Legal

Privacy policy

Effective 28 January 2026 · Last updated 1 October 2026 · CloudNerve Oy, Business ID 3596180-5

At CloudNerve, we believe that data privacy is a fundamental component of the digital trust we build with our clients. Whether you are a business partner, a website visitor, or a participant in our AI webinars, we handle your personal data with the same precision and security we apply to our cloud architectures.

This notice outlines how we collect, process, and protect your information across our global operations.

1. Data Controller and Contact Information

CloudNerve operates as a unified consultancy with entities in Finland and the UK. For the purposes of data protection legislation, the "Data Controller" is the specific CloudNerve entity with which you are engaging.

  • Company Name: CloudNerve Oy
  • Business ID: 3596180-5
  • Registered Address: Kutomotie 16, 00380 Helsinki (with regional presence in London, UK)
  • Privacy contact: privacy@cloudnerve.ai

For any inquiries regarding your data or to exercise your rights, please contact us at the email address provided above.

2. Who This Policy Applies To

We process data related to individuals who interact with us in the following capacities:

  • Representatives of current or prospective clients.
  • Strategic business partners and vendors.
  • Attendees of CloudNerve events and webinars.
  • Visitors to our website and applicants for roles at CloudNerve.

3. Data Collection and Usage

A. Clients, Leads, and Business Partners

To provide our consultancy services effectively, we process:

  • Identity Data: Full name and professional title.
  • Contact Information: Professional email, phone number, and office address.
  • Organizational Context: Company name, business ID, and your role within the organization.
  • Interaction History: Records of communications, meeting notes, and project-related feedback.
  • Financial Data: Necessary details for invoicing and contractual fulfillment.

Purposes of Processing:

  • Service Delivery: Executing contracts and managing the customer relationship.
  • Strategic Development: Improving our AI models and cloud service offerings.
  • Safety & Security: Protecting our digital and physical assets, including office visitor logs where applicable.
  • Legal Compliance: Adhering to tax, audit, and anti-money laundering (AML) regulations.

B. Marketing, Webinars, and AI Insights

We collect data to keep you informed about the evolving landscape of GenAI, FinOps, and Cloud Security. This includes:

  • Contact details you provide through the contact and careers forms on our website.
  • Event registration details (e.g., for our "Agentic AI" webinars).
  • Engagement Metrics: We analyze open rates and click-through rates of our communications to ensure our content remains relevant to our audience.

Note: You may opt out of marketing communications at any time by clicking the "Unsubscribe" link in any of our emails.

4. Website Intelligence and Cookies

Our website does not use analytics, advertising or tracking cookies, and does not load third-party tracking scripts.

  • Strictly necessary security cookie: our web application firewall (AWS WAF) may set an aws-waf-token cookie to verify that form submissions come from a real browser and to protect the site against automated abuse. It contains no personal profile and is not used for tracking.
  • Server logs: for security, our hosting and firewall record technical request data (such as IP address, requested URL and browser type) for up to 12 months.

Because we only use strictly necessary cookies, no consent banner is required.

5. Security and Data Retention

As a security-first consultancy, we implement industry-leading technical and organizational measures to safeguard your data.

  • Encryption: Data is encrypted both in transit and at rest.
  • Access Control: Strict "Least Privilege" access models are applied to our internal systems.
  • Retention: We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with statutory retention periods (e.g., 7 years for financial records).
  • Website enquiries and job applications: messages sent through our contact form, and job applications including CVs, are stored in the EU (AWS eu-west-1, Ireland) and automatically deleted 3 months after submission, unless you ask us to delete them sooner.

6. Data Sharing and International Transfers

We do not sell your personal data. We only share information with:

  • Sub-processors: Amazon Web Services (website hosting, form storage and notifications, EU region eu-west-1) and Zoho (business email, EU data centre), plus other SaaS tools necessary for our operations.
  • Group Companies: Our offices in Helsinki and London may share data for internal administrative and service delivery purposes.
  • Legal Authorities: When required by law or to protect our legal rights.

If data is transferred outside the EEA/UK, we ensure adequate protection through Standard Contractual Clauses (SCCs) and rigorous vendor assessments.

7. Your Legal Rights

Under the GDPR, you have the following rights:

  • Access: Request a copy of the data we hold about you.
  • Rectification: Request correction of inaccurate information.
  • Erasure: Request the deletion of your data (the "Right to be Forgotten").
  • Portability: Request the transfer of your data to another service provider.
  • Objection: Object to processing based on legitimate interests or direct marketing.

To exercise these rights, please contact privacy@cloudnerve.ai. You also have the right to lodge a complaint with your local data protection authority (e.g., the Office of the Data Protection Ombudsman in Finland).

8. Updates to This Notice

CloudNerve is a dynamic organization. As our services and AI capabilities evolve, so may this policy. We will notify you of any significant changes via our website or direct communication.

Last updated: 1 October 2026