Data controller and privacy contact
Data controller: Cloud-Fi.
This notice describes personal data processing in connection with cloud-fi.com and enquiries addressed to the Cloud-Fi project.
For information about processing or to exercise your rights, email privacy@cloud-fi.com. Explain the context of your request without sending unnecessary identity documents or personal data.
Data we process
- Browsing: IP address, page requests, date and time, technical browser information and server responses, to the extent recorded by the hosting service.
- Enquiries: name, email address and message, plus country, phone number and attachment if supplied. Name, email and message are needed to handle the form; the other fields are optional.
- Form security: technical session identifier, tokens and anti-spam proofs, temporary counters and identifiers derived from IP addresses to limit abuse.
- Preferences: the light or dark theme choice stored in your browser.
The form is not intended for passwords, access credentials, health data or other sensitive or confidential information unnecessary for an initial enquiry. Describe your project without including patient, client or third-party data unless an appropriate agreement and secure channel have been arranged.
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to enquiries about services, quotations or collaboration. | Steps at the data subject’s request before entering into a contract, where applicable (GDPR Article 6(1)(b)); for other business communications, legitimate interests in handling incoming enquiries (Article 6(1)(f)). |
| Providing the site, securing the form and preventing abuse. | Legitimate interests in security and proper operation (GDPR Article 6(1)(f)), taking users’ rights into account. |
| Meeting applicable legal obligations and protecting legal rights. | Legal obligations (GDPR Article 6(1)(c)) or legitimate interests in protecting rights, as appropriate. |
Sending an enquiry does not subscribe you to a newsletter or authorise promotional campaigns. The site does not require blanket consent simply to respond to a voluntary enquiry.
The form, anti-spam checks and country suggestion
The form forwards your enquiry by email. Attachments are handled temporarily by the server and included in the message; the site does not create a public attachment archive. Correspondence may remain in the mailbox and associated backups.
ALTCHA runs on this hosting and its proofs are checked server-side. Its resources and anti-spam checks are handled locally; an external CAPTCHA verification service is not configured. These security checks do not constitute an automated assessment of a person or a decision producing legal effects.
The suggested country is estimated from the IP address using a DB-IP Lite dataset consulted locally on the hosting. Your IP is not sent to DB-IP for that lookup. GPS location is not requested. The suggestion can be inaccurate, for example with VPNs or corporate networks, and you can change it. If no country is found, the Italian version defaults to Italy and the English version to the United Kingdom.
External links, including component attributions, open only when selected and lead to services governed by their own privacy notices.
Authorised people, providers and transfers
Data may be processed by authorised people handling Cloud-Fi enquiries and by technical providers needed for hosting, email and security. Data is not published or sold.
Hosting and SMTP delivery use Infomaniak services. The provider states that customer hosting data is stored on infrastructure in Switzerland. Switzerland benefits from a European Commission adequacy decision under GDPR Article 45. Where required, processors must act under appropriate agreements and instructions.
Data may also be disclosed where legally required or necessary to protect legal rights. You can request more details about the providers involved in a particular enquiry through the privacy contact.
Retention criteria
Enquiries and attachments are retained for the time needed to handle the communication and any subsequent discussions. If an enquiry results in a professional relationship, relevant records follow the retention periods associated with that relationship and applicable obligations. Further retention may be necessary for legal obligations or the protection of rights.
Uploaded files are temporary; copies included in emails follow the retention of correspondence. Logs, session data, anti-spam counters and backups follow system and hosting settings and security needs. Anti-spam counting windows extend up to twenty-four hours; this does not mean every technical file or log is automatically deleted when that window ends.
Actual deletion criteria must also be applied to email, devices used to handle enquiries and backups. You can ask for information about retention of your data.
Your rights
Where applicable and subject to the GDPR, you can request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing.
Email privacy@cloud-fi.com. Requests must be answered within the time limits in GDPR Article 12, normally one month, with reasoned extensions where permitted. Only information necessary to verify the requester’s identity may be requested.
You may also complain to a competent supervisory authority, including the Italian data protection authority, without first giving up other remedies.
Scope and updates
This notice covers the presentation website and initial enquiries. Work on client systems, support, access to third-party data or services involving specific processing requires assessment and documentation reflecting the actual relationship, including processor appointments under GDPR Article 28 where applicable.
This page does not constitute a general compliance certification. Its content must reflect the actual people, services and procedures involved and be updated when they change.