Privacy policy
We collect as little as we can, use it only for what you asked for, and never sell it.
In short
- This website sets no cookies, runs no analytics or advertising, and loads nothing from other websites.
- Our hosting providers process technical data about each visit so they can deliver the site and protect it.
- If you email us, we use your address to answer you, and for nothing else.
- Nothing is sold on this website, so we process no payment data.
Who is responsible
The controller under the General Data Protection Regulation (GDPR) is , , Austria. For anything about your data, write to privacy@thecloudpanda.com. We are not required to appoint a data protection officer (Art. 37 GDPR).
Visiting this website
When you open a page, your browser sends technical data with the request: your IP address, the date and time, the page requested, the referring page and your browser's identifier. Our hosting and network providers (listed below) process this data to deliver the page, to keep the site secure and working, and to fend off attacks. They keep it in server logs for a short period under their own retention schedules. We don't use it to identify you, combine it with other data or build profiles.
Legal basis: our legitimate interest in delivering a secure, working website (Art. 6(1)(f) GDPR).
This website sets no cookies and stores nothing on your device. It uses no analytics, advertising or social-media trackers, and fonts and images come from our own website. See the cookie statement.
Emails you send us
If you write to hello@thecloudpanda.com, privacy@thecloudpanda.com, security@thecloudpanda.com or teams@thecloudpanda.com, we process your email address, your name if you give it, your message and the email's metadata in order to answer you. We keep the conversation for as long as it needs, and afterwards for up to three years in case you follow up, unless you ask us to delete it sooner and we have no legal reason to keep it.
Legal basis: our legitimate interest in answering you (Art. 6(1)(f) GDPR), and steps you ask for before a possible contract, such as a Teams enquiry (Art. 6(1)(b) GDPR).
Security reports
If you report a vulnerability, we use your contact details and your report to investigate and fix the problem, to keep you informed and, if you wish, to credit you. Legal basis: our legitimate interest in keeping our services secure (Art. 6(1)(f) GDPR).
Service providers
These providers process personal data on our behalf, each under a data processing agreement (Art. 28 GDPR). They may use it only to provide their service to us.
| Provider | What for | Data | Where |
|---|---|---|---|
| Amazon Web Services EMEA SARL, Luxembourg (AWS Amplify Hosting) | Hosting and delivering this website | IP address, date and time, requested page, referrer and browser identifier of each request (server logs) | EU contracting entity; pages are delivered through Amazon's worldwide content delivery network. Transfers to the USA rely on the EU-US Data Privacy Framework and the EU standard contractual clauses. |
| Cloudflare, Inc., USA | DNS, content delivery, encryption (TLS) and protection against attacks for this website | IP address and technical request data of each visit | USA and Cloudflare's worldwide network. Certified under the EU-US Data Privacy Framework; the EU standard contractual clauses also apply. |
| Zoho Corporation B.V., Netherlands (Zoho Mail) | Email for hello@thecloudpanda.com, privacy@thecloudpanda.com, security@thecloudpanda.com and teams@thecloudpanda.com | Email addresses, names you give us, message content and delivery metadata | EU data centre |
Transfers outside the EU
Amazon Web Services and Cloudflare may process data in the USA. These transfers are covered by the European Commission's adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR), under which these providers are certified, and by the EU standard contractual clauses (Art. 46 GDPR). Email is stored in the EU.
Do you have to give us data?
No. You can read every page of this website without giving us anything beyond what your browser sends with each request. Emailing us is voluntary; we just can't answer or notify you without an address.
We don't use automated decision-making or profiling.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, and to object to processing based on our legitimate interests (Art. 15–21 GDPR). Where we rely on your consent, you can withdraw it at any time. Email privacy@thecloudpanda.com and we will reply within one month.
You can also complain to a data protection authority, in particular the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb.gv.at, or the authority where you live or work.
Changes
We update this policy when what we collect changes. The date below shows when this policy last changed.
Last updated: .