Privacy Policy
Last updated: January 2025 · Version 1.0
Data controller
The person responsible for processing personal data collected via the siteaclclouds.comis:
ACLClouds
Email: [email protected]
Website: aclclouds.com
Data collected
We collect the following categories of data based on your use of our services:
| Category | Data | Mandatory |
|---|---|---|
| Identification | Last name, first name, username | Yes |
| Contact | E-mail address | Yes |
| Billing | Billing address, payment data (processed by our service provider) | Yes (paid services) |
| Technical | IP address, connection logs, browser type | Automatic |
| Usage | Pages visited, actions carried out in the customer area | Automatic |
We do not collect any sensitive data (ethnic origin, political opinions, health data, etc.).
Purposes of processing
Your data is used exclusively for the following purposes:
- Creation and management of your user account.
- Provision and administration of subscribed hosting services.
- Processing payments and issuing invoices.
- Sending technical notifications (maintenance, incidents, renewals).
- Customer support and response to your requests.
- Improvement of our services via anonymized usage analyses.
- Compliance with our legal and regulatory obligations.
Legal basis for processing
Each processing is based on a legal basis compliant with the GDPR:
- Execution of the contract— for the provision of the subscribed services.
- Legal obligation— for the retention of billing data (10 years).
- Legitimate interest— for infrastructure security and fraud prevention.
- Consent— for optional marketing communications.
Shelf life
- Account data— kept for the entire duration of the contractual relationship, then 3 years after the account is closed.
- Billing data— 10 years in accordance with legal accounting obligations.
- Technical logs— 12 months maximum.
- Supporting Data— 3 years after ticket resolution.
- Navigation data— 13 months maximum (analytical cookies).
Data sharing
Your personal data is never sold. They can only be shared with:
- Payment providers— for secure transaction processing (Stripe, PayPal or equivalent). These providers are subject to their own confidentiality policies.
- Infrastructure hosts— our data center providers located in Europe (EU).
- Competent authorities— only upon judicial requisition or legal obligation.
Transfers outside the European Union
ACLClouds hosts all of its infrastructures within the European Union. If we use a service provider located outside the EU, we ensure that appropriate guarantees are in place (standard contractual clauses from the European Commission, adequacy decision, etc.).
Your rights
In accordance with the GDPR, you have the following rights over your personal data:
Right of access
Obtain a copy of your personal data that we hold.
Right of rectification
Correct inaccurate or incomplete data about you.
Right to erasure
Request deletion of your data (subject to legal obligations).
Right to limitation
Restrict the processing of your data in certain cases.
Right to portability
Receive your data in a structured, machine-readable format.
Right to object
Object to the processing of your data for legitimate reasons.
To exercise these rights, contact us at[email protected]. We respond within 30 days. You can also lodge a complaint with theCNIL(cnil.fr).
Data security
ACLClouds implements appropriate technical and organizational measures to protect your data:
- Encryption of communications via HTTPS/TLS.
- Password encryption (bcrypt hashing).
- Access to data restricted to authorized personnel.
- Continuous infrastructure monitoring and intrusion detection.
- Regular encrypted backups.
In the event of a data breach that may result in a risk to your rights, we will notify you within 72 hours in accordance with the GDPR.
Minors
Our services are intended for adults (18 years and over). We do not knowingly collect personal data from minors. If you are a parent or guardian and believe that your child has provided us with data, contact us immediately at[email protected].
Changes
We may update this policy at any time. In the event of a substantial modification, you will be informed by email with 15 days' notice. The date of last update is indicated at the top of this document.
Contact & DPO
For any questions relating to the protection of your personal data:
Legal notices
ACLClouds is a project of the Skyclouds association.
- Association:Skyclouds
- Association number:W634008111
- Head office:11 rue Desperouse, 63200 Mozac, France
- Email: [email protected]
- Website: aclclouds.com