Privacy policy

Our commitment

At Cloud y Olé we are committed to protecting your personal data. This Privacy Policy tells you how your personal data is collected, processed and used when you visit cloudfortress.es, the Cloud Fortress website.

Who is the data controller?

• Controller: Cloud y Olé S.L., tax ID B19914597
• Address: Edificio Bic Euronova, planta 2, oficina 6, Avda. Juan López Peñalver, 21 · Parque Tecnológico de Andalucía, 29590 Málaga, Spain
• Email: contacto@cloudfortress.es

Purpose and legal basis of the processing

We process the personal data you provide, or that we collect through this website, for the following purposes:

• Demo requests and enquiries. Purpose: to handle your request and prepare and schedule the Cloud Fortress demonstration. If you choose a slot after sending it, your name and email are passed to Calendly so that you can book it. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Sending the dossier. Purpose: to email you the dossier of the pack you request. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Sending commercial communications. Purpose: to keep you informed about news and content related to Cloud Fortress, provided you have given consent. Legal basis: your express consent or, where applicable, a prior contractual relationship.
• Measuring the use of the site. Purpose: to learn which pages and actions are useful, with Google Analytics 4. Legal basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time from «Cookie preferences».
• Site security and operation. Purpose: to deliver the pages, protect them from attacks and bots and diagnose errors, including those of the form. Data: IP address and technical connection data, processed by Cloudflare and, when the form loads, by HubSpot. Legal basis: our legitimate interest in keeping the site available and secure (art. 6.1.f GDPR).

What personal data we process

• Identifying and contact data: first name, surname, email address and, if you provide them, telephone number and the message you write.
• Browsing and interaction data: only if you accept analytics cookies, linked to a pseudonymous identifier of your browser (not to your name). We record the pages visited and four actions: pressing a button, seeing the form, submitting it and switching language. Never the content of what you type. See the Cookie policy.
• The fields marked as mandatory in the forms are necessary to handle your request; without them we cannot do so.

How long we keep your personal data

We keep each piece of data only for as long as the purpose for which we collected it lasts, according to these criteria:

• Demo request and booking: while we handle your request and, if no contractual relationship follows, only for as long as it remains reasonable to keep the contact you asked for; you can ask for its deletion at any time.
• Dossier delivery: as long as needed to send it to you and to answer the queries that arise from it; it is not extended because other data of yours is kept for another purpose.
• Commercial communications: until you unsubscribe or withdraw your consent.
• Measurement with Google Analytics 4: the _ga and _ga_* cookies stay in your browser for the time stated in the Cookie policy and are deleted if you reject or withdraw consent; the data Google Analytics stores follows the retention period configured on our property.
• Technical security logs (Cloudflare and server): each service's own rotation period, limited to what is needed to protect the site and diagnose errors.
• After those periods the data is blocked while liabilities arising from the processing may still arise (art. 32 LOPDGDD) and is then deleted. Applicable legal obligations may require some data to be kept for longer.

Who we share your data with

Cloud y Olé will not share your personal data with third parties, except in the following cases:

• Legal obligations: where required by law.
• Service providers: to deliver our services we may share your data with third parties acting on our behalf, such as technology providers. These providers act on our behalf; HubSpot, in addition, uses its own system to measure the use of the branding on its forms, as stated in the Cookie policy.
• HubSpot (HubSpot, Inc.): the demo and dossier forms are served by HubSpot, which acts as a processor and hosts the CRM data in its European region. When it loads, the form also sends technical metrics to HubSpot servers.
• Calendly (Calendly LLC): if you choose a slot after sending the demo request, it receives your name and email so that you can book it. It acts as a processor. For the booking, your name and email travel in the address (URL) of the calendar, and Calendly in turn loads Stripe, among other sub-processors, for the anti-fraud check of the booking.
• Cloudflare (Cloudflare, Inc.): provides the delivery network, security and encryption of the site, so it processes the IP address and technical data of each visit. It acts as a processor.
• Web analytics: if you accept analytics cookies, Google Ireland Limited processes aggregate usage data on our behalf through Google Analytics 4. You may withdraw this consent at any time from the Cookie policy.

Infrastructure and international transfers

The site is hosted on servers located in the European Union. Some of the providers above, HubSpot, Calendly (and its sub-processors, such as Stripe), Google and Cloudflare, are US companies or belong to US groups and may process data outside the European Economic Area. Those transfers rely on the EU-US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795) for the providers certified under it and, in any case, on the European Commission's standard contractual clauses included in their processing agreements.

Your rights as a data subject

You have the right to:

• Access: obtain confirmation of whether we process your personal data and access it.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your data when it is no longer necessary for the purposes it was collected for.
• Objection: object to the processing of your personal data, unless there are compelling legitimate grounds to continue.
• Restriction of processing: request that processing be restricted in certain circumstances.
• Portability: receive your data in a common electronic format and transfer it to another controller.
• Withdraw your consent at any time, without affecting the lawfulness of the processing carried out before.

How to exercise them

To exercise your rights, write to contacto@cloudfortress.es from the address you gave us. Only if we have reasonable doubts about your identity will we ask you to prove it. Exercising these rights is free of charge.

If you believe we have not processed your data in accordance with current legislation, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).