Privacy Policy

Data Controller

The owner of evadiosa.com is the data controller for the processing of personal data described in this policy. If you have questions about our processing of your data, please contact us via our contact page.

What Data Do We Process?

We process the following categories of personal data:

• Account data: email address, username, and password (stored as a hash), provided at registration
• Ad content: text and images you upload when creating or editing ads
• Technical data: IP addresses are processed transiently for abuse prevention (e.g. rate limiting) and are not stored permanently. Browser information is collected automatically in server logs for troubleshooting

Purposes and Legal Basis

We process your data for the following purposes:

• Operating and managing your account and providing platform features (legal basis: performance of a contract, GDPR Art. 6(1)(b))
• Security, abuse prevention, and prevention of illegal activity (legal basis: legitimate interests, GDPR Art. 6(1)(f))
• Compliance with legal obligations, including cooperation with authorities (legal basis: legal obligation, GDPR Art. 6(1)(c))

Retention Period

You can delete your account and its data yourself at any time from your account settings. Otherwise, your account data is retained for as long as your account is active, and inactive accounts and associated data are deleted after 24 months without login activity.

Ads are made inactive (no longer publicly visible) after 30 days without updates, and are permanently deleted together with your account data after 24 months of inactivity. Technical log data is retained only temporarily and no longer than necessary for operations and troubleshooting.

Third Parties

We use the following third parties in connection with processing your data:

• Cloudflare, Inc. (USA): We use Cloudflare for image storage (Cloudflare R2, stored in the EU), content delivery, bot protection (Turnstile), and aggregate performance analytics (Cloudflare Web Analytics) to monitor site speed and reliability, which does not use cookies or track individual visitors. Cloudflare is certified under the EU-US Data Privacy Framework and processes data in compliance with GDPR.
• Amazon Web Services, Inc. (USA): We use Amazon SES (processed in the EU) to send transactional emails, such as account verification and password reset. AWS is certified under the EU-US Data Privacy Framework.

We do not sell your personal data to third parties or share it for marketing purposes.

Your Rights

As a data subject you have the following rights under GDPR:

• Right of access to the data we process about you
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing based on legitimate interests

You can exercise your rights by contacting us via our contact page. We will respond within 30 days.

You have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet), Borgergade 28, 5th floor, 1300 Copenhagen K (www.datatilsynet.dk).

Cookies

We use only strictly necessary cookies and local storage: to keep you logged in, protect against bots and forgery, remember your language, and save an in-progress ad draft on your device. We do not use tracking, analytics, or marketing cookies.

Changes

We may update this privacy policy. The current version is always available on this page. Significant changes will be communicated via the platform.