Privacy & Cookies Policy

1. Data Controller

Data Controller

Clouds On Mars Sp. z o.o.
Bukowińska 22/13B, 02-703 Warsaw, Poland
KRS no. 0000670382 · VAT no. 5213773786
Email: info@cloudsonmars.com

Data Protection Officer

Agnieszka Łapińska
Email: IOD@cloudsonmars.com

2. What We Collect & Why

2.1 Website analytics (Google Analytics)

We use Google Analytics to measure visitor traffic - how many people visit, which pages are popular, and where visitors come from. This helps us improve the site. All data collected by these cookies is anonymous and aggregated; we do not identify individual users.

Google Analytics is loaded only after you accept analytics cookies. If you reject them, or before you make a choice, no Google Analytics script is loaded and no analytics cookies are set.

Legal basis: your consent (Article 6(1)(a) GDPR), which you may withdraw at any time through the Cookie settings link in the footer of every page.

2.2 Waitlist & newsletter sign-up

When you sign up for our waitlist or newsletter, we collect your email address and, optionally, your name and company name. We use this data to:

• Send you product updates, launch announcements, and relevant PostgreSQL performance content
• Inform you when Guardioz products become available

Legal basis: your consent (Article 6(1)(a) GDPR). You may unsubscribe at any time using the link in every email or by contacting us.

Retention: we store your data until you unsubscribe, or for a maximum of 3 years from sign-up, whichever comes first.

2.3 Contact form & demo requests

When you contact us through a form, by email (e.g. contact@guardioz.com), or request a demo, we collect your name, email address, company name, and the content of your message. We use this data to respond to your inquiry and, where applicable, to schedule a demonstration.

Legal basis: our legitimate interest in responding to your request (Article 6(1)(f) GDPR) and, if a business relationship is established, performance of a contract (Article 6(1)(b) GDPR).

Retention: data from inquiries is stored for 12 months from the last contact, unless a business relationship is established.

2.4 Is it necessary to provide personal data?

For users who send us questions, complaints, or claims via the contact form, failure to provide contact information may prevent us from responding to your inquiry.

Providing personal data is also necessary to contract with us, fulfill those contracts, and process payments. This means that if you wish to use our services or products, you must provide your data - otherwise, we will be unable to provide the service or deliver the product.

3. Cookies We Use

Cookies are small files stored on your device by your browser. The only cookies we use are the first-party Google Analytics cookies listed below, and they are set exclusively after you accept analytics cookies. We do not use any cookies that are strictly necessary for the site to function, and we set no cookies at all until you give consent. You can change your choice at any time through the Cookie settings link, or block and delete cookies through your browser settings.

Cookie	Duration	Purpose
_ga	14 months	Distinguishes unique visitors by assigning a randomly generated client ID
_ga_*	14 months	Persists session state for Google Analytics

We do not use advertising cookies, third-party tracking cookies, or cross-site tracking.

4. Who We Share Data With

We may share your personal data with:

• Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) - as the provider of Google Analytics. Google processes data on our behalf under a Data Processing Agreement. Google may transfer data to the United States under Standard Contractual Clauses (SCCs).
• Microsoft (Microsoft Ireland Operations Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland) - we use Microsoft 365 (Outlook / Exchange Online) to handle email correspondence, including messages you send us. Microsoft acts as a data processor under a Data Processing Agreement and may transfer data to the United States under Standard Contractual Clauses (SCCs).
• Clouds On Mars group companies - for internal administration purposes:
  • Clouds On Mars Sp. z o.o. - Bukowinska 22/13B, 02-703 Warsaw, Poland
  • Clouds On Mars GMBH - Muhlegasse 18, 6340 Baar, Switzerland (Office: Stockerstrasse 33, 8002 Zurich)
  • Clouds On Mars ME LLC - Burj Alfardan, Level 1, PO BOX 26660, Lusail, Doha, Qatar

We do not sell, rent, or trade your personal data to third parties.

5. International Data Transfers

Where personal data is transferred outside the EU/EEA (e.g., to Google in the United States), we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, or an adequacy decision by the European Commission.

6. Data Security

We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS/HTTPS), access controls, and regular security reviews.

7. Your Rights

Under the GDPR, you have the right to:

• Access your personal data and receive a copy
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten")
• Restrict processing in certain circumstances
• Object to processing based on legitimate interest
• Data portability - receive your data in a structured, machine-readable format
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
• Not to be subject to automated decision-making based on profiling

To exercise any of these rights, contact our Data Protection Officer at IOD@cloudsonmars.com.

8. Complaints

If you believe that our processing of your personal data violates applicable law, you have the right to file a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland - uodo.gov.pl.

9. Automated Decision-Making

There is no automated decision-making or profiling connected with your use of this website.

10. Children (Minors)

We recognize the importance of protecting children's privacy, especially online. This website is not intended for or directed at children. Under no circumstances do we permit children to use our services. We do not intentionally collect personal information from children.

11. Third-Party Links

Our website may contain links to external websites. This privacy policy does not apply to those sites. We recommend reviewing their own privacy statements.

12. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.