CloudTech / Privacy and data

Privacy policy

This notice describes data processing connected with the public CloudTech Consulting website and direct contact with the company. Separate activities, such as recruitment or contract delivery, may have their own privacy notices.

Data controller

The controller is CloudTech Consulting spółka z ograniczoną odpowiedzialnością, with its registered office at ul. Marynarska 13, 02-674 Warsaw, Poland, entered in the National Court Register under KRS number 0000965893, tax number NIP 5213964457.

gdpr@cloudtech.consulting

What we process and why

When you contact us through a form, by email or by phone, we process the information you provide — usually your name, contact details, enquiry and the information needed to respond.

If a contact form is available on the website, its contents are stored as a submission in the content-management system and made available only to authorised personnel.

We use enquiry data to reply and continue the correspondence. If you are a party to a prospective or existing contract, the basis for steps taken at your request is Article 6(1)(b) GDPR. In other cases, the basis is our legitimate interest in handling correspondence and protecting legal claims under Article 6(1)(f) GDPR.

The server environment may process technical request data such as an IP address, time, requested URL and browser information. We use it to deliver the website, keep it secure and diagnose errors, based on our legitimate interest in reliable and secure operation under Article 6(1)(f) GDPR.

Cookies and local storage

The public website currently contains no analytics or advertising tools. We do not create marketing profiles of visitors.

The website may store the selected theme in your browser under the local-storage key “payload-theme”. It remains on your device and is used only to remember the interface setting.

The content-management panel and authorised preview use strictly necessary authentication and preview cookies, including “payload-token” and “__prerender_bypass”, to sign in an authorised user and protect access. A public visitor does not need such an account.

Recipients and international transfers

Authorised personnel and providers of IT infrastructure, hosting and business email may access data only to the extent needed to provide their services. We may also disclose data to a competent authority where the law requires it.

We do not sell personal data. Before using a provider that would process data outside the European Economic Area, we will verify the transfer basis, apply the required safeguards and update this notice.

How long we keep data

We retain correspondence for as long as needed to deal with an enquiry or relationship, and then only for as long as legal duties or the establishment, exercise or defence of legal claims require.

Technical data is kept for the period needed to secure and diagnose the website. The theme preference remains in the browser until the user removes it. Administrator session data expires or is removed after the session in accordance with the authentication configuration.

Your rights

Depending on the purpose and legal basis, you may request access, rectification, erasure, restriction or portability of your data. You may also object to processing based on our legitimate interests.

To exercise a right, email gdpr@cloudtech.consulting. We may ask for information necessary to confirm your identity.

You may also lodge a complaint with the President of the Polish Personal Data Protection Office.

Information about rights and complaints to the Polish supervisory authority

Providing data and automated decisions

Providing data in an enquiry is voluntary, but without contact details or enough information about the matter we may be unable to respond. We do not make decisions about website visitors based solely on automated processing and do not profile them in the processes described here.

Changes to this notice

This notice describes the website version current on 27 August 2026. We will update it before enabling new forms, analytics, advertising or other processes that change how personal data is handled.