Acceptable Use Policy (AUP)

This Acceptable Use Policy governs how the Customer and any end user who accesses the services through the Customer's account may use the infrastructure, network, servers and related services made available by BTU. The AUP supplements the Terms and Conditions, the Privacy Policy and any service agreement concluded between the parties and forms an integral part thereof.

The policy applies to all BTU plans and products, including shared web hosting, virtual private servers (VPS/cloud), dedicated servers, email hosting, domain registration and management, SSL certificates and any additional service. In the event of a conflict between the AUP and an individually negotiated agreement, the more restrictive acceptable-use provisions prevail, unless the agreement expressly states otherwise.

BTU reserves the right to interpret and enforce this policy reasonably, in order to protect the services, customers and third parties. Lack of awareness of this policy does not exempt the Customer from liability.

The services are provided by the company set out below, which operates the commercial brand "BTU" and the btu.ro website:

• Name: SND TEAM S.R.L. (commercial brand / site: "BTU", btu.ro)
• Fiscal Identification Code / VAT Number: RO38963245 (CIF 38963245)
• Trade Register Number: J2018000311325 (EUID: ROONRC.J2018000311325)
• Registered office: Str. Mihai Viteazu nr. 260, bl. 5, sc. B, ap. 17, Șelimbăr, Sibiu County, postal code 557260, Romania
• Email: contact@btu.ro · Abuse reports: abuse@btu.ro
• Phone: +40 792 222 882 · Web: https://btu.ro

For the purposes of this policy, the terms below have the following meaning:

• "BTU" / "the Provider" – the company SND TEAM S.R.L., which operates the services under the BTU brand.
• "the Customer" – the natural or legal person who has concluded a service agreement with BTU.
• "End user" – any person who accesses or uses the services through the Customer's account (visitors, employees, subcontractors, the Customer's own clients).
• "Services" – the set of hosting, cloud, dedicated server, domain, email and SSL products provided by BTU.
• "Content" – any data, files, text, images, applications, databases, emails or other materials stored, transmitted or processed through the Services.
• "Abuse" – any use of the Services in breach of this policy, the law or the rights of third parties.
• "Infrastructure" – the servers, network, storage systems and data centres through which the Services are provided, operated by BTU together with EU infrastructure partners.

The Customer undertakes to use the Services in good faith, lawfully and responsibly, without affecting the operation of the infrastructure, the security of other users or the reputation of the BTU network. The Customer is fully responsible for all activities carried out through their account, whether performed by themselves, their employees, agents or end users.

The Customer is responsible for all content hosted, transmitted or processed through the Services and warrants that they hold all rights, licences and authorisations necessary for that content. BTU acts as a hosting service provider within the meaning of Law no. 365/2002 on electronic commerce and does not actively monitor stored content, but will act upon receipt of a substantiated notice regarding unlawful content.

Use of the Services must comply with the technical and security standards communicated by BTU, as well as the rules of the Tier III data centres in the European Union where the infrastructure is hosted.

The following categories of content and activities are strictly prohibited on the BTU infrastructure. The list is illustrative, not exhaustive; BTU may treat as abusive any activity similar to those below:

• Illegal activities: any content or action that breaches Romanian law, European Union law or the law applicable in the recipient's jurisdiction, including fraud, money laundering, trafficking in prohibited goods or substances.
• Child exploitation content: any material depicting child sexual abuse (CSAM) – an absolute prohibition, with immediate reporting to the authorities.
• Malware and phishing: distributing, hosting or disseminating viruses, trojans, ransomware, keyloggers, phishing pages, fraud kits or any malicious code.
• Spam and unsolicited commercial communications (UCE/UBE): sending unsolicited bulk email, bulk messages, chain letters or any form of spam, in accordance with the dedicated anti-spam section.
• Infringement of copyright and intellectual property: distributing pirated software, films, music, licensed content without authorisation, trademarks or patents used without right.
• Abusive or aggressive unlawful content: incitement to hatred, violence, discrimination, harassment, defamation, threats or content that violates human dignity.
• Exploits and attacks: unauthorised port scanning, DoS/DDoS attacks, brute-force, SQL injection, sniffing, spoofing or any attempt at unauthorised access to one's own or third-party systems.
• Cryptocurrency mining and unauthorised intensive processing: cryptocurrency mining, proof-of-work applications and any task that disproportionately consumes resources are prohibited on shared plans and permitted on VPS/dedicated only with BTU's written consent.
• Resource abuse on shared plans: processes that overload CPU, memory, I/O or the network and affect other customers on the same server (see the fair usage section).
• Open proxy/anonymisation services, open relays, TOR exit nodes or services that mask illicit traffic, without prior approval.
• Content that promotes illegal gambling, pyramid schemes, Ponzi schemes, HYIPs or other fraudulent financial models.

BTU applies a zero-tolerance policy towards spam. It is prohibited to send unsolicited commercial communications (UCE), bulk email (UBE), or any form of messaging that breaches Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector and Regulation (EU) 2016/679 (GDPR).

Any email campaign must be based on the validly expressed consent of the recipients (opt-in), must include a functional unsubscribe method (opt-out) and must clearly identify the sender. The Customer is responsible for maintaining clean lists and for honouring unsubscribe requests.

To protect IP reputation and deliverability, BTU may impose limits on the number of messages sent per hour/day on hosting plans. The following practices are prohibited:

• Sending messages to purchased, rented or non-consented harvested lists.
• Falsifying headers, the sender address or routing information (spoofing).
• Operating open relay or open proxy mail servers.
• Using the Services to support, promote or host resources related to spam sent from another network (spamvertising).
• Sending messages that trigger high bounce rates or complaints via feedback-loop services.

The Customer is solely responsible for the security of the applications, scripts, themes, plugins and any code they install or run within the Services. The Customer must keep applications up to date, apply security patches and remove vulnerable or abandoned components.

The Customer is responsible for the confidentiality and strength of all passwords, API keys, SSH keys and other access credentials. Sharing credentials with unauthorised third parties is prohibited. Any activity carried out through the Customer's credentials is presumed to have been performed by the Customer.

The Customer must notify BTU without delay at abuse@btu.ro if they suspect an account compromise, a security breach or unauthorised use. BTU may preventively suspend a compromised account to limit the spread of an incident, notifying the Customer of the measure.

BTU recommends that customers make their own backups of their data. Although BTU may offer backup solutions, the ultimate responsibility for the integrity and recovery of data lies with the Customer, in accordance with the Terms and Conditions.

Shared hosting plans use common resources (CPU, RAM, I/O operations, processes, connections, inodes). To ensure a stable experience for all customers on the same server, BTU applies a fair usage policy. The resources of a shared plan are intended for the normal operation of a website and related services, not for intensive computing tasks or archive/external backup storage.

BTU may monitor resource consumption and may apply technical limitations (throttling), process isolation or temporary suspension of accounts that repeatedly exceed reasonable thresholds and affect other users. The following uses are considered resource abuse on shared plans:

For tasks requiring dedicated or guaranteed resources, BTU recommends migrating to a VPS/cloud plan or a dedicated server, where specific contractual limits apply.

• Running permanent processes (daemons), bots, crawlers or unapproved processing queues.
• Using hosting as storage/backup space for files not associated with a functional website.
• Cron jobs run too frequently or scripts that disproportionately consume CPU/memory.
• Unoptimised databases, queries that lock the server or excessively large tables.
• Abnormal traffic generated by attacks, faulty scripts or infinite loops.

Any person who becomes aware of a use of the Services in breach of this policy or the law may report it to BTU at abuse@btu.ro or, alternatively, at contact@btu.ro. For efficient handling, the report should contain sufficient information to identify the reported content or activity (URL, IP address, email headers, date/time, description of the act) and the contact details of the complainant.

BTU prioritises reports concerning illegal content (CSAM, phishing, malware, fraud) and may request additional information. Substantiated notices will be forwarded to the Customer concerned, who is obliged to remedy the situation within the indicated deadline.

BTU will treat the identity of the complainant as confidential, within the limits of the law. Reports made in bad faith or abusively may be disregarded.

BTU has no general obligation to monitor content stored by Customers, in accordance with Law no. 365/2002. However, BTU reserves the right to investigate any suspected breach of this policy and to access, to the extent strictly necessary, technical data (logs, metadata, traffic) to verify a complaint or a security incident.

In emergency situations that endanger the integrity of the infrastructure, the security of other customers or that involve manifestly illegal content, BTU may take immediate technical measures, including isolation, blocking access or removing content, and will notify the Customer as soon as possible.

Any access to the Customer's data during an investigation is carried out in compliance with the principles of minimisation and proportionality provided by Regulation (EU) 2016/679 (GDPR).

Depending on the severity, frequency and impact of the breach, BTU may apply, gradually or directly, one or more of the following measures:

For serious breaches – in particular child exploitation content, phishing, active malware, ongoing attacks or activities that pose an immediate threat to the infrastructure or third parties – BTU may suspend or terminate the Services immediately, without notice and without refunding amounts relating to the remaining period. Suspension or termination for abuse does not entitle the Customer to a refund of fees paid.

• Written warning and request to remedy within a set deadline.
• Technical limitation of resources (throttling) or restriction of certain features.
• Temporary suspension, partial or total, of the affected Services.
• Removal of or blocking access to unlawful or abusive content.
• Termination of the contract and discontinuation of the Services, with or without notice, in the case of serious or repeated breaches.
• Retention of amounts due and, where applicable, claiming damages for the harm caused.

BTU cooperates with the competent authorities in Romania and the European Union (criminal investigation bodies, courts, the National Supervisory Authority for Personal Data Processing – ANSPDCP, the National Authority for Consumer Protection – ANPC and other authorities) within the limits and conditions provided by law.

BTU may disclose the Customer's data, including identification data, access logs and content, where there is a legal obligation, a court order, a valid request from the authorities, or where necessary to prevent a crime or to protect the rights, property or safety of BTU, its customers or the public.

Any processing of personal data in this context is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and BTU's Privacy Policy.

The Customer assumes full responsibility for the use of the Services and undertakes to indemnify and hold BTU harmless (indemnification clause) against any claim, complaint, expense, damage or penalty resulting from the breach of this policy, the law or the rights of third parties through their content or activity.

BTU is not responsible for the content hosted by Customers and does not guarantee its legality, accuracy or appropriateness. BTU's liability is governed by the Terms and Conditions and the applicable law, within the limits permitted by law.

This policy does not prejudice the consumer rights provided by GEO no. 34/2014 on consumer rights in distance contracts, including the right of withdrawal within 14 days, under the conditions and with the legal exceptions applicable to digital services.

Complaints regarding the Services may be sent to contact@btu.ro and will be reviewed within a reasonable time. BTU seeks the amicable resolution of any disputes.

Consumers benefit from alternative dispute resolution mechanisms. They may contact the National Authority for Consumer Protection (ANPC) and, for online disputes, the European online dispute resolution platform (the SOL/ODR platform), available at https://ec.europa.eu/consumers/odr.

Disputes that cannot be resolved amicably fall under the jurisdiction of the competent Romanian courts at BTU's registered office, except where the law mandatorily provides for another jurisdiction in favour of the consumer.

BTU reserves the right to amend, update or supplement this Acceptable Use Policy at any time, to reflect legislative, technological or operational changes. The updated version will be published on the btu.ro website and will take effect from the date of publication.

For significant changes, BTU may notify Customers by email or through the client account. Continued use of the Services after the changes take effect constitutes acceptance of the new version. We recommend reviewing this page periodically.

For questions about this policy, to report abuse or for any other request, you may contact us using the details below:

• Operator: SND TEAM S.R.L. (BTU, btu.ro)
• Abuse reports: abuse@btu.ro
• General email: contact@btu.ro
• Phone: +40 792 222 882
• Address: Str. Mihai Viteazu nr. 260, bl. 5, sc. B, ap. 17, Șelimbăr, Sibiu County, postal code 557260, Romania
• Web: https://btu.ro