Website privacy notice

Who is responsible

The controller for this website is Mihai Pop, a private individual (natural person) in Romania, who runs AdCiao.

Contact: support@adciao.com. More on the contact page.

When you visit the website

To show you a page, your browser has to send our web server your IP address and the details of the request. The website consists of static pages only: nothing is personalised and nothing about you is stored apart from the log described here.

Access log

For each request, the server records:

• the date and time;
• a shortened IP address: for IPv4 only the first two of the four parts are kept (for example 198.51.0.0), for IPv6 only the first 32 bits;
• the address of the page or file requested, the request method and protocol;
• the response status, its size and how long it took;
• technical connection details: the source port and the encryption (TLS) version and cipher.

The log does not contain cookies, your browser’s identification string (user agent), the page you came from or any other request headers.

Purpose: to deliver the website, keep it secure and find and fix faults, for example to recognise abusive request patterns. Legal basis: our legitimate interest in a working and secure website (Article 6(1)(f) GDPR).

Retention: the log is rotated at least once a day and only the four most recent rotated files are kept, so log entries are deleted automatically after 7 days at the latest.

Server errors

If the server itself fails while handling a request (a rare server error), it can write a technical error entry to the server’s system log. Such an entry can include the complete IP address. It is used only to diagnose and fix the fault, on the same legal basis. The system log is limited in size, not in time, so such an entry is deleted only when the system log reaches its size limit.

Cookies and similar technologies

This website sets no cookies and uses no local storage or similar technologies. It loads nothing from other companies: no web fonts, analytics, advertising, social media buttons or embedded videos. Its small script only runs the menu, the before / after comparison and the line animation, and sends nothing anywhere.

When you write to us

If you send an e-mail to support@adciao.com, we process your e-mail address, your message and anything you choose to include, to answer you and to deal with your request.

Legal basis: our legitimate interest in answering the people who contact us (Article 6(1)(f) GDPR); for requests about your data protection rights, our legal obligation to answer them (Article 6(1)(c) GDPR).

Where it is stored: e-mail sent to support@adciao.com is received and stored in a mailbox at the Private Email service of our domain provider, Namecheap, Inc. (United States). It is not forwarded to any other e-mail provider.

Retention: we keep correspondence only as long as needed to deal with your request, and delete it no later than 12 months after the conversation ends, unless it has to be kept longer to establish, exercise or defend legal claims.

Please do not send passwords or sensitive personal data by e-mail.

Who receives data

• Aruba S.p.A. (Italy), our hosting provider: the server that delivers the website and keeps the log runs in its cloud.
• Namecheap, Inc. (United States), our domain provider, which also hosts our mailbox (Private Email) for messages you send us.

These providers act on our behalf. We do not sell personal data and do not share it for advertising. We disclose data to public authorities only where the law requires it.

Outside the European Economic Area: the website itself is hosted by a provider in the EU. Our mailbox is provided by Namecheap, Inc., a company in the United States, so messages you send us may be processed in the United States. Namecheap’s Data Processing Addendum, part of its terms of service, provides for the European Commission’s standard contractual clauses (Decision (EU) 2021/914) for such transfers.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have it corrected or erased;
• restrict its processing;
• object at any time, on grounds relating to your situation, to processing based on our legitimate interests;
• receive data you provided to us in a portable format, where this right applies.

To use these rights, write to support@adciao.com. We answer within one month; for complex requests this can be extended by up to two further months, and we will tell you if so. Because the access log keeps only shortened IP addresses, we usually cannot link its entries to a person; if you can give us details that allow this, we will take them into account.

You can also complain to a data protection supervisory authority, in particular in the EU country where you live or work or where the alleged infringement happened. In Romania this is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP, dataprotection.ro).

Good to know

• There is no automated decision-making or profiling.
• You are not obliged to give us any personal data; without the technical data above, however, a browser cannot load the website.
• This website does not install anything. The AdCiao Free browser extension is not available yet; it will come with its own privacy information.
• If the website changes, for example if accounts or purchases are ever added, this notice will be updated first. The date at the top shows the current version.