Privacy Policy (GDPR / RODO)
Last updated: October 2025
1. General Provisions
Buena Cloud Sp. z o.o. (the "Controller") recognizes the importance of protecting the privacy and personal data of its clients and website users. This policy outlines our commitment to processing personal data in compliance with the European General Data Protection Regulation (EU) 2016/679 (GDPR / RODO).
Data Controller: Buena Cloud Sp. z o.o., Wichrowa 20C, 60-449 Poznań, Poland.
Contact for Data Protection: contact@buenacloud.com
2. Data Processing via the Contact Form
2.1. Categories of Personal Data
We collect the following data submitted voluntarily via the contact form on our website:
- Full Name, Company Name (Identification)
- Business Email Address, Phone Number (Contact Information)
- Message/Inquiry (Details necessary to address the request)
2.2. Purpose and Legal Basis (Art. 6(1) GDPR)
The purpose of processing this data is to respond to your inquiry and, potentially, enter into a contract.
- Legal Basis: Art. 6(1)(b) GDPR (processing is necessary for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract).
- Retention Period: Data is stored for the duration necessary to handle the inquiry and for any subsequent legal claims or contract performance.
3. Data Subject Rights
You have the right to request access, rectification, erasure, restriction of processing, and the right to object to processing. You also have the right to data portability.
To exercise these rights, please contact us at contact@buenacloud.com. You also have the right to lodge a complaint with a supervisory authority (e.g., UODO in Poland).
4. Data Security and International Transfers
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.
International Transfers: As a Google Workspace Partner, we utilize Google Cloud infrastructure, which may involve transfers of personal data outside the EEA (e.g., to the USA). Such transfers are governed by appropriate safeguards, including Standard Contractual Clauses (SCCs), as required by GDPR.
Recipients of Data: Your data may be shared with IT infrastructure providers (e.g., Google) and legal or accounting advisors, strictly for the purposes outlined in this policy.
5. Cookies and Technical Data
Our website uses necessary technical cookies to ensure the correct functioning of the site. We do not use analytical or marketing cookies without explicit user consent.