1. Data Controller
The controller of personal data collected via the site cloudcapital.lu is:
Cloud Capital Sarl-S
RCS Luxembourg: B274858 — VAT: LU34770369
Establishment authorization: 10145408 / 0
Personal Data Contact: [email protected]
2. Data Collected and Purposes
| Category | Data | Purpose | Legal Basis |
|---|---|---|---|
| Contact Form | Name, email address, message | Processing of contact request | Legitimate interest (Art. 6.1.f GDPR) |
| Web Analytics | Aggregated data (Cloudflare Analytics, cookie-less) | Anonymous audience measurement | Legitimate interest (Art. 6.1.f GDPR) — no consent required |
| Consent Log | Pseudonymized identifier, consent categories, timestamp | Proof of consent (legal obligation) | Legal obligation (Art. 6.1.c GDPR) |
3. Retention Periods
- Contact form data: 3 years from the last contact.
- Consent log: 5 years (GDPR proof requirement).
- Aggregated analytical data: no personal data retained.
4. Data Recipients
The collected data is not sold or transferred to third parties. It may be transmitted to technical subcontractors strictly necessary for the operation of the service:
- Cloudflare, Inc. — hosting, protection against attacks, Turnstile (anti-bot). GDPR DPA signed.
- Brevo (Sendinblue SA) — routing of contact emails. Data handled within the EU.
5. Transfers outside the EU
Cloudflare is established in the United States. Transfers are covered by Standard Contractual Clauses (SCC) approved by the European Commission and by Cloudflare's DPA. No data is transferred to other third countries.
6. Your Rights
In accordance with the GDPR, you have the following rights:
- Right of access (Art. 15): obtain a copy of your data.
- Right to rectification (Art. 16): correct inaccurate data.
- Right to erasure (Art. 17): request deletion of your data.
- Right to restriction (Art. 18): limit processing under certain conditions.
- Right to data portability (Art. 20): receive your data in a structured format.
- Right to object (Art. 21): object to certain processing.
- Withdrawal of consent : withdraw your consent at any time without affecting the lawfulness of past processing.
To exercise these rights, contact us at: [email protected]. We will respond within thirty (30) days.
7. Right to lodge a complaint
You have the right to lodge a complaint with the competent supervisory authority:
National Commission for Data Protection (CNPD)
15, Boulevard du Jazz — L-4370 Belvaux
cnpd.public.lu
8. Cookies
Details of the cookies used, their purpose, and consent modalities are described in our Cookie Policy.
9. Modifications
We reserve the right to update this policy. The applicable version is the one published on this page with its effective date.
Last update: April 15, 2026.