last updated" date. Significant changes will be highlighted on this page.