Privacy policy
Version 2026-11-01 · applies to solarhost.ro and the SolarHost customer account.
1. Controller
ECOSOLARIS SERVICES S.R.L, VAT ID RO18445354, DNCB nr. 27, Clinceni, Ilfov, Romania, provides the SolarHost service. Contact: [email protected].
2. What we process, why and on what legal basis
- Account, hosting and domains: name, email, phone, billing details. Basis: contract (GDPR art. 6(1)(b)).
- Passwordless login codes: phone, email, IP. Basis: contract and account security (art. 6(1)(b), (f)).
- Codes and service messages on WhatsApp: phone. Basis: your consent (art. 6(1)(a)). Without it we use SMS and email.
- Invoicing and accounting: billing details, orders, payments (no card data). Basis: legal obligation (art. 6(1)(c)).
- Platform security and abuse prevention (spam, attacks, malware): IP, access and action logs, hosting metrics. Basis: legitimate interest (art. 6(1)(f)).
We send no advertising. The only automated measure is a temporary suspension of a hosting account that sends spam or attacks; a person then reviews it and you can always contest it.
3. Recipients
EuPlătesc (card payments; we never see card data), SmartBill (invoicing), Cloudflare, Inc. (site protection; US transfer under the EU-US Data Privacy Framework and standard contractual clauses), WhatsApp / Meta Platforms Ireland (only with your consent), our mobile carrier for SMS, IP.RO and domain registries (domains are registered in your name, so your contact details are sent to the registrar and the registry; data of private persons is not published in WHOIS), and public authorities where the law requires it. Our servers are in Romania. We never sell your data.
4. Retention
Account data: while the account exists and up to 3 years after closure. Accounting records: as required by law (currently up to 10 years). Unconfirmed sign-ups: deleted after 7 days. Login codes: deleted after 30 days. Security logs: as long as needed for security and legal claims.
5. Your rights
Access, rectification, erasure, restriction, portability, objection (GDPR art. 15–22) and withdrawal of consent at any time. Withdraw the WhatsApp consent in My account; for anything else write to [email protected]. We reply within one month. You may complain to the Romanian supervisory authority ANSPDCP, www.dataprotection.ro.
6. Cookies
We only use strictly necessary cookies. See the Cookie policy.