Privacy Policy · brewedshot

Midoweb SRL, with registered office at Dimitrie Pompeiu Blvd. 5-7, Sector 2, 020335 Bucharest, Romania, operates brewedshot at brewedshot.com and is the controller for the processing described in this policy. You can reach us at contact@brewedshot.com.

This policy describes personal-data processing on brewedshot.com. It does not apply to external websites. Please also read our Cookie Policy, which explains cookies and similar technologies, and our Terms of Use.

Data processed when the site is used

Delivery, hosting, and security

When your browser requests a page, the site and its hosting, content-delivery, and security providers necessarily receive technical request data. This can include the requested address, date and time, response status, referring address, browser user-agent, IP address, and security signals.

This data is used to deliver the site, diagnose faults, prevent abuse, and protect the service. Access and security logs are retained under the configured hosting period for that purpose.

Anonymous first-party page and action counts

We measure which pages are viewed and which on-page actions are used. The endpoint immediately adds the request to a counter for a normalized page or action. It does not keep a record of an individual visit or click.

The counter does not set a cookie or create a visitor profile. The measurement route and the infrastructure in front of it are configured not to persist the request’s IP address, user agent, referrer, a persistent visitor or session identifier, or an event-level history. Only aggregate totals that cannot reasonably be linked to a visitor are retained as statistical records. Logs for ordinary page delivery and security are separate and are described above.

Where local law requires consent for this measurement request, it is sent only after analytics consent.

Google Analytics 4

With analytics consent where required, we use Google Analytics 4 (GA4) to understand how the site is used and to improve its content and performance. GA4 can receive information such as page addresses, interactions, device and browser information, approximate location, and cookie or similar identifiers. A request to Google also transmits the requesting IP address, which Google handles under its own documentation and terms.

Google’s Privacy Policy is available at: https://policies.google.com/privacy

Google explains how it uses information from sites that use its services at: https://policies.google.com/technologies/partner-sites.

Google advertising

We use AdSense for Search, including Related Search on Content, to fund the publication. We disable ad personalization. Related search terms and ads are based on the page being viewed or the current search term, not on an interest or browsing profile.

Requests sent to this service include the page address or search term and technical request data. This information is used to deliver and measure ads and to prevent fraud and abuse.

Google’s Privacy Policy is available at: https://policies.google.com/privacy

Email correspondence

If you email us, we receive your email address and the contents and metadata of your message, including attachments. We use it to respond, handle the matter, and protect our legal rights.

Providing this information is optional, but we need a return address and enough detail to respond.

Why data is processed

Depending on the activity, Midoweb SRL relies on the following grounds:

legitimate interests in delivering, maintaining, and securing the site, responding to correspondence, and protecting legal rights;
consent for optional analytics and non-essential cookies or similar technologies where consent is required; and
legal obligations, including responding to valid legal requests; and
legitimate interests in funding the publication with contextual advertising only where that processing and its supporting technologies do not require consent.

Where processing relies on consent, withdrawal options are described in the Cookie Policy. Withdrawal does not affect processing that was lawful before it.

Who can receive data

Data can be received by:

hosting, content-delivery, security, email, and technical service providers that help operate the site;
Google and service providers involved in the analytics and advertising services described above;
professional advisers, auditors, insurers, and prospective transaction parties where confidentiality and a legitimate need apply; and
courts, regulators, law-enforcement bodies, or other public authorities where disclosure is required or legally justified.

International transfers

Some providers may process data outside Romania or the European Economic Area. When Midoweb SRL is responsible for such a transfer, it uses a lawful transfer mechanism, such as an adequacy decision or approved standard contractual clauses, together with supplementary measures where required.

Google publishes information about its data-transfer safeguards at: https://business.safety.google/adsdatatransfers/.

How long information is kept

We use the following retention rules:

request and security logs are retained under the configured hosting period for that purpose and only for operation, diagnosis, security, or legal claims;
first-party page and action measurement retains only anonymous aggregate totals, not personal or event-level records;
correspondence is retained while the matter is open and afterwards only as long as reasonably needed for follow-up, legal obligations, or legal claims; and
Google cookie lifetimes are listed in the Cookie Policy; other information processed by Google is subject to its terms and published retention practices.

Rights and complaints

Under the GDPR, you may have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.

Requests may be sent to contact@brewedshot.com.

You may lodge a complaint with the competent data-protection supervisory authority.

Contact

Questions, objections, and rights requests may be sent to contact@brewedshot.com.