Legal
Privacy Policy
1. Data Controller
The data controller for personal data processed in connection with this website and Cloudsol OÜ services is:
Cloudsol OÜ
Registration No: 14229249
VAT: EE101963415
Pärnu mnt 139e/2-8, Kesklinna linnaosa, Tallinn, Harju maakond, 11317, Estonia
Privacy contact:
2. Data We Collect
Cloudsol OÜ processes the following categories of personal data:
- Business contact data: Name, company name, email address, phone number — collected through the contact form, email correspondence, and service agreement processes.
- Billing and invoicing data: Company registration number, VAT number, billing address, and payment method details — collected and processed for invoicing and tax compliance.
- Infrastructure operational data: Service logs, access logs, IP addresses, and technical operational data associated with service delivery.
- Website server logs: Standard web server access logs (IP address, request timestamp, requested resource, referrer, user agent) retained for security and operational monitoring purposes.
- Email correspondence: Business communications related to service inquiries, service delivery, and support.
Cloudsol OÜ does not collect sensitive personal data (special categories under GDPR Article 9). Cloudsol OÜ does not provide consumer-facing services and does not intentionally process personal data of individuals who are not business representatives.
3. Legal Basis for Processing
Processing is conducted under the following legal bases (GDPR Article 6):
- Contact and inquiry data: Legitimate interests (Article 6(1)(f)) — responding to business inquiries and facilitating commercial relationships.
- Contractual and billing data: Performance of contract (Article 6(1)(b)) — necessary for delivering services and managing the commercial relationship.
- Infrastructure operational logs: Legitimate interests (Article 6(1)(f)) — maintaining service integrity, security monitoring, and abuse detection.
- Legal compliance data: Compliance with legal obligations (Article 6(1)(c)) — including tax record-keeping, sanctions compliance, and responding to lawful regulatory requests.
4. Purposes of Processing
Personal data is processed for the following purposes:
- Service delivery and infrastructure operation
- Contract management and invoicing
- Responding to business inquiries submitted via the contact form or email
- Security monitoring and incident response
- Abuse report processing and enforcement
- Compliance with legal obligations, including tax law and sanctions screening
- Internal record-keeping
Cloudsol OÜ does not use personal data for marketing, profiling, or advertising. Personal data is not sold to third parties under any circumstances.
5. Data Retention
Cloudsol OÜ retains personal data for the following periods:
- Client contact and contract data: Duration of the service contract plus 7 years (consistent with Estonian accounting and tax law requirements).
- Billing records and invoices: 7 years from the date of the transaction, as required by applicable tax law.
- Infrastructure operational logs: 90 days from generation, unless longer retention is required for an ongoing security investigation or legal obligation.
- Contact form inquiries (non-converted to clients): 12 months from the date of submission, after which the inquiry data is deleted.
- Website server access logs: 90 days, after which they are deleted or anonymized.
Where data retention is required by law beyond these periods, data will be retained for the legally mandated period and deleted thereafter.
6. Third-Party Processors
Cloudsol OÜ may engage third-party processors to support service delivery. All processors are bound by GDPR Article 28 data processing agreements. Categories of processors include:
- Email infrastructure providers: For operational email delivery (service notifications, invoicing).
- Hosting and server providers: For website and operational infrastructure hosting.
Cloudsol OÜ does not share personal data with third parties for marketing, analytics, or commercial purposes. Data is shared with law enforcement or regulatory authorities only where required by applicable law.
Where Cloudsol OÜ processes personal data on behalf of a Client within infrastructure environments, Cloudsol OÜ acts as a data processor under the applicable Service Agreement. A Data Processing Agreement (DPA) may be provided upon request where required under GDPR Article 28.
7. International Transfers
Cloudsol OÜ primarily processes personal data within the European Economic Area (EEA). Where third-party processors are used, Cloudsol OÜ ensures that any processing outside the EEA is conducted under appropriate safeguards, including: (a) adequacy decisions by the European Commission; or (b) Standard Contractual Clauses (SCCs) as adopted by the European Commission under GDPR Article 46.
8. Your Rights
As a data subject under GDPR, you have the following rights with respect to your personal data:
- Right of access: Request a copy of personal data Cloudsol OÜ holds about you (Article 15).
- Right to rectification: Request correction of inaccurate or incomplete personal data (Article 16).
- Right to erasure: Request deletion of personal data where processing is no longer justified ("right to be forgotten") (Article 17).
- Right to restriction: Request that processing be limited in defined circumstances (Article 18).
- Right to data portability: Receive personal data in a structured, commonly used, machine-readable format (Article 20).
- Right to object: Object to processing based on legitimate interests (Article 21).
- Right to withdraw consent: Where processing is based on consent, withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact: . Requests will be responded to within one month in accordance with GDPR Article 12.
You also have the right to lodge a complaint with the competent supervisory authority. In Estonia, this is the Data Protection Inspectorate (Andmekaitse Inspektsioon): www.aki.ee
9. Cookies
This website uses essential technical cookies only. Essential cookies are strictly necessary for the operation of the website (for example, the CSRF token used in the contact form). No tracking cookies, analytics cookies, or marketing cookies are used.
As only essential cookies are used, no consent banner is required. If analytics or non-essential cookies are introduced in the future, an opt-in consent mechanism will be implemented prior to any such change.
10. Contact for Privacy Inquiries
For any privacy-related inquiries, data subject rights requests, or questions about this policy:
Cloudsol OÜ — Privacy
Email:
Postal: Pärnu mnt 139e/2-8, Kesklinna linnaosa, Tallinn, Harju maakond, 11317, Estonia
11. Policy Updates
This Privacy Policy is reviewed periodically and updated to reflect changes in Cloudsol OÜ's data processing activities, applicable law, or regulatory guidance. Material changes will be communicated to active Clients by email with a minimum of 30 days' notice prior to the effective date of the change.
The current version of this policy is always available at cloudsol.ee/privacy.php. The effective date of the current version is stated at the top of this document.