Privacy
Privacy and cookies
What we collect, why, who helps us process it, how long we keep it, and how to exercise your rights.
1. Who is responsible for your data
The controller of the personal data described here is:
- Cloud on Demand SRL
- Tax ID (CUI): 47352267
- Registered office: Str. Valea Doftanei 131A, Sector 6, București
- Email for privacy matters: privacy@cloudondemand.ro
We have not appointed a data protection officer, because the law does not require one for our activity. Send any privacy question to the email above.
2. What we collect, why, and for how long
We collect data directly from you, from your browser when you visit, or from tools you choose to use on this site. You are never obliged to give us data, but we cannot answer you or book a call without the details needed for that.
| Purpose | Data | Legal basis | Kept |
|---|---|---|---|
| Answering your messages and enquiries | Name, email address, and whatever you write to us. | Steps at your request before entering a contract (GDPR Art. 6(1)(b)) and our legitimate interest in answering enquiries (Art. 6(1)(f)). | Up to 24 months after our last contact, unless we start working together (then the contract terms apply). |
| Booking a discovery call | Name, email address, time zone, the time you choose, and the answers you give to booking questions. | Steps at your request before entering a contract (Art. 6(1)(b)). | Up to 24 months after the call, then deleted. |
| Understanding how the site is used (analytics) | Pages visited, clicks, approximate device, browser and referrer information, and a random identifier stored in your browser. No name or email is collected. | Your consent (Art. 6(1)(a)), which you can withdraw at any time. Nothing is collected unless you accept analytics. | Up to 12 months. |
| Remembering your choices on this site | Your cookie choice, language and theme (light or dark), stored in your browser. | Strictly necessary for the site you asked for and to prove your consent choice (Art. 6(1)(f) and the exemption for necessary storage in Law 506/2004). | Cookie choice: 6 months. Language and theme: until you clear your browser data. |
| Delivering and protecting the website | Technical data such as your IP address, request time and browser type, processed by our hosting provider. | Our legitimate interest in running a secure, working website (Art. 6(1)(f)). | As set by the hosting provider, generally a few days to a few weeks. |
We do not sell personal data, we do not use it for advertising, and we do not make decisions about you by automated means, including profiling, that have legal or similarly significant effects.
3. Who receives your data
These providers process data on our behalf, under data processing terms, and only as needed for the purpose shown. We may also disclose data where the law requires it, for example to a public authority.
| Provider | What it does | Where data is processed |
|---|---|---|
| PostHog | Analytics, only if you accept it. | European Union (Frankfurt). We use the EU region of PostHog Cloud. |
| Cal.com | Booking calendar. It is loaded only if you allow it or click to load it. | Cal.com Cloud is hosted in the United States by default. |
| Cloudflare | Hosting, content delivery and security of this website. | A global network. Cloudflare is a United States company. |
| Our business email provider | Receives and stores the emails you send us. | As set out in the provider's terms. |
4. Transfers outside the European Economic Area
Some providers are based in, or process data in, the United States, notably Cal.com for bookings and Cloudflare for delivering the site. Where personal data leaves the EEA, we rely on the safeguards in the provider's data processing terms, such as the European Commission's Standard Contractual Clauses or an EU-US Data Privacy Framework certification. Analytics (PostHog) uses the EU region. You can ask us for a copy of the safeguards, using the email in section 1.
5. Cookies and similar storage
We use cookies and local storage in line with Law 506/2004 and the GDPR. The necessary items work without your consent. Analytics and the booking calendar load only after you allow them in the cookie banner, and refusing is as easy as accepting. You can change your choice at any time with “Cookie settings” in the footer, or by clearing your browser data. Withdrawing consent does not affect what was done before.
| Name | Set by | Purpose | Kept | Type |
|---|---|---|---|---|
| cc_cookie | This site | Stores your cookie choices. | 6 months | Necessary |
| cod-theme-preference | This site | Remembers light or dark theme (local storage). | Until you clear it | Necessary |
| cod-language | This site | Remembers the language you chose (local storage). | Until you clear it | Necessary |
| ph_…_posthog | PostHog | Anonymous usage statistics (cookie and local storage). | Up to 12 months | Analytics, with consent |
| Set by Cal.com | Cal.com | Runs the booking calendar on the contact page. The names and lifetimes are set by Cal.com. | Set by Cal.com | Booking calendar, with consent |
6. Your rights
Under the GDPR you have the right to:
- access your data and get a copy of it;
- have inaccurate data corrected;
- have your data erased, in the cases the law provides;
- restrict how we use your data;
- receive your data in a portable format where the processing is based on consent or a contract;
- object to processing based on our legitimate interest;
- withdraw your consent at any time, as easily as you gave it.
To use any of these rights, email privacy@cloudondemand.ro. We may ask you to confirm your identity so that we do not give your data to someone else. We reply within one month, and can extend this by up to two more months for complex requests, telling you why. There is no charge, unless a request is clearly unfounded or excessive. We handle requests ourselves, in the tools listed above.
Because analytics data is stored under a random identifier and not your name, we can only find it if you give us that identifier, which you can find in your browser's storage for this site.
7. Complaints
If you think we have handled your data unlawfully, please contact us first so we can put it right. You also have the right to complain to the Romanian supervisory authority, or to the authority in the EU country where you live or work:
- National Supervisory Authority for Personal Data Processing (ANSPDCP)
- B-dul G-ral Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, 010336
- Email: anspdcp@dataprotection.ro | www.dataprotection.ro
8. Security and children
The site is served over HTTPS, and access to the tools that hold your data is limited to the people who need it. This website is for businesses and is not directed at children under 16, and we do not knowingly collect their data.
9. Changes to this notice
We update this page when our tools, providers or practices change. The date at the top shows the latest version. See also our website terms.