Privacy Policy
Last updated: 2026
Before publishing. Because the company is established outside the EU while targeting EU customers and using EU hosting, a legal review is strongly advised — in particular on the EU representative (Art. 27 GDPR) and the international transfer to Venezuela. The EU representative still needs to be appointed (or ruled out in writing).
1. Data controller
- Controller: Corporación Joules C.A., RIF J-40234640-9, a company incorporated in the Bolivarian Republic of Venezuela, trading as “JoulesCloud”.
- Registered address: La California Norte, Caracas, Venezuela
- Email: info@joulescloud.com
- EU representative (Art. 27 GDPR): [[to be appointed — name and contact of the EU representative, or a note from your lawyer confirming the Art. 27(2) exception applies]]
2. What we process and why
| Processing | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact / demo-request form | Name, email, institution, role, hosting preference, approximate number of instruments and users, free-text message, IP address and submission time. | Handle your enquiry, reply to you and, where relevant, prepare and run a product demo. | Steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR), together with our legitimate interest in responding to business enquiries (Art. 6(1)(f) GDPR). |
| Website analytics | Cookie identifiers, page views, approximate location, device and browser data (Google Analytics 4). | Measure and improve how the site is used. | Consent (Art. 6(1)(a) GDPR), via the cookie banner. Not loaded without consent. |
| Form security | Technical data needed for anti-spam verification (Cloudflare Turnstile). | Prevent automated submissions and abuse. | Legitimate interest (Art. 6(1)(f) GDPR): keeping our systems secure. |
3. Retention
Form data is kept for as long as needed to handle your enquiry and, if no business relationship begins, deleted within 12 months. If a contract is signed, data is kept for its duration and for the applicable statutory limitation periods. Analytics data is retained for 14 months (the Google Analytics setting).
4. Recipients
- Web hosting and email: Hostalia (Grupo Telefónica), with data centres in Spain (EU). Received messages and form submissions are stored on these EU servers.
- Google Ireland Ltd. as processor for Google Analytics. Google may transfer data to the USA under the EU-US Data Privacy Framework and standard contractual clauses.
- Cloudflare, Inc. (USA) for anti-spam verification of the form.
No other disclosures are made except where required by law.
5. International transfer
Corporación Joules C.A. is established in Venezuela, a country without a European Commission adequacy decision. Our staff access the messages you send us from Venezuela. For contact-form data this transfer relies on Art. 49(1)(b) GDPR — it is necessary to take steps at your request prior to entering into a contract. If an ongoing contractual relationship begins, we will put Standard Contractual Clauses and appropriate supplementary measures in place.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to info@joulescloud.com, stating which right you wish to exercise. Where processing is based on consent (analytics cookies) you may withdraw it at any time. You may also lodge a complaint with your local data protection authority — in Spain, the AEPD (www.aepd.es).
7. Security
We apply reasonable technical and organisational measures (HTTPS encryption in transit, restricted access to received messages, and data minimisation).
8. Changes
This policy may be updated. The version in force is always the one published on this page.