How we handle your data
Pursuant to Art. 13 of EU Regulation 2016/679 (GDPR), we provide you with full information on how we collect, use and protect your personal data.
This privacy notice describes how cloudynamics.it manages personal data of the users who access it. It is provided pursuant to Art. 13 of EU Regulation 2016/679 (GDPR) to those who interact with the Controller's web services.
1. Data Controller
The Data Controller is the entity identified below. To exercise your rights or for any enquiries regarding the processing of your personal data, please contact us at the details provided.
2. Data collected and purposes of processing
The website collects personal data in the following categories, for the stated purposes:
Navigation data
The IT systems and software procedures used to operate this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This data is not collected in order to be associated with identified individuals, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category includes IP addresses or domain names of computers used by users connecting to the site, URI addresses of requested resources, time of request, method used to submit the request to the server, size of the file received in response, numeric code indicating the status of the server response, and other parameters related to the user's operating system and IT environment. This data is necessary for the provision of web services and is stored for the minimum time necessary to guarantee system security.
Data provided voluntarily by the user
The voluntary, explicit submission of messages to the Controller's contact addresses and the submission of contact forms present on the site entails the acquisition of the sender's contact data (first name, last name, email address, company name where applicable) as well as all personal data included in the communications. Such data is processed solely for the purpose of responding to requests received and managing the commercial relationship.
Technical cookies
The site uses only technical cookies strictly necessary for the correct functioning of the site, including the cookie consent management cookie (cldyn_cookie_consent) and the language selection cookie (NEXT_LOCALE). No profiling or third-party analytics tracking cookies are currently active. For more details, please refer to our Cookie Policy.
Service delivery data
In the context of providing the professional services offered (software development, automation, training, AI consulting), personal data of company contacts and end users of tools developed may be processed, in compliance with the contracts entered into and applicable regulations. In such cases, specific notice will be provided.
CloudAI chatbot data
The CloudAI chatbot on this site collects conversation messages linked to a pseudonymous session ID (only after explicit consent); conversations are stored on our systems to provide the service and improve its quality. Name, company, email address and phone number are collected only when the user requests to be contacted. Data is processed to answer questions about services and manage commercial requests. Processing uses an AI model (OpenRouter); no automated decisions with legal effects are made.
Cloudynamics Journal newsletter data
When you subscribe to the newsletter we collect your email address, language, the area of the site where the subscription originated, the version of the notice accepted and the consent date. This data is used exclusively to manage the subscription and send Cloudynamics™ news and insights. It is not used for profiling or shared with third parties for their marketing purposes.
3. Legal basis for processing
The processing of personal data is based on the following legal grounds pursuant to Art. 6 GDPR:
- Consent of the data subject (Art. 6(1)(a)): for subscribing to and receiving the Cloudynamics Journal newsletter.
- Performance of a contract or pre-contractual measures (Art. 6(1)(b)): for managing commercial requests and providing services.
- Compliance with legal obligations (Art. 6(1)(c)): for retaining accounting and fiscal data in accordance with applicable regulations.
- Legitimate interests of the Controller (Art. 6(1)(f)): for IT system security and prevention of fraudulent activities.
4. Recipients of data
Personal data processed is not communicated to third parties for marketing or profiling purposes. Data may be shared with entities acting as Data Processors pursuant to Art. 28 GDPR, limited to the purposes indicated in this notice.
Categories of recipients include:
- IT and infrastructure service providers (hosting, cloud, email) operating within the EU/EEA or with adequate safeguards.
- Professionals and consultants working for the Controller (accountants, lawyers, technical consultants), subject to professional secrecy.
- Competent authorities, where required by law or by court orders.
- OpenRouter (USA): text processing via LLM API for the CloudAI chatbot, with GDPR Chapter V safeguards (Standard Contractual Clauses).
- Resend: email notification to the team for requests received via chatbot.
5. International data transfers
The Controller may transfer personal data to third countries outside the EU/EEA when necessary to deliver services, in particular to OpenRouter (USA) for processing CloudAI chatbot messages.
Such transfers comply with GDPR Chapter V safeguards, in particular adequacy decisions or Standard Contractual Clauses (SCC) with the relevant providers.
6. Retention periods
Personal data is retained for the minimum time necessary for the purposes for which it was collected, in compliance with the minimisation and storage limitation principles under the GDPR:
7. Your rights
Pursuant to Arts. 15–22 GDPR, you have the right to:
- Access (Art. 15): obtain confirmation of the existence of data relating to you and receive a copy.
- Rectification (Art. 16): request the correction of inaccurate data or the completion of incomplete data.
- Erasure (Art. 17): request the deletion of data ("right to be forgotten"), in the cases provided for by law.
- Restriction of processing (Art. 18): request restriction of processing in certain cases.
- Data portability (Art. 20): receive in structured format the data provided to the Controller and transmit it to another controller, where technically feasible.
- Objection (Art. 21): object to the processing of your data at any time, for reasons related to your particular situation, where processing is based on legitimate interest.
- Withdrawal of consent: withdraw consent at any time, without prejudice to the lawfulness of processing carried out prior to withdrawal.
- Objection to direct marketing: object to processing for direct marketing purposes at any time.
To exercise your rights, send a written request to: info@cloudynamics.it
You can also withdraw newsletter consent directly from the unsubscribe page. Manage unsubscribe
8. Right to lodge a complaint
You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) if you believe that the processing of your data violates EU Regulation 2016/679.
Piazza Venezia 11, 00187 Roma · garanteprivacy.it
9. Changes to this privacy policy
The Controller reserves the right to modify this notice at any time, to adapt it to regulatory changes, new data processing activities, or developments in the services offered.
Any changes will be published on this page with an updated date at the top. We encourage you to periodically review this page. Continued use of the site following publication of changes will constitute acceptance thereof.
Manage your data
Under the GDPR you can exercise your rights over your personal data at any time. Write to us and we will reply within 30 days.
- Access: know which data we process about you
- Rectification or erasure of your data
- Restriction of or objection to processing
- Portability: receive your data in a readable format
We're transparent about everything
For any questions about how your data is processed, contact us directly.