Privacy Policy
Last updated: 15.10.2026
This policy explains which personal data SPK Hosting processes, why, for how long and what rights you have, according to Regulation ( EU ) 2016/679 ( GDPR ) and Romanian Law 190/2018.
1. Controller
[not set yet], CUI [not set yet], [not set yet], Romania. Contact for privacy questions: [not set yet].
2. What we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| E-mail, password ( stored only as a one-way hash ), name, language | Your account and logging in | Contract ( art. 6 ( 1 ) b ) |
| Billing details: name, company, tax ID, address, country, phone | Orders, invoices, accounting | Contract; legal obligation ( art. 6 ( 1 ) c ) |
| Orders, services, invoices, payments and the consent given when ordering | Providing and billing the services, proof in case of a dispute | Contract; legal obligation; legitimate interest ( art. 6 ( 1 ) f ) |
| Support tickets and contact messages | Answering you | Contract; consent for the contact form ( art. 6 ( 1 ) a ) |
| IP address, browser, login times, failed logins | Security of the accounts and of the site, preventing abuse | Legitimate interest |
| Data on your servers ( files, logs, player data your plugins store ) | Hosting it for you - we act as your processor for this data | Contract / your instructions ( art. 28 ) |
We do not use your data for advertising, we do not sell it and we do not make automated decisions with legal effects about you. There is no tracking, no analytics and no advertising cookie on this site.
3. Who receives the data
- Our hosting providers, which run the web site and the game / voice servers in data centres in the European Union ( Germany, Romania ).
- Our e-mail provider, to send you service e-mails.
- Payment providers you choose ( bank, PayPal, Revolut ), only for the payment itself.
- Our accountant and public authorities, where the law requires it.
All of them are bound by contract or by law to protect the data. We do not transfer personal data outside the European Economic Area; if a payment provider you choose does so, it relies on its own safeguards ( e.g. EU standard contractual clauses ).
4. How long we keep it
- Account data: while the account exists. You can delete it yourself in the client area.
- Invoices and accounting records: for the period required by Romanian accounting and tax law ( up to 10 years ).
- Orders and the consent given when ordering: up to the end of the limitation period for claims ( 3 years after the service ends ).
- Tickets: while the account exists. Contact messages: up to 12 months.
- Failed login records: 2 days. Security and activity log: up to 2 years. E-mail log ( address and subject only ): 180 days.
- Data on your servers: deleted within 30 days after the service ends.
5. Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability and to withdraw consent at any time ( without affecting earlier processing ). In the client area you can download all your data ( Profile → Your data ) and delete your account. For anything else, write to [not set yet]; we answer within one month.
You may also complain to the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal ( ANSPDCP ), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, București, www.dataprotection.ro.
6. Security
The site uses encrypted connections ( HTTPS ). Passwords are stored only as bcrypt hashes. Logins are protected against guessing, sessions expire, every form is protected against cross-site requests and staff actions are logged. Access to customer data is limited to the staff who need it.
7. Children
The services are not meant for children under 16. Persons under 18 may only order with the consent of a parent or legal guardian.
8. Cookies
See the Cookie Policy.
9. Changes
When this policy changes we update the date at the top and, for important changes, tell customers by e-mail.