Privacy Statement

This statement explains what personal data CloudStraight collects when you visit this website or get in touch with us, why we use it, and the rights you have. We keep it short because we collect very little.

Who we are

The controller of your personal data is CloudStraight Technology Computing P.C., trading as CloudStraight. Its registered office is at Tsounia 9, Marousi 15126, Athens, Greece. You can contact us about anything in this statement at info@cloudstraight.com.

What we collect and why

When you contact us

If you send us an enquiry, by the contact form or by email, we receive the details you give us: your name, business email address, company, role (optional), the area you are interested in and the message you write. We use them to read and answer your enquiry and to discuss a possible project with you.

Our legal basis is our legitimate interest in responding to business enquiries and, where you ask us about a service, taking steps at your request before entering into a contract. Name, email, company, area of interest and message are needed for us to reply. The role field is optional.

When you visit the website

Like any website, the infrastructure that hosts this site processes technical data such as your IP address, the pages requested, the date and time, and your browser type. We use this to deliver the site, keep it secure and fix faults. Our legal basis is our legitimate interest in running a secure and reliable website.

What we do not do

We do not use advertising or analytics trackers on this website, we do not build profiles of visitors, and we do not make decisions about you by automated means. We do not send marketing emails unless you have asked us to or agreed to receive them.

Cookies

This website does not currently set cookies or use similar technologies for analytics, advertising or tracking, and it loads its fonts and scripts from its own servers. If that changes, we will ask for your consent where the law requires it and update this page first.

Who we share data with

We do not sell personal data. We use trusted service providers to run the website and handle enquiries, including Amazon Web Services for hosting and for receiving and delivering contact messages. They process data only on our instructions and under data protection terms. We may also share data where the law requires it, or to protect our legal rights.

Our site links to LinkedIn and other external sites. Their privacy practices are their own, so please read their policies if you follow those links.

Where data is processed

We use AWS infrastructure in the Europe (Frankfurt) Region. Enquiries sent through the contact form are processed and sent by email from there. Web pages are delivered through AWS CloudFront, a global network, so your request may be handled by a server close to you. If personal data is transferred outside the European Economic Area, we make sure an appropriate safeguard is in place, such as the European Commission's standard contractual clauses or an adequacy decision.

How long we keep it

We keep enquiries for as long as needed to deal with them and for a reasonable period afterwards, normally no more than 24 months, unless we begin working together, in which case we keep the information that our contract and our legal obligations require. Technical server logs are kept for a short period and then deleted or anonymised.

How we protect it

We protect personal data with technical and organisational measures appropriate to the risk, including encryption in transit, restricted access and the security controls of our cloud provider. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• ask for access to the personal data we hold about you;
• ask us to correct data that is inaccurate or incomplete;
• ask us to erase your data, in certain circumstances;
• ask us to restrict how we use it, in certain circumstances;
• receive the data you gave us in a portable format, where it applies;
• object to processing based on our legitimate interests.

To use any of these rights, write to info@cloudstraight.com. We will respond within one month. You also have the right to complain to your data protection authority. In Greece this is the Hellenic Data Protection Authority (dpa.gr). We would appreciate the chance to address your concern first.

Children

This website is intended for business users and is not directed at children. We do not knowingly collect personal data from children.

Changes to this statement

We may update this statement from time to time, for example if we add new features to the website. The date at the top shows when it was last changed.