Back to Home

GDPR Compliance Policy

Last updated in 2025

1. Introduction

At Cloudpush ("we," "us," or "our"), we are committed to protecting the personal data of our clients, partners, and website visitors in accordance with the General Data Protection Regulation (GDPR) of the European Union. This GDPR Compliance Policy outlines our approach to data protection and the measures we take to ensure compliance with GDPR requirements.

2. Data Controller Information

Cloudpush acts as the data controller for personal data collected through our website, services, and business operations. Our contact details are: contact@cloudpush.ai

3. Data Protection Principles

We adhere to the following principles when processing personal data:

  • Lawfulness, fairness, and transparency: We process data lawfully, fairly, and in a transparent manner.
  • Purpose limitation: We collect data for specified, explicit, and legitimate purposes and do not process it in a manner incompatible with those purposes.
  • Data minimization: We limit data collection to what is necessary for the purposes for which it is processed.
  • Accuracy: We take reasonable steps to ensure personal data is accurate and kept up to date.
  • Storage limitation: We keep data in a form that permits identification of data subjects for no longer than necessary.
  • Integrity and confidentiality: We process data in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage.
  • Accountability: We are responsible for and can demonstrate compliance with these principles.

4. Legal Basis for Processing

We process personal data only when we have a legal basis to do so. The legal bases we rely on include:

  • Consent: When you have given clear consent for us to process your personal data for a specific purpose.
  • Contract: When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
  • Legal obligation: When processing is necessary for compliance with a legal obligation to which we are subject.
  • Legitimate interests: When processing is necessary for our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.

5. Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right to be informed: You have the right to be informed about the collection and use of your personal data.
  • Right of access: You have the right to request a copy of the personal data we hold about you.
  • Right to rectification: You have the right to have inaccurate personal data rectified or completed if it is incomplete.
  • Right to erasure (right to be forgotten): You have the right to request the deletion of your personal data in certain circumstances.
  • Right to restrict processing: You have the right to request the restriction or suppression of your personal data in certain circumstances.
  • Right to data portability: You have the right to obtain and reuse your personal data for your own purposes across different services.
  • Right to object: You have the right to object to the processing of your personal data in certain circumstances.
  • Rights related to automated decision making and profiling: You have rights related to automated decision making and profiling.

To exercise any of these rights, please contact us at contact@cloudpush.ai. We will respond to your request within one month.

6. Data Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of personal data where appropriate
  • Regular testing, assessing, and evaluating the effectiveness of our security measures
  • Ensuring the ongoing confidentiality, integrity, availability, and resilience of processing systems and services
  • The ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident
  • Strict access controls and authentication procedures
  • Regular security awareness training for our staff

7. Data Breach Procedures

In the event of a personal data breach, we will:

  • Notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible, unless the breach is unlikely to result in a risk to the rights and freedoms of individuals
  • Notify affected individuals without undue delay when a breach is likely to result in a high risk to their rights and freedoms
  • Document all breaches, including the facts relating to the breach, its effects, and the remedial action taken

8. Data Protection Impact Assessments

We conduct Data Protection Impact Assessments (DPIAs) when processing is likely to result in a high risk to individuals' rights and freedoms, particularly when using new technologies or when processing is on a large scale.

9. International Data Transfers

We ensure that any transfer of personal data to a country outside the European Economic Area (EEA) is protected by appropriate safeguards, including:

  • Adequacy decisions by the European Commission
  • Standard contractual clauses
  • Binding corporate rules
  • Other appropriate safeguards as approved under GDPR

However, as part of our commitment to European data sovereignty, we primarily process and store all client data within the European Union.

10. Data Protection Officer

While not legally required for our organization, we have voluntarily appointed a Data Protection Officer (DPO) to oversee our data protection strategy and implementation. Our DPO can be contacted at contact@cloudpush.ai.

11. Compliance with Cloud Migration Services

As a provider of cloud migration services, we take additional measures to ensure GDPR compliance:

  • We conduct thorough data mapping and classification before any migration project
  • We implement privacy by design and by default principles in all migration architectures
  • We ensure that all European client data remains within European borders
  • We provide detailed documentation of all data processing activities during and after migration
  • We implement appropriate technical safeguards during data transfer processes
  • We ensure that our clients maintain complete control over their data throughout the migration process

12. Changes to This Policy

We may update this GDPR Compliance Policy from time to time. We will notify you of any changes by posting the new policy on our website and updating the "Last updated" date. You are advised to review this policy periodically for any changes.

13. Contact Us

If you have any questions about this GDPR Compliance Policy or our data protection practices, please contact us at:

You also have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data infringes the GDPR.