Privacy Policy

1. Who we are

The controller is CloudFM Solutions, Lda, with registered office at Rua Cimo da Vinha, 40-C, 7300-658 Fortios, registration and VAT number PT510123864 (“CloudFM Solutions”, “we”, “us”).

For privacy questions, contact us at support@cloudfmsolutions.com.

2. Data we process

Contact form

When you send us a message, we process the name, email address, subject and message you provide and, if you fill it in, your company name. We also record the language of the page and the date and time of submission. Please do not send sensitive data through the form. Name, email, subject and message are required; without these fields and the security check the enquiry cannot be sent through the form. You can contact us by email.

Security check

The contact form uses Cloudflare Turnstile, in managed mode, to protect against automated and abusive use. When you open the contact page, Turnstile is loaded from Cloudflare and may process technical signals about your browser and device that are strictly necessary for this security function. Cloudflare describes this processing in its Turnstile Privacy Addendum: www.cloudflare.com/turnstile-privacy-policy/.

Technical data

Like any website, our hosting provider (Cloudflare) processes technical data needed to deliver the pages and protect the service, such as your IP address, browser type and the requests made, and keeps operational logs.

We do not use advertising, user profiling or accounts on this website. Optional measurement through Cloudflare Web Analytics is enabled only after you allow it in the privacy notice. It collects information about visits, pages and performance, including loading times and technical browser characteristics. Cloudflare states that this tool does not use analytics cookies. You can refuse or withdraw permission through the privacy preferences in the footer.

To validate form submission, the server sends Cloudflare the Turnstile token and the IP address provided by the infrastructure. The application code does not store these values in a database.

3. Purposes and legal basis

• Replying to your enquiry and following up on the conversation you start: our legitimate interest in replying to people who contact us (Article 6(1)(f) GDPR) or, where your enquiry concerns a proposal or a contract, steps taken at your request before entering into a contract (Article 6(1)(b));
• Protecting the website and the form against abuse, spam and attacks: legitimate interest (Article 6(1)(f));
• Complying with legal obligations and establishing, exercising or defending legal claims: legal obligation (Article 6(1)(c)) and legitimate interest (Article 6(1)(f)).
• Measuring visits and performance with Cloudflare Web Analytics: prior permission for optional measurement and, insofar as personal data is processed for this purpose, consent (Article 6(1)(a)). Refusing does not prevent browsing or contacting us.

We do not sell personal data and we do not use it for marketing or automated decision-making.

4. Service providers and recipients

• Cloudflare: website hosting on Workers, the form's security check (Turnstile), sending contact messages by email (Cloudflare Email Service), email routing for our domain and, if allowed, measuring visits and performance (Web Analytics);
• Our company mailbox (support@cloudfmsolutions.com), where we receive the messages, managed through our email provider.

These providers process the data only as needed for the service they provide. We may also disclose data to professional advisers bound by confidentiality, or to authorities where the law requires it.

For Turnstile, Cloudflare acts as a processor to protect our website and as a controller for signals used to improve its bot detection, as described in its addendum: www.cloudflare.com/turnstile-privacy-policy/.

5. International transfers

Cloudflare operates a global network, so some processing may take place outside the European Economic Area (EEA), including in the United States. In those cases we rely on the safeguards recognised by the GDPR that are available for each provider, such as a European Commission adequacy decision or standard contractual clauses.

You can ask for more information about these safeguards at support@cloudfmsolutions.com.

6. Retention

• Contact messages: Personal data submitted through the contact form is retained for a maximum of 12 months after the last interaction relating to the enquiry, unless longer retention is necessary for pre-contractual steps, performance of a contractual relationship, compliance with a legal obligation, or the establishment, exercise or defence of legal claims. This period applies to general enquiries and does not replace other applicable legal retention periods if the interaction becomes a contractual relationship, invoicing or a dispute;
• Technical data and operational logs: for the retention period applied by our hosting provider;
• Turnstile check: we do not keep the result of the check beyond the submission of the message.
• Measurement choice: the cloudfm_consent cookie remembers your choice, its version and date for 180 days; it is not an account identifier. Retention of provider metrics is governed by the Web Analytics service terms.

7. Security

We use appropriate technical and organisational measures, including encrypted connections (HTTPS), security headers, server-side validation, protection against automated submissions and restricted access to the messages we receive.

No online service can be completely secure. If a personal data breach is likely to affect your rights, we will notify the competent authority and, where required, the people affected, as the GDPR requires.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased when there is no longer a reason to keep it;
• restrict processing in certain circumstances;
• receive the data you provided in a structured, machine-readable format (portability);
• object to processing based on legitimate interests.
• withdraw consent for optional measurement at any time, without affecting the lawfulness of earlier processing.

To exercise these rights, write to support@cloudfmsolutions.com. We may need to confirm your identity first. We will reply within one month, which may be extended in the cases allowed by the GDPR.

You also have the right to lodge a complaint with a supervisory authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt. You may also contact the authority of the EU country where you live or work.

9. Cookies and similar technologies

CloudFM Solutions does not use advertising, analytics or profiling cookies on this website. The contact form uses Cloudflare Turnstile to protect against automated and abusive use. Turnstile may process technical signals strictly necessary to provide this security function.

More information about the processing carried out by Turnstile is available in Cloudflare's Turnstile Privacy Addendum: www.cloudflare.com/turnstile-privacy-policy/.

The notice lets you accept or reject optional measurement and save preferences. The Cloudflare Web Analytics beacon is not loaded before you allow it. Your choice is remembered for 180 days in our own cookie and can be changed in the footer. Necessary security technologies do not depend on permission for statistics. See the Cookie Policy at cloudfmsolutions.com/en/cookies.

10. External links

The website links to FieldProof and to LinkedIn. Those websites have their own privacy policies, which apply when you visit them.

11. Changes to this policy

We will update this policy when the website or the way we handle personal data changes. The “Last updated” date shows the current version.

We will provide notice of material changes on the website with reasonable advance notice and, where a change affects an ongoing relationship and we have an appropriate contact, through direct communication. A new purpose requiring consent will not be enabled without obtaining it.

12. Contact