Back home

Privacy Policy

Last updated: 2026-05-23

This Privacy Policy explains how FormaCloud (the "data controller") collects and processes personal data when you submit a form on this site, in accordance with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

1. Data controller

  • Name: FormaCloud
  • Address: Brussels, Belgium
  • Email: privacy@formacloud.eu
  • Data Protection contact: dpo@formacloud.eu

2. What we collect

We only collect the information you voluntarily provide in the form (for example: name, email, phone, registration choices, free-text answers). We also store technical metadata strictly necessary to operate the service: language preference, timestamp of submission, and a one-way SHA-256 hash of your IP address (used to deter abuse — the raw IP is not stored).

3. Purpose & lawful basis

Your data is processed to (a) deliver the service or event you registered for, and (b) communicate with you about it. The lawful basis is your consent (Art. 6(1)(a) GDPR), given when you tick the consent box. Where the processing is necessary to perform a contract with you (e.g. paid registration), Art. 6(1)(b) GDPR also applies.

4. Recipients

Your data is only accessible to authorised members of FormaCloud. We do not sell or share your data with third parties for marketing.

5. Hosting & international transfers

Your responses are stored on Lovable Cloud (Supabase) in the European Union, specifically AWS region eu-central-1 (Frankfurt, Germany). Data is not transferred outside the EU.

The platform processor is Lovable AB (Sweden) using Supabase infrastructure on Amazon Web Services EMEA SARL. Both are bound by GDPR-compliant Data Processing Agreements. No data is transferred outside the EU.

6. Retention

Responses are retained for 365 days after submission and then automatically deleted. You can request earlier deletion at any time (see section 8).

7. Cookies

This site uses only strictly necessary cookies (authentication session, language preference). No analytics, advertising, or tracking cookies are set. See the Cookie Policy for details.

8. Your rights

Under GDPR you have the right to:

  • access the personal data we hold about you (Art. 15);
  • request rectification of inaccurate data (Art. 16);
  • request erasure ("right to be forgotten", Art. 17);
  • restrict or object to processing (Art. 18 & 21);
  • data portability (Art. 20);
  • withdraw your consent at any time (Art. 7(3));
  • lodge a complaint with your national supervisory authority.

To exercise these rights, use the Request my data link in the form footer, or email dpo@formacloud.eu. We will respond within one month.

9. Security

Data is encrypted in transit (TLS 1.2+) and at rest. Access to the backend is restricted to authenticated workspace members.

10. Changes

We may update this policy. The "last updated" date above reflects the most recent revision.