1. Privacy at a glance
This policy applies to the public website at cloudsquid.io. It does not describe how customer data is processed inside the Cloudsquid product; that processing is governed by the applicable customer agreement and Data Processing Agreement.
We process technical data required to deliver and secure the website. If you contact us, we process the information you provide so we can respond. With your consent, we also use analytics, advertising, and business-visitor identification tools. You can change your cookie choices at any time through the .
2. Who is responsible
Controller
Cloudsquid GmbH
Torstraße 19
10119 Berlin
Germany
Managing Directors: Michael McCarthy and Filip Rejmus
Email: info@cloudsquid.io
Cloudsquid has not appointed a Data Protection Officer. Privacy and data protection enquiries can be sent to the email address above.
3. Website delivery, hosting, and security
Cloudflare
We use Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States, to host, deliver, protect, and operate this website. When you access the website, Cloudflare may process your IP address, requested URL, date and time, request headers, device and browser information, and security-related events. This is necessary to deliver the website, prevent abuse, and maintain its security and reliability.
The legal basis is our legitimate interest in providing a secure and reliable website under Art. 6(1)(f) GDPR. Cloudflare acts as our processor for these services. Further information is available in Cloudflare’s Privacy Policy and Data Processing Addendum.
Transport encryption
The website uses TLS encryption to protect information transmitted between your browser and our website.
4. Contact requests and forms
Demo and contact forms
When you submit a form, we may collect your first and last name, business email address, company, job title, telephone number, message, page information, and your marketing-consent choice. We use this information to respond to your request, arrange a demonstration, and manage the resulting business relationship.
Our forms are delivered through our website and forwarded to HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland. HubSpot provides our customer relationship management, form, support-chat, and marketing systems.
If your request concerns a contract or pre-contractual steps, the legal basis is Art. 6(1)(b) GDPR. Otherwise, it is our legitimate interest in responding to business enquiries under Art. 6(1)(f) GDPR. Marketing communications are sent only with consent under Art. 6(1)(a) GDPR, which you may withdraw at any time.
Fields marked as required are needed so we can understand and respond to your request. If you do not provide them, we may be unable to answer or arrange a demonstration. Any other information is optional.
Email and telephone
If you contact us by email or telephone, we process your contact details, the contents of your request, and related correspondence for the same purposes and on the same legal bases.
5. Cookies and consent choices
We use HubSpot’s consent-management technology to request and record your cookie choices. HubSpot may process your consent selection, time of selection, IP address, browser and device information, and a consent identifier. Necessary technologies are used to remember your choice and deliver requested website functionality.
Non-essential analytics, advertising, and identification technologies are disabled until you give the relevant consent. The legal basis for storing or accessing non-essential information on your device is your consent under § 25(1) TDDDG; the related processing of personal data is based on Art. 6(1)(a) GDPR.
You can refuse non-essential cookies without losing access to the public website. You can also change or withdraw your choice at any time through . Withdrawal does not affect processing that was lawful before withdrawal.
For details about cookies set by HubSpot, see HubSpot’s cookie documentation.
6. Analytics, advertising, and visitor identification
If you consent to the relevant category, we use the services below. Depending on the service, they may process IP address, cookie or device identifiers, browser and device data, visited pages, referrer, approximate location, interactions, and conversion events. Some providers may combine this information with information they already hold, as described in their own privacy policies.
Google Analytics 4 and Google Ads
Google Ireland Limited helps us understand website usage, measure campaigns, and attribute conversions. Google may use cookies and similar identifiers. Google Privacy Policy
LinkedIn Insight Tag
LinkedIn Ireland Unlimited Company helps us measure campaign performance, understand professional audiences, and create advertising audiences. LinkedIn Privacy Policy
Reddit Pixel
Reddit Ireland Limited helps us measure advertising performance and build advertising audiences. Reddit Privacy Policy
X advertising tag
X Internet Unlimited Company helps us measure advertising performance and conversions. X Privacy Policy
RB2B
GetEmails, LLC, doing business as RB2B, helps us identify business website visitors and may match visits with company or professional business-contact information. RB2B Privacy Policy and opt-out information
HubSpot analytics
HubSpot helps us measure website activity, associate consented visits with business enquiries, and operate our CRM and support tools. HubSpot Privacy Policy
The legal basis for these services is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Where a provider uses data for its own purposes, its privacy policy explains its role and available choices. Advertising technologies can involve profiling for measurement and audience creation, but Cloudsquid does not use the public website to make decisions that produce legal or similarly significant effects about you.
7. Online meetings
We use Google Meet, provided by Google Ireland Limited, and Microsoft Teams, provided by Microsoft Ireland Operations Limited, for calls with prospects, customers, and business partners. These services may process your name, email address, account details, IP address, device and connection data, meeting metadata, chat messages, and content you choose to share.
Meetings may be recorded only after this is clearly announced and every participant has given consent during the call. Recordings can contain audio, video, screen shares, chat, and transcriptions. The legal basis for arranging and conducting meetings is Art. 6(1)(b) GDPR where the meeting relates to a contract or pre-contractual steps, and otherwise our legitimate interest in efficient business communication under Art. 6(1)(f) GDPR. The legal basis for recording is consent under Art. 6(1)(a) GDPR.
See the Google Privacy Policy and Microsoft Privacy Statement for more information.
8. Recipients and international transfers
We disclose personal data only when necessary to operate the website, respond to you, provide requested services, comply with law, establish or defend legal claims, or with your consent. Recipients may include the service providers named in this policy, professional advisers, and public authorities where legally required.
Some providers or their group companies process data outside the European Economic Area. Where required, transfers are protected by an adequacy decision, the European Commission’s Standard Contractual Clauses, and supplementary safeguards. Provider-specific details are available in the linked privacy and data-processing terms.
9. How long we keep data
- Website and security data: for as long as needed to deliver, secure, and troubleshoot the website, according to Cloudflare’s service configuration and applicable legal requirements.
- Contact and demo enquiries: for up to 24 months after our last meaningful interaction, unless the enquiry leads to a customer relationship or a longer period is required by law.
- Marketing records: until you withdraw consent or object. We may retain a minimal suppression record so that we can respect your choice.
- Analytics data controlled by Cloudsquid: up to 14 months. Individual cookies and provider-held data can have different periods shown in the consent tool or provider documentation.
- Meeting recordings: up to 90 days unless a different period is agreed with participants or the recording is required for a documented business or legal purpose.
When a retention period expires, we delete or anonymize the data unless continued storage is required by applicable commercial, tax, or other law.
10. Your data protection rights
Subject to the conditions in applicable law, you may request access to your personal data, correction, deletion, restriction of processing, or data portability. You may withdraw consent at any time and object to processing based on legitimate interests, including direct marketing.
To exercise a right, contact info@cloudsquid.io. We may need to verify your identity before completing a request.
Right to complain
You also have the right to complain to a data protection supervisory authority. Our competent authority is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
Germany
www.datenschutz-berlin.de
Changes to this policy
We may update this policy when our website, service providers, or legal obligations change. The effective date at the top identifies the current version.