Cloud Agency

Privacy policy

Last updated: 30 October 2026

This English version is provided for convenience. If it differs from the Polish version, the Polish version prevails.

This policy explains what personal data Cloud Agency collects, for what purpose, on what legal basis and what rights you have. It applies to the website cloud-agency.org (Polish and English versions) and to contact about our services.

1. Data controller

The controller of your personal data is Daniel Walusiak, a sole trader in Poland operating under the brand “Cloud Agency” (“Cloud Agency”).

Contact on personal data: [email protected]. We provide a postal address on request.

2. What data we collect

Data you provide yourself

  • your name (or the name you introduce yourself with),
  • your email address,
  • your phone number — only if you provide it (the field is optional),
  • the address of your website — if you enter it in the contact form or order an audit,
  • the content of the message you send us.

You provide it in the website form, by email or through Instagram. Providing data is voluntary, but without an email address we cannot reply to the form.

Data collected automatically

The website does not use analytics, advertising or tracking tools (Google Analytics, pixels, etc.) and does not load resources from external servers — fonts and scripts are hosted locally on the same domain. Our hosting provider (Netlify) keeps standard server logs (IP address, date and time of the request, browser type) for security and to deliver the site — this processing takes place on Netlify’s side.

3. Purposes and legal bases

  • Replying to a form message or email and taking steps before a contract is concluded (including preparing a demo) — Art. 6(1)(b) GDPR.
  • Preparing and sending the website audit you ask for — Art. 6(1)(b) GDPR (acting at your request).
  • An automatic confirmation that your enquiry arrived, sent to your email address — Art. 6(1)(b) and (f) GDPR (legitimate interest: letting you know your enquiry arrived).
  • Ongoing communication, site security and defence against possible claims — Art. 6(1)(f) GDPR (the controller’s legitimate interest).
  • Issuing and keeping accounting documents if a contract is concluded — Art. 6(1)(c) GDPR (legal obligation).

The box next to the form confirms that you have read this policy; it is not marketing consent. We do not send newsletters or offers you have not asked for.

4. How long we keep data

  • Correspondence and enquiries (including audits) that did not lead to cooperation — up to 12 months after the last contact, then we delete them.
  • Data related to performing a contract — for the duration of the contract and the limitation period for claims.
  • Accounting documents — for the period required by law (generally 5 years).

5. Recipients of data

Your data may be entrusted to providers that support us technically:

  • the automation tool n8n, which receives form submissions and sends confirmations — [TO COMPLETE: where n8n runs — e.g. n8n Cloud (n8n GmbH, Germany) or your own server in …],
  • our email provider — Google Ireland Ltd. / Google LLC (Gmail),
  • our hosting and content delivery provider — Netlify, Inc.,
  • Meta Platforms Ireland Ltd. — if you write to us on Instagram (Meta acts as a separate controller under its own rules),
  • an accounting firm — if we work together and an accounting obligation arises.

We do not sell data and do not share it with third parties for marketing.

6. Transfers outside the EEA

Some providers in section 5 (Google, Netlify, Meta) are based or have servers in the USA, so your data may be processed outside the European Economic Area. This takes place on the basis of standard contractual clauses or the Data Privacy Framework, which ensure an adequate level of protection.

7. Your rights

You have the right to access your data, rectify it, erase it, restrict processing, data portability and to object to processing based on legitimate interest. To exercise these rights, write to [email protected].

You may also lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office in Poland (Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw), or the authority in your own country.

8. Cookies and browser storage

The website does not use cookies or the browser’s local storage (localStorage), so we do not show a cookie banner. If that changes (for example we add analytics), we will update this policy and ask for consent where it is required.

9. Automated decisions and profiling

We make no automated decisions about you and do not profile you. Automatic messages are only confirmations that your enquiry arrived.

10. Changes to this policy

If we change how we process data, we will update this page and the date at the top.

11. Contact

Privacy questions: [email protected].