Privacy and cookie policy
We use data to handle enquiries, orders and services and related obligations. We do not use advertising tracking.
1. Controller and contact
The personal data controller is Maciej Skorupski, a sole trader registered under the business name Maciej Skorupski, providing services under the VirtCloud brand. Correspondence address: ul. Jana Kujawskiego 32, 05-083 Feliksów, Poland. Polish tax ID (NIP): 1181863939. REGON: 369098102. Privacy contact: kontakt@virtcloud.pl
2. Data we process
This policy covers website use, enquiries, orders and billing. Data entrusted by customers on VPS servers is covered by separate service documents and data processing agreements where applicable. The form collects your name, email, country, optional company name, selected plan and message. We also store request records and technical data needed to protect the website. Do not provide passwords or access credentials in the form.
3. Purposes and legal grounds
We use data to answer enquiries, prepare offers, enter into and perform contracts, and handle service requests (GDPR Article 6(1)(b) when you act on your own behalf). Business representative contacts, general correspondence, security and legal claims rely on legitimate interests (Article 6(1)(f)). Statutory records, including billing records, rely on legal obligations (Article 6(1)(c)). Local abuse prevention relies on legitimate interests (Article 6(1)(f)). Google reCAPTCHA activation, device storage/access and associated processing rely on consent (Article 6(1)(a)). Form data is not used for newsletters or advertising.
4. Providing your data
Providing data is voluntary, but starred fields are needed to use the form. You can contact us by email instead. Acknowledging this notice is not marketing consent. reCAPTCHA is a mandatory form safeguard.
5. Recipients
Hosting, email, security and IT providers, accountants, advisers and authorised authorities may receive data as necessary for their tasks. Necessary data may be shared with the VPS infrastructure provider to fulfil an order. We do not sell data.
6. Google reCAPTCHA and transfers
With your consent, we use Google reCAPTCHA Enterprise to protect the form against spam. Google processes technical data on our behalf, including your IP address, device information and website interactions, to assess the risk of automated submissions. Data may be processed outside the European Economic Area, including in the USA. Google Cloud terms provide transfer safeguards, including standard contractual clauses where applicable. These safeguards are available in the Cloud Data Processing Addendum; you can also contact us for information. The provider is the relevant Google Cloud entity listed in Google’s entity list. The form requires reCAPTCHA, but you can still contact us and order by email without consent.
7. Retention
We retain enquiries that do not result in an order until correspondence is concluded and the matter is resolved. Order data is retained for the duration of the contract and afterwards only as needed for billing, legal obligations or establishing and defending claims, until the applicable limitation periods expire. Tax records are generally kept for five years from the end of the calendar year in which the tax payment deadline fell; this period may be extended where required by law. Technical data is retained for the period needed to detect and investigate security incidents. Once there is no longer a basis for retention, we delete or anonymise the data.
8. Your rights
You may request access, correction, deletion or restriction and, where applicable, portability. You may object to processing based on legitimate interests. Consent can be withdrawn at any time without affecting previous lawful processing. Rights are subject to GDPR conditions, including statutory record retention duties. You may complain to the Polish supervisory authority, the President of the Personal Data Protection Office: uodo.gov.pl.
9. Cookies and tracking
We use no analytics or advertising tracking. The session cookie virtcloud_session protects the form against forged requests. Your choice, date and notice version are stored locally as virtcloud_consent_v3 for up to 180 days. Google reCAPTCHA loads only after consent and may set _GRECAPTCHA and process technical data including IP, device details and interactions. Refusal does not prevent browsing or ordering by email at sales@virtcloud.pl. Withdraw consent through Privacy settings → I decline. The page reloads and Google will not load again. Existing third-party cookies can be removed in your browser. Google also provides information about reCAPTCHA cookies in its service documentation.
10. Automated decisions and updates
We do not make solely automated decisions with legal or similarly significant effects and do not carry out advertising profiling. reCAPTCHA may block suspicious submissions automatically; contact us by email if this happens. We update this notice when the website changes. Version: 11 October 2026.