Trust is the new currency when it comes to digital technology
Effective date: October 30, 2026
Last updated: November 3, 2026
1. INTRODUCTION
CloudTrust Ltd. ("CloudTrust", "we", "us" or "our") is committed to protecting personal data, respecting individual privacy, and ensuring the security and confidentiality of information processed through its websites, software products, platforms and services.
Our approach to privacy is based on the principles of Privacy by Design, Data Minimization, Transparency, Accountability and Security by Default.
This Privacy Policy explains how CloudTrust collects, processes, uses, stores and protects personal data when you visit our websites, communicate with us, use our products or access our services.
This Policy applies to CloudTrust corporate websites, including cloudtrust.solutions, Renecto, CloudTrust's secure network connectivity and infrastructure solution, Conferna, CloudTrust's secure digital communication platform, and other websites, applications, software products and services operated by CloudTrust.
CloudTrust develops and operates secure digital infrastructure, networking, communication and computing solutions for individuals, businesses, educational institutions, public administration and other organisations.
We aim to collect and process only the information necessary to provide, maintain and secure our services.
2. DATA PROTECTION PRINCIPLES
CloudTrust processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection legislation.
Our data protection principles include Privacy by Design, ensuring that privacy and data protection are considered throughout the design, development and operation of our products and services; Data Minimization, ensuring that we collect and process only the data necessary for the relevant purpose; Purpose Limitation, ensuring that personal data is processed only for specified, explicit and legitimate purposes; Transparency, providing information about the nature and purposes of data processing; Security by Default, implementing appropriate technical and organisational measures to protect information; Accountability, taking responsibility for compliance with applicable data protection requirements; and Confidentiality, restricting access to personal data to authorised persons and systems.
CloudTrust does not sell personal data or use personal data for advertising-based behavioural profiling.
3. DATA CONTROLLER
The data controller responsible for processing personal data within the scope of this Policy is:
CloudTrust
Hungary
Website: https://cloudtrust.solutions
Contact: privacy@cloudtrust.solutions
Court of Registration: Metropolitan Court of Budapest, Company Court
Company Registration Number: 01-09-197036
EU VAT Number: HU25053768
For privacy-related inquiries, please include "PRIVACY POLICY" in the subject line.
Where CloudTrust processes personal data on behalf of a customer, the customer generally acts as the data controller and CloudTrust acts as a data processor, in accordance with the applicable data processing agreement.
4. PERSONAL DATA WE PROCESS
Depending on how you interact with CloudTrust, we may process different categories of information.
4.1. Contact and Business Information
When you contact us, request information, enter into a business relationship or use our services, we may process your name and surname, business or organisation name, job title and professional role, email address, telephone number, business and postal address, and information included in your correspondence or requests.
We process this information to respond to inquiries, provide customer support, manage business relationships and fulfil contractual or legal obligations.
4.2. Account and Authentication Information
Where our products or services require user accounts, we may process account identifiers and usernames, email addresses, authentication and authorisation information, security credentials and authentication-related metadata, multi-factor authentication status, identity provider information where applicable, and account and access management records.
Depending on the configuration, authentication may be provided through integrated identity providers or other supported authentication mechanisms.
CloudTrust does not require the collection of additional personal information unless it is necessary for the relevant service or functionality.
4.3. Technical and Operational Information
When accessing our websites, applications or services, certain technical information may be processed automatically, including IP addresses, browser and operating system information, device and platform information, connection timestamps, service availability and performance information, diagnostic information and error reports, and security and authentication events.
Such information is processed primarily for service operation, troubleshooting, security monitoring and prevention of unauthorised access.
5. WEBSITE USAGE AND COOKIES
CloudTrust websites may use cookies and similar technologies to provide essential functionality, maintain website security and improve the user experience.
Cookies may include strictly necessary cookies required for website functionality, functional cookies used to remember user preferences, and analytics cookies used to understand website usage where enabled and permitted.
Non-essential cookies and analytics technologies are activated only where the required consent has been obtained.
You can manage or withdraw your cookie preferences through the cookie consent interface available on the relevant website.
You may also configure your browser to restrict or disable cookies. However, disabling essential cookies may affect certain website functionalities.
Third-party services embedded in or linked from our websites may apply their own cookies and privacy policies.
6. ANALYTICS AND WEBSITE STATISTICS
CloudTrust may use website analytics tools to understand website traffic, technical performance and general usage patterns.
Where analytics services are used, the processing may involve technical information such as page visits, browser information, referral sources, approximate location and interaction statistics.
Analytics technologies that are not strictly necessary are subject to applicable consent requirements.
CloudTrust does not use website analytics for the purpose of creating individual behavioural advertising profiles.
Information used for statistical analysis is processed in an aggregated or otherwise appropriately protected form wherever possible.
7. RENECTO – SECURE NETWORK CONNECTIVITY
Renecto is a CloudTrust solution providing secure network connectivity and protected communication between devices, systems and network environments.
The solution may establish virtual network connections and transport Layer 2 Ethernet traffic over secured network infrastructure.
Depending on the configuration and functionality used, Renecto may process user and device identification information, authentication and authorisation data, client certificate information, hardware-token binding and related security information, network connection metadata, connection establishment and termination timestamps, technical network configuration information, traffic-volume information required for operational monitoring or accounting, and security and diagnostic events.
Renecto supports security mechanisms including End-to-End Encryption, SSL/TLS-based transport protection and configurable authentication requirements, including multi-factor authentication and client certificate authentication.
The processing of network traffic and associated metadata is limited to what is necessary to establish, maintain, secure and operate the network connection and provide the configured service.
CloudTrust does not use Renecto network information for advertising or behavioural profiling.
The actual scope of network information processed depends on the customer's deployment, configuration and operational requirements.
Where Renecto is deployed and operated on behalf of a customer, the customer determines the purposes and means of processing of personal data transmitted through its network environment, and CloudTrust acts as a data processor where applicable.
8. CONFERNA – SECURE DIGITAL COMMUNICATION
Conferna is a CloudTrust communication platform designed with privacy, security and data minimization as fundamental principles.
The platform provides digital communication and collaboration functionality across supported desktop, mobile, tablet and other compatible environments.
Depending on the features used, Conferna may process user account and identification information, authentication and authorisation information, online presence and availability information, connection and session metadata, communication-related technical metadata, device and application information, and diagnostic and security-related information.
Conferna is designed to minimise the processing of personal communication data.
Private communication content is not intended to be collected for advertising, behavioural profiling or unrelated commercial purposes.
Chat and notification-related information may be maintained within the user's browser environment using technologies such as Local Storage and IndexedDB, depending on the implementation and browser capabilities.
Audio and video communication is designed to use peer-to-peer connections where supported. Such communication is not intended to be recorded or stored by CloudTrust as part of the standard service.
Technical signaling, authentication and connection-management information may nevertheless be processed to establish and maintain communication sessions.
The precise data flows may depend on the selected features, network conditions, service configuration and deployment environment.
Conferna supports secure authentication and access management mechanisms, which may include identity provider integration, multi-factor authentication, TOTP and FIDO2/WebAuthn-based authentication.
CloudTrust does not use private communication content for advertising, behavioural profiling or unrelated commercial purposes.
9. PURPOSES AND LEGAL BASES OF PROCESSING
CloudTrust processes personal data only where an applicable legal basis exists under the GDPR.
Depending on the circumstances, the legal bases may include the following.
Contractual necessity under Article 6(1)(b) GDPR. Processing necessary to provide requested services, establish and maintain customer relationships, manage accounts and fulfil contractual obligations.
Legitimate interests under Article 6(1)(f) GDPR. Processing necessary for legitimate business purposes, including website security, fraud prevention, infrastructure protection, troubleshooting, service improvement and protection of CloudTrust's legal rights, provided that such interests do not override the rights and freedoms of individuals.
Legal obligations under Article 6(1)(c) GDPR. Processing necessary to comply with applicable legal, regulatory, accounting, tax and other statutory requirements.
Consent under Article 6(1)(a) GDPR. Processing based on your explicit or otherwise valid consent, where required, including certain non-essential cookies, analytics technologies and optional communications.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
10. DATA SHARING AND THIRD-PARTY SERVICE PROVIDERS
CloudTrust does not sell personal data to third parties.
Personal data may be shared only where necessary and lawful, including with hosting and infrastructure providers, network and telecommunications service providers, IT security and operational support providers, authentication and identity management providers, website analytics providers where applicable, professional advisers including legal and accounting professionals, and public authorities where disclosure is required by law.
Such providers may process personal data only to the extent necessary for their assigned functions and subject to applicable contractual and legal requirements.
CloudTrust requires appropriate safeguards when engaging third-party processors.
We do not authorise third parties to use personal data entrusted to us for their own unrelated advertising or profiling purposes.
11. INTERNATIONAL DATA TRANSFERS
CloudTrust primarily aims to use infrastructure and service providers operating within the European Economic Area (EEA), where appropriate and technically feasible.
Where personal data is transferred outside the EEA, CloudTrust ensures that the transfer complies with applicable GDPR requirements.
Depending on the circumstances, appropriate safeguards may include an adequacy decision adopted by the European Commission, Standard Contractual Clauses approved by the European Commission, and additional technical and organisational safeguards where necessary.
12. DATA RETENTION
CloudTrust retains personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal obligations.
Retention periods depend on the type of information and the relevant processing purpose.
Contact and business correspondence is retained for the period necessary to manage the relevant business relationship and related obligations.
Account and authentication information is retained while the account remains active and for any additional period required by law or necessary to protect legitimate interests.
Technical and security logs are retained only for the period necessary for operational security, troubleshooting and compliance purposes.
Contractual, invoicing and accounting records are retained for the periods required by applicable legislation.
Consent records are retained as necessary to demonstrate compliance with applicable legal requirements.
When personal data is no longer required, it is securely deleted, anonymised or otherwise appropriately disposed of.
13. INFORMATION SECURITY
Protecting information is a fundamental part of CloudTrust's operations and product development.
We implement appropriate technical and organisational security measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and access.
Depending on the relevant system and deployment, these measures may include encryption in transit and, where applicable, at rest; secure authentication and access control; multi-factor authentication; certificate-based authentication; network segmentation and isolation; restricted administrative access; security monitoring and diagnostic controls; software maintenance and security updates; secure development and deployment practices; and operational and organisational security procedures.
CloudTrust continuously evaluates its security measures in accordance with the nature of the systems, the risks involved and applicable legal requirements.
No internet-based system can guarantee absolute security. However, CloudTrust is committed to maintaining appropriate safeguards and continuously improving its security practices.
14. DATA PROCESSING ON BEHALF OF CUSTOMERS
CloudTrust provides software, platforms and infrastructure that may be used by customers to process personal data relating to their own users, employees, customers or other individuals.
In these circumstances, the customer is generally responsible for determining the purposes and means of processing and acts as the data controller.
CloudTrust processes such data only in accordance with the customer's documented instructions and the applicable contractual arrangements, including data processing agreements where required.
Customers are responsible for establishing an appropriate legal basis for their processing activities, providing the necessary privacy information to their users, defining access permissions and retention requirements, ensuring compliance with applicable data protection legislation, and responding to requests from their data subjects where they act as controllers.
CloudTrust does not independently determine the purposes of customer-controlled processing activities.
15. YOUR RIGHTS UNDER THE GDPR
Depending on the circumstances and applicable legal requirements, you have the following rights concerning your personal data.
Right of access. You may request confirmation as to whether we process your personal data and obtain access to the relevant information.
Right to rectification. You may request correction of inaccurate or incomplete personal data.
Right to erasure. You may request deletion of your personal data where the applicable legal conditions are met.
Right to restriction. You may request restriction of processing in circumstances provided for by the GDPR.
Right to data portability. Where applicable, you may request your personal data in a structured, commonly used and machine-readable format.
Right to object. You may object to processing based on legitimate interests, taking into account the applicable legal conditions.
Right to withdraw consent. Where processing is based on consent, you may withdraw it at any time.
You also have the right to lodge a complaint with the competent supervisory authority.
To exercise your rights, please contact us using the contact details provided in this Policy.
We may request reasonable additional information to verify your identity before responding to a request.
16. SUPERVISORY AUTHORITY
If you believe that your personal data has been processed unlawfully or that your data protection rights have been violated, you may lodge a complaint with the competent supervisory authority.
In Hungary, the competent authority is the National Authority for Data Protection and Freedom of Information (NAIH).
Hungarian Supervisory Authority:
National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9-11, Hungary
Website: https://www.naih.hu
Email: ugyfelszolgalat@naih.hu
Website: https://www.naih.hu/
The supervisory authority is responsible for monitoring the application of data protection legislation and protecting the rights of individuals.
17. THIRD-PARTY WEBSITES AND SERVICES
Our websites and products may contain links to third-party websites, applications or services.
CloudTrust is not responsible for the privacy practices, security measures or content of third-party services that are independently operated.
When accessing third-party websites or services, you should review their respective privacy policies and terms of service.
18. CHANGES TO THIS PRIVACY POLICY
CloudTrust may update this Privacy Policy from time to time to reflect changes in its products, services, technologies, business operations or applicable legislation.
The updated version will be published on the relevant CloudTrust website together with its effective date.
We encourage users to review this Policy periodically to remain informed about how personal data is processed and protected.
19. CONTACT INFORMATION
For questions concerning this Privacy Policy, please contact:
CloudTrust
Hungary
Website: https://cloudtrust.solutions
Contact: privacy@cloudtrust.solutions
Court of Registration: Metropolitan Court of Budapest, Company Court
Company Registration Number: 01-09-197036
EU VAT Number: HU25053768
CloudTrust is committed to protecting privacy, maintaining transparency and providing secure digital technologies built on trust.