Acceptable Use Policy

This policy sets out which content and activities are not allowed on the GazduireOnline.ro services (web hosting, WordPress hosting, cloud hosting, domains and, if and when they become available, VPS and dedicated servers), how we enforce it and how you can report illegal content to us. It forms part of the MIRAKL SRL Terms and Conditions and contains the information required by Article 14 of Regulation (EU) 2022/2065 on digital services (DSA).

This policy applies to all customers and to anyone who uses the services through a customer's account (for example, users of websites or mailboxes created by the customer). The customer is responsible for the content stored and the activities carried out through their services, including by their users, and must take reasonable steps to prevent prohibited ones (for example, keeping applications up to date and protecting passwords).

You may not store, publish, transmit or make available through our services any of the following:

• any content that is illegal under Romanian law or European Union law;
• child sexual abuse material (CSAM) or any content that sexualises minors. Such cases are reported to the authorities and the service is suspended immediately;
• terrorist content, content inciting violence, hatred or discrimination, or content glorifying crimes;
• malicious software (malware, viruses, trojans, ransomware, exploit kits), botnet command panels or tools intended mainly for unauthorised access;
• phishing pages, websites impersonating other organisations or persons, fake shops and other forms of fraud;
• content that infringes copyright, trademarks or other intellectual property rights (for example, software, films, music or books distributed without a licence);
• cyberlocker / file-sharing services and streaming of content without rights;
• gambling without the licence required by law, the sale of prohibited products or substances, or of unlawfully obtained personal data;
• defamatory content, content that infringes privacy or unlawfully discloses other people's personal data;
• any other content whose publication is prohibited by a court decision or an order of a competent authority.

• cyber attacks of any kind: DDoS attacks, attempts at unauthorised access, password brute-forcing, exploiting vulnerabilities;
• port or vulnerability scanning of other people's networks and systems without their consent;
• running open proxies, open mail relays, Tor exit nodes or VPN services for third parties on shared hosting;
• cryptocurrency mining on shared, WordPress or cloud hosting;
• running permanent processes (daemons), game servers, IRC servers or scripts unrelated to the operation of a website, on shared hosting;
• spoofing IP addresses, e-mail headers or other identifying information;
• circumventing or attempting to circumvent limits, security measures or billing systems;
• using the services to carry out or facilitate any illegal activity.

• Sending spam, meaning unsolicited commercial messages without the recipients' prior consent, is prohibited (Article 6 of Law no. 365/2002 and Article 12 of Law no. 506/2004).
• Mailing lists must contain only recipients who have subscribed, and every message must allow easy unsubscription.
• Using purchased or harvested lists is prohibited, as is promoting websites hosted with us through spam sent from other networks.
• Respect the sending limits of your plan. We may temporarily limit sending if an account is compromised or generates complaints.

Shared, WordPress and cloud hosting means that several customers use the same servers. The resources included in each plan (disk space, CPU, memory, processes, connections, traffic, mailboxes, etc.) are those shown in the plan specifications on the website and in the client area. Even where a plan is presented as "unlimited" or "generous" for a given resource, usage must be what is normal for a website and must not affect the stability of the server or of other customers.

• Hosting space is intended for website files and e-mail, not for archiving or storing backups, media files for distribution or files unrelated to the website.
• If an account consistently exceeds its plan's resources, we will contact you and suggest optimising the website or moving to a suitable plan.
• If an account puts the server's operation at immediate risk, we may temporarily limit the account's resources or stop the processes causing the problem, and inform you as soon as possible.

We learn of possible breaches from notices we receive, from requests by authorities and from our automated monitoring and security systems (for example, detection of malware, mass e-mail sending or excessive server load). Automated tools only flag or temporarily block clearly dangerous technical activity; decisions about content are taken by a person on our team.

We do not generally monitor hosted content. We apply restrictions diligently, objectively and proportionately, with due regard to the rights and legitimate interests of all parties involved, including freedom of expression and information (Article 14(4) DSA). Depending on the severity, we may take one or more of the following measures:

1. notifying the customer and asking them to fix the problem within a reasonable time;
2. removing or disabling access to the file, page or content concerned;
3. temporarily restricting certain features (for example, e-mail sending or account resources);
4. temporarily suspending the service;
5. terminating the contract, in serious or repeated cases, under the Terms and Conditions.

In urgent cases (for example, CSAM, active phishing, spreading malware, ongoing attacks or a compromised account), we may act immediately, before notifying you, and then inform you without delay. Domains are additionally subject to the rules of the relevant registry.

Anyone can report content hosted through our services that they consider illegal or in breach of this policy:

• through the online form at Report abuse (recommended), which automatically creates a ticket and sends you a confirmation by e-mail; or
• by e-mail to [email protected].

So that a notice can be assessed quickly, it should contain (Article 16(2) DSA):

1. a sufficiently substantiated explanation of the reasons why you consider the content to be illegal;
2. a clear indication of the exact electronic location of the content, such as the exact URL or URLs and, where necessary, further information enabling it to be identified;
3. your name and e-mail address, except for notices concerning child sexual abuse offences, which may also be sent anonymously;
4. a statement confirming your bona fide belief that the information and allegations in the notice are accurate and complete.

For notices about intellectual property rights, please also state the rights relied on and your capacity (rights holder or representative). Manifestly unfounded or abusive notices sent repeatedly may be given low priority or disregarded, after the sender has been warned.

1. Acknowledgement. We send you an acknowledgement of receipt by e-mail without undue delay, if you gave us an address.
2. Assessment. We assess the notice in a timely, diligent, non-arbitrary and objective manner. We may ask you or the customer concerned for further information and may give the customer the opportunity to state their view, where the nature of the case allows.
3. Decision. We decide whether or not to take action (for example, removing or blocking the content). We inform you of the decision, stating whether automated means were used, and of the available redress options (Article 16(5) and (6) DSA).

A notice containing all of the elements above may give us actual knowledge of the content concerned. We are not, however, in a position to settle disputes between parties (for example, contractual disputes or disputes over who holds a right); in such cases we may refer you to the courts or the competent authority.

If we remove or disable access to content, or suspend or terminate a customer's service or account because it hosted illegal content or content incompatible with this policy, we send the customer, at the latest when the measure is applied, a clear statement of reasons (Article 17 DSA), containing:

• the measure taken, its territorial scope and its duration, where applicable;
• the facts and circumstances relied on, including whether the decision was taken following a notice or on our own initiative;
• information on the use of automated means, where applicable;
• the legal ground (for illegal content) or the contractual clause (for a breach of this policy) relied on;
• the available redress options.

No statement of reasons is sent if we do not know the customer's contact details or if a competent authority prohibits us from informing them (for example, so as not to jeopardise a criminal investigation).

Redress options, for both the customer and the person who sent the notice:

• internal complaint: write to us at [email protected] within 6 months of being informed of the decision, quoting the ticket number and the reasons why you consider it wrong. The complaint is reviewed, where possible, by a person who did not take the original decision, and the decision may be reversed if it proves unfounded;
• out-of-court settlement: consumers may turn to the alternative dispute resolution (SAL) entities through ANPC, at https://reclamatiisal.anpc.ro; any party may use mediation, as provided by law;
• complaint to the authority: you may lodge a complaint about compliance with the DSA with ANCOM, the Digital Services Coordinator for Romania;
• courts: you may at any time bring the matter before the competent Romanian courts.

Customers who repeatedly breach this policy, in particular by repeatedly hosting manifestly illegal content (for example phishing, malware or copyright-infringing content), may, after a warning, have their services suspended for a reasonable period or their contract terminated. We assess each case according to the number and severity of the breaches, the period over which they occurred and the steps the customer has taken to prevent them.

If we become aware of information giving rise to a suspicion that a criminal offence involving a threat to the life or safety of a person or persons has taken place, is taking place or is likely to take place, we promptly inform the competent law enforcement or judicial authorities (the Romanian Police or the prosecutor's office; where the Member State concerned cannot be identified, Europol) and provide all relevant information available (Article 18 DSA). We also cooperate with the competent authorities and act on their orders, as provided by law (Articles 9 and 10 DSA, Article 16 of Law no. 365/2002).

We may amend this policy to keep up with the law, new types of abuse or our services. We will inform you of significant changes by e-mail or in the client area before they take effect, in accordance with the Terms and Conditions. This version applies from 27 October 2026. In case of any discrepancy, the Romanian version prevails.