Advertisement

GDPR Compliance

Last Updated: September 24, 2026

Introduction

grand-cloud.com is committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR). This page explains how we comply with GDPR requirements and outlines your rights regarding your personal information.

Data Controller

For the purposes of GDPR, grand-cloud.com acts as the data controller for personal information collected through our website and services.

Contact: [email protected]

Legal Basis for Processing

We process your personal data under the following legal bases:

  • Consent: When you provide explicit consent for specific processing activities
  • Contract: When processing is necessary to fulfill our contractual obligations to you
  • Legitimate Interests: When processing serves our legitimate business interests while respecting your rights
  • Legal Obligation: When processing is required to comply with applicable laws

Your Rights Under GDPR

Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data.

Right to Rectification

You can request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You can request that we limit how we use your personal data in specific situations, such as while we verify data accuracy.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected] with your request. We will respond within one month of receiving your request, though this period may be extended by two additional months in complex cases.

We may need to verify your identity before processing certain requests to protect your privacy and security.

Data We Collect

We collect and process the following categories of personal data:

  • Identity data (name)
  • Contact data (email address)
  • Inquiry data (program interests, messages)
  • Technical data (IP address, browser type, device information)
  • Usage data (pages visited, time spent on site)
  • Educational data (course enrollment, progress, completion)

How We Use Your Data

We use your personal data for the following purposes:

  • Responding to inquiries and providing information about our services
  • Processing enrollments and delivering educational programs
  • Communicating important updates and service-related information
  • Improving our website and services
  • Analyzing usage patterns to enhance user experience
  • Complying with legal obligations

Data Sharing and Transfers

We do not sell your personal data. We may share data with:

  • Service providers who assist in delivering our services (subject to appropriate data processing agreements)
  • Legal authorities when required by law

If we transfer data outside the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

Data Retention

We retain your personal data only as long as necessary for the purposes outlined in our Privacy Policy and to comply with legal obligations. Retention periods vary depending on the type of data and purpose of processing.

When data is no longer needed, we securely delete or anonymize it.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication mechanisms
  • Staff training on data protection practices

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or significantly affects you without human intervention.

Children's Data

Our services are not directed to children under 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

Changes to This Policy

We may update this GDPR compliance information to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.

Contact Information

For questions about our GDPR compliance or to exercise your rights, please contact:

Email: [email protected]