Privacy Policy

Data controller

The controller of personal data processed through this website is:

Questions concerning privacy or the processing of personal data may be sent to the email address indicated above.

Scope of this Privacy Policy

This Privacy Policy applies to personal data processed in connection with the website available at cloudforgeit.pl, including:

• visiting and using the website;
• sending a message through the contact form;
• contacting CloudForge directly by email;
• technical operation, security and maintenance of the website.

This policy does not automatically apply to external websites or services linked from this website. Those services may process information under their own privacy policies.

Categories of data processed

Depending on how you use the website, the following categories of personal data may be processed:

Data provided through the contact form

• name;
• email address;
• message subject;
• message content;
• any other information voluntarily included in the message.

Technical and connection data

• IP address;
• date and time of the request;
• requested page or resource;
• browser and device information;
• operating system information;
• HTTP response status;
• referring page, where supplied by the browser;
• information related to website security and error diagnostics.

You are not required to provide personal data merely to browse the public sections of the website.

Purposes and legal bases of processing

Personal data may be processed for the following purposes:

Responding to inquiries

Data submitted through the contact form or by email is processed to read the inquiry, communicate with the sender and provide a response.

The legal basis is the controller’s legitimate interest in handling correspondence and communicating with people who contact the business, pursuant to Article 6(1)(f) GDPR.

Taking steps before entering into a contract

When an inquiry concerns a potential service, quotation, cooperation or contract, processing may be necessary to take steps at the request of the person concerned before entering into a contract, pursuant to Article 6(1)(b) GDPR.

Establishing or defending legal claims

Correspondence and related records may be retained where necessary to establish, exercise or defend legal claims. The legal basis is the controller’s legitimate interest under Article 6(1)(f) GDPR.

Website operation and security

Technical data may be processed to provide the website, diagnose errors, prevent abuse, maintain server security and ensure the reliable operation of the service. The legal basis is the controller’s legitimate interest under Article 6(1)(f) GDPR.

Compliance with legal obligations

Data may also be processed where required to comply with legal, accounting, tax or regulatory obligations under Article 6(1)(c) GDPR.

Contact form and email communication

The contact form sends the information entered by the user to the CloudForge email address. The form requires a name, email address, subject and message so that the inquiry can be identified and answered.

Providing this information is voluntary, but without the required contact information it may not be possible to respond.

Messages submitted through the form may also include the sender’s IP address and browser identification information for security, abuse prevention and technical diagnostics.

Server logs

Like most websites, the server hosting this website may automatically record technical information concerning requests made to the website.

Server logs may be used for:

• maintaining website availability;
• detecting malicious requests and attempted attacks;
• preventing spam and automated abuse;
• investigating technical errors;
• creating basic technical statistics;
• protecting the server and related services.

Server log information is not used to make decisions about users or to create advertising profiles.

Cookies and local storage

The current version of the website does not use advertising cookies, behavioural profiling cookies or third-party analytics cookies.

The website may use strictly necessary technical storage where required for security, correct functionality or maintaining a user-requested service. Such technical mechanisms are not used for advertising.

The website loads fonts from Google Fonts. When these font resources are requested, the visitor’s browser may connect to infrastructure operated by Google and transmit technical connection data such as the IP address and browser information.

Browser settings may be used to block or delete cookies and other stored website data. Blocking strictly necessary storage may affect certain website functions.

Recipients of personal data

Personal data may be disclosed only where necessary to operate the website, provide communication services or comply with the law.

Potential recipients or categories of recipients include:

• hosting and server infrastructure providers;
• email and domain service providers;
• IT maintenance and technical support providers;
• accounting, legal or advisory providers where necessary;
• public authorities where disclosure is required by law.

Service providers may process data on the controller’s behalf only within the scope necessary to provide their services and subject to applicable data-protection obligations.

Personal data is not sold to third parties.

International data transfers

The primary website and email infrastructure is intended to operate within the European Economic Area.

Certain externally supplied resources, such as Google Fonts, may involve processing by international service providers. Depending on the provider’s technical infrastructure, data may be processed outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, such transfer should take place using a mechanism permitted by applicable data-protection law, such as an adequacy decision or approved contractual safeguards.

Data retention

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected.

• General inquiries may be retained for the period needed to respond and complete the correspondence.
• Pre-contractual or business correspondence may be retained for the duration of negotiations and, where relevant, for the duration of the resulting business relationship.
• Data necessary for legal claims may be retained until the applicable limitation period expires.
• Data required by accounting, tax or other legal obligations may be retained for the period specified by applicable law.
• Technical server logs are generally retained for a limited period necessary for security, maintenance and troubleshooting.

Data may be deleted earlier where it is no longer required and no legal basis exists for further processing.

Your data-protection rights

Subject to the conditions and limitations set out in the GDPR, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• request data portability where applicable;
• withdraw consent at any time where processing is based on consent, without affecting earlier lawful processing;
• lodge a complaint with a competent data-protection supervisory authority.

Requests may be sent to contact@cloudforgeit.pl . Additional information may be requested where necessary to confirm the identity of the person making the request.

In Poland, complaints concerning personal-data processing may be submitted to the President of the Personal Data Protection Office:

Data security

Appropriate technical and organisational measures are used to protect personal data against accidental loss, unauthorised access, unlawful disclosure, alteration or destruction.

These measures may include:

• encrypted HTTPS connections;
• restricted administrative access;
• server and firewall configuration;
• spam and abuse-prevention mechanisms;
• software updates and security maintenance;
• access logging and service monitoring;
• backup and recovery procedures where appropriate.

No method of internet transmission or electronic storage can guarantee absolute security. Measures are therefore reviewed and adjusted according to the nature and risk of the processing.

Automated decision-making

Personal data collected through this website is not used for automated decision-making or profiling that produces legal effects or similarly significant effects for the user.

Automated security mechanisms may identify spam, suspicious traffic or excessive form submissions. These mechanisms are used only to protect the website and its communication systems.

Children’s privacy

The website and the services presented on it are intended for business and professional users. The website is not directed specifically to children.

CloudForge does not knowingly request personal data from children through this website. A parent or legal guardian who believes that a child has submitted personal data may contact the controller to request its review or deletion.

Changes to this Privacy Policy

This Privacy Policy may be updated when the website, processing practices, service providers or applicable legal requirements change.

The current version will be published on this page. The effective date displayed at the beginning of the policy identifies the latest published version.

Privacy contact

Questions, requests or concerns relating to this Privacy Policy or personal-data processing may be sent to: