Privacy Policy

CLOUD HOST (Y1324210E)

Last updated: 21 March 2025

1. GENERAL INFORMATION

Cloud Host, with Tax ID (NIF) Y1324210E (hereinafter, “CLOUD HOST”, “we” or “our”), is responsible for processing the personal data you provide to us when using our website and web hosting and IT services.

This Privacy Policy is intended to inform you about how we collect, use, share and protect your personal data, as well as the rights available to you under the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights.

2. DATA CONTROLLER

Identity: Cloud Host
Tax ID (NIF): Y1324210E
Postal address: Calle Bonany, 94, 1, E, Vilafranca de Bonany, 07250, Spain
Email: dpo@palma.solutions
Phone: +34 971 560 060
Data Protection Officer (DPO): Mălin Cenușă

3. DATA WE COLLECT

Depending on your interaction with us, we may collect the following categories of personal data:

3.1. Data you provide directly:

• Identification data: first and last name, national ID/tax ID/foreigner ID number, postal address, email, phone number.
• Professional data: company, job title, sector.
• Billing data: banking information, tax details.
• Account data: username, password (stored encrypted).
• Communications: the content of emails, support requests and any other communication you have with us.

3.2. Data collected automatically:

• Technical data: IP address, browser type, device, operating system, unique device identifiers.
• Browsing data: pages visited, time spent, clicks, actions taken on our website.
• Service usage data: usage statistics, resource consumption, access logs, activity logs.

3.3. Data from third parties:

• Information from payment service providers.
• Information from digital identity providers if you use third-party sign-in options.

4. PURPOSES OF PROCESSING

We process your personal data for the following purposes:

4.1. Performance of a contract:

• Managing the provision of our web hosting and IT services.
• Processing your payments and billing.
• Providing technical support and customer service.
• Ensuring the security and performance of our services.

4.2. Legitimate interest:

• Improving our services and developing new features.
• Carrying out statistical and market analysis.
• Preventing fraud and ensuring the security of our network and services.
• Managing technical and security incidents.

4.3. Consent:

• Sending commercial communications about our products and services.
• Carrying out satisfaction surveys.
• Using non-essential cookies to improve the user experience.

4.4. Legal obligation:

• Complying with tax and accounting obligations.
• Responding to requests from public authorities.
• Retaining data for anti-money-laundering purposes where applicable.

5. LEGAL BASIS

The legal bases for processing your data are:

• Performance of a contract: when processing is necessary to provide the services you have contracted.
• Legitimate interest: when processing serves a legitimate interest of CLOUD HOST, provided your rights and freedoms do not override it.
• Consent: when you have given your explicit consent for specific purposes.
• Legal obligation: when processing is necessary to comply with legal obligations applicable to CLOUD HOST.

6. DATA RETENTION

We will retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting or reporting obligations.

6.1. Retention criteria:

• Contractual data: for the duration of the contractual relationship and up to 6 years after it ends, in accordance with commercial and tax regulations.
• Billing data: 6 years under tax regulations.
• Traffic and connection data: 12 months under the Data Retention Law.
• Data processed on the basis of consent: until you withdraw your consent.

Once the legal retention periods have elapsed, we will proceed to delete your data, ensuring its confidentiality.

7. RECIPIENTS OF YOUR DATA

Your personal data may be shared with:

7.1. Data processors:

• Technology service providers (hosting, security, backups).
• Payment service providers and financial institutions.
• Customer service and technical support providers.

7.2. Third parties under legal obligation:

• The Spanish Tax Administration and other tax authorities.
• State security forces, judges and courts.
• Other public authorities in compliance with legal obligations.

7.3. International transfers:

Should any international data transfer be necessary, it will be carried out with the appropriate safeguards under the GDPR, such as standard contractual clauses approved by the European Commission, binding corporate rules, or certification mechanisms.

8. YOUR RIGHTS

You have the following rights with regard to your personal data:

• Access: find out what personal data we process about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data when it is no longer necessary.
• Objection: object to the processing of your data for certain purposes.
• Restriction of processing: request that processing be restricted in certain circumstances.
• Portability: receive your data in a structured format and transmit it to another controller.
• Withdraw consent: for purposes based on consent, without affecting the lawfulness of prior processing.

8.1. How to exercise your rights:

You can exercise your rights by sending a request to:

• Postal mail: Calle Bonany, 94, 1, E, Vilafranca de Bonany, 07250, Spain
• Email: dpo@palma.solutions

Please include a copy of your national ID/foreigner ID or other identifying document with your request.

8.2. Complaints to the Supervisory Authority:

If you believe your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. SECURITY MEASURES

CLOUD HOST has implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of sensitive data.
• Access controls and authentication.
• Regular backups.
• Disaster recovery procedures.
• Staff training on data protection.
• Regular security audits.

10. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies to improve your browsing experience, analyse site usage and personalise content. For more information, see our Cookie Policy.

11. CHILDREN’S DATA

Our services are not directed at anyone under 18 years of age. We do not knowingly collect data from minors. If we discover that we have collected personal data from a minor without verifiable parental consent, we will take steps to delete that information from our servers.

12. CHANGES TO THIS PRIVACY POLICY

CLOUD HOST reserves the right to amend this Privacy Policy to reflect legislative, doctrinal or interpretive developments from the Spanish Data Protection Agency. In such cases, we will announce the changes with reasonable notice before they take effect, via our website and, where appropriate, by email.

13. CONTACT

If you have any questions about this Privacy Policy or the processing of your personal data, you can contact us at:

• Postal mail: Calle Bonany, 94, 1, E, Vilafranca de Bonany, 07250, Spain
• Email: dpo@palma.solutions
• Phone: +34 971 560 060

---

This Privacy Policy was last updated on 21 March 2025.