Privacy Policy – CloudEngagePro.com
Version: October 19, 2026
CloudEngagePro.com is committed to protecting privacy, maintaining confidentiality, and handling personal data responsibly. As a specialist in Salesforce Marketing Cloud, Account Engagement, marketing automation, and international CRM integrations, we recognize that trustworthy data processing is an essential component of professional business operations. We process personal data only for clearly defined purposes, based on an applicable lawful basis and in accordance with the EU General Data Protection Regulation (GDPR) and other applicable privacy legislation.
This Privacy Policy explains what personal data we process, why we process it, how we protect it, when third parties may be involved, and which rights you have. We distinguish between personal data that CloudEngagePro processes for its own business purposes and data handled on behalf of clients within their Salesforce environments or other business systems.
1. Who We Are and Who Is Responsible for Data Processing
CloudEngagePro.com is a trade name of OnlineMarketingMan.net, a business established in the Netherlands. The business is responsible for processing personal data in connection with its own operations, including website administration, business communications, service inquiries, client relationships, and administrative obligations.
Business Information
- Trade name: CloudEngagePro.com
- Registered business: OnlineMarketingMan.net
- Business address: Zwanebloem 3, 5803 LW Venray, the Netherlands
- Dutch Chamber of Commerce (KvK) number: 83950834
- VAT identification number: NL003895276B38
- General contact: info@cloudengagepro.com
- Privacy contact: privacy@cloudengagepro.com
When CloudEngagePro processes personal data within a client’s Salesforce environment, the client may act as the data controller and CloudEngagePro as the data processor. The allocation of responsibilities depends on the actual activities performed, the purposes of processing, and the applicable agreements. Where CloudEngagePro acts solely on the documented instructions of a client, the relevant obligations are established in an appropriate Data Processing Agreement (DPA).
2. What Personal Data Do We Process?
We limit the processing of personal data to information that is relevant and necessary for our business operations, professional services, communications, and legal obligations. The categories of personal data processed depend on your relationship with CloudEngagePro and the services involved.
2.1 Information You Provide Directly
When you contact us, request a consultation, or establish a business relationship on behalf of an organization, we may process the following information:
- Name, job title, company name, and business contact information.
- Email address, telephone number, and relevant correspondence.
- Information submitted through contact forms, inquiries, emails, and supporting documents.
- Information about your organization, project objectives, Salesforce environment, and requested services.
- Information required for proposals, agreements, invoicing, and business administration.
- Scheduling information and business meeting notes relating to arranged appointments.
2.2 Technical Data and Website Usage
When you visit CloudEngagePro.com, technical information may be processed to support the operation, security, and management of the website. Depending on the technologies in use and your cookie preferences, this may include IP addresses, browser types, device information, pages visited, error messages, timestamps, and limited website usage information. Optional analytics and marketing technologies are subject to the applicable consent and transparency requirements.
2.3 Data Within Salesforce Projects
When providing Salesforce consulting services, CloudEngagePro may receive access to personal data in Salesforce CRM, Marketing Cloud Account Engagement, Marketing Cloud Engagement, or connected systems on behalf of a client. Depending on the engagement, this may include contact information, prospect records, engagement data, lead scores, campaign information, account relationships, and operational logs.
Access to this information is limited to the agreed services, such as configuration, analysis, integration, support, and optimization. The client remains responsible for the lawfulness of data collection and for the purposes it determines as controller, to the extent that these responsibilities arise from the actual allocation of roles.
2.4 Special Categories of Personal Data
CloudEngagePro does not request special categories of personal data, such as health information, religious beliefs, or biometric information, as part of its standard consulting and website activities. Please do not submit such information through our contact form or ordinary email. Where special categories of personal data are necessary for a particular client engagement, appropriate legal grounds, security measures, and contractual arrangements must be established in advance.
3. Purposes and Lawful Bases for Processing
We process personal data only where an applicable lawful basis exists under Article 6 of the GDPR. The relevant legal basis depends on the purpose and circumstances of the processing. For business contacts, legitimate interests in professional communications may apply, while an agreement with an individual may involve processing necessary for the performance of that agreement.
| Processing Purpose | Categories of Data | Lawful Basis |
|---|---|---|
| Responding to inquiries and business communications | Name, business contact information, and message content | Legitimate interests or steps taken before entering into a contract |
| Preparing and delivering consulting engagements | Contact, project, and administrative information | Contract performance where applicable; legitimate interests for business contacts |
| Client relationship management and relevant B2B communications | Business contact information and previous correspondence | Legitimate interests where permitted; consent where required |
| Financial administration and legal compliance | Invoicing, contractual, and accounting information | Legal obligations and, where applicable, contract performance |
| Website operation, security, and essential logging | Technical information and security logs | Legitimate interests in maintaining a secure and reliable website |
| Optional analytics, marketing cookies, and electronic marketing | Cookie information, website activity, or contact preferences | Consent where legally required |
Where we rely on legitimate interests, we assess whether the processing is necessary and proportionate and whether those interests are overridden by the rights and freedoms of the individuals concerned. For electronic direct marketing, we also comply with applicable rules governing unsolicited communications. An existing business relationship does not, by itself, constitute unlimited authorization for marketing communications.
4. Data Retention and Data Minimization
We retain personal data only for as long as necessary for the purposes for which it was collected. In determining retention periods, we consider the nature of the information, contractual arrangements, statutory retention obligations, potential disputes, and the need to account for services previously provided.
In the Netherlands, business administration records, including invoices and information subject to statutory tax recordkeeping requirements, generally must be retained for seven years. Retention periods for business inquiries, project documentation, correspondence, and meeting notes are determined according to their purpose, the need for continued retention, and any contractual or legal obligations.
Where processing is based on consent, personal data will no longer be used for the consent-based purpose following a valid withdrawal of that consent. Limited information may nevertheless be retained where necessary to document an unsubscribe request or prevent further unwanted communications.
For information processed solely on behalf of clients, the applicable retention periods and instructions are defined in the relevant client arrangements. Following completion or termination of an engagement, data is deleted or returned in accordance with the applicable Data Processing Agreement, unless further retention is required by law.
5. Sharing Personal Data with Third Parties
We may use external service providers to support our business operations and professional services. Where these providers process personal data on our behalf, we establish appropriate arrangements concerning confidentiality, security, processing purposes, and data protection. Not every third party is legally classified as a processor; its role is determined by the actual nature of the services provided.
Depending on the systems used, recipients or service providers may fall within the following categories:
- Website hosting, technical support, cloud storage, and backup services.
- Business email, office software, scheduling, and communication services.
- CRM, marketing automation, and integration platforms.
- Accounting, financial, and professional business service providers.
- Analytics, security, and website administration services.
- AI service providers, only where their use is permitted for the relevant processing purpose and the data involved.
We do not disclose personal data to third parties for their independent commercial purposes without a valid lawful basis. Where disclosure is necessary to comply with a legal obligation or a legally valid request from a competent authority, we assess the applicable requirements and limit the information disclosed to what is necessary.
6. Salesforce, Client Environments, and Processor Responsibilities
As a Salesforce specialist, CloudEngagePro may perform work in client production environments, testing environments, marketing automation platforms, and CRM systems. These environments may contain commercially confidential information and personal data. Access must therefore be clearly defined in advance from functional, contractual, and technical perspectives.
When CloudEngagePro acts as a data processor, we operate only within the documented instructions of the client and the provisions of the applicable Data Processing Agreement. Where relevant, these arrangements address the nature and purpose of processing, categories of personal data, access permissions, confidentiality, security, subprocessors, international transfers, and the handling of data subject requests.
The client remains responsible for its choice and configuration of Salesforce products, the lawful bases for its marketing activities, the integrity of consent records, and compliance with applicable communications and privacy legislation, insofar as those responsibilities belong to the client.
CloudEngagePro does not automatically acquire the right to use client data for its own marketing purposes by performing technical or functional work. Access to a Salesforce environment does not mean that all information within it may be reused for analytics, exports, AI processing, or other purposes.
7. Artificial Intelligence and Automation
AI-assisted tools may be relevant to consulting, analysis, document preparation, content processing, or technical planning. The use of such tools must be consistent with the processing purpose, the nature of the data, contractual restrictions, and the available security and privacy safeguards.
Where personal data originates from client environments, processing through external AI services is permitted only when that processing is authorized under the engagement and applicable agreements. Relevant considerations include the necessity of disclosing the information, potential anonymization or pseudonymization, provider terms, data storage, international transfers, and any potential use of information for model training.
Where possible, we apply data minimization and use information that cannot be directly attributed to identifiable individuals. Confidential client information must not be entered into external systems merely for convenience. Where a client has established specific limitations on AI use, those limitations form part of the conditions under which the services are delivered.
Using AI does not transfer responsibility for processing quality, lawfulness, or confidentiality to an automated system. Human review remains part of the process wherever it is necessary.
8. Information Security and Confidentiality
CloudEngagePro follows the principle that access to personal data should be restricted to individuals and systems that require it for a legitimate purpose. Appropriate technical and organizational security must reflect the nature and sensitivity of the data and the risks associated with its processing.
Relevant security measures include access management, strong authentication, multifactor authentication where available, encrypted connections, responsible account management, software updates, and minimizing unnecessary copies of personal data. For client projects, additional security requirements are determined by the client environment, permissions granted, and contractual arrangements.
Where a potential personal data breach occurs, an assessment must be made of the measures needed to limit its consequences and whether notification to the responsible party, supervisory authority, or affected individuals is required. Where we act as a processor, the agreed notification and cooperation obligations apply.
No digital system can guarantee absolute security. Continuous attention to access, configuration, vulnerabilities, and operational procedures therefore remains essential.
9. International Processing and Transfers Outside the EEA
CloudEngagePro operates in an international business environment. Clients, suppliers, and digital platforms may therefore be located within or outside the European Economic Area (EEA). Using globally operating cloud and communications services may result in personal data being accessed or processed from other countries.
Where personal data is transferred outside the EEA, a valid international transfer mechanism must be in place. Depending on the destination country and service provider, this may involve a European Commission adequacy decision or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (SCCs). Where necessary, additional safeguards and an assessment of transfer-related risks must be implemented.
A software provider’s country of incorporation or the existence of European data centers does not, by itself, guarantee that data is processed exclusively within the EEA. Support access, subprocessors, and actual data flows must also be considered.
10. Cookies, Analytics, and Website Preferences
CloudEngagePro.com uses technical components that may be necessary for the proper operation and security of the website. Depending on the current website configuration, analytics or marketing technologies may also be used.
For cookies and similar technologies requiring consent, a valid choice must be obtained in advance. Consent must be freely given and may be withdrawn. Rejecting nonessential cookies must not prevent visitors from using the website’s essential functions.
Further information about cookie categories, purposes, providers, retention periods, and available settings is provided in our Cookie Policy.
11. Your Privacy Rights
Where CloudEngagePro processes your personal data as a controller, you may exercise various rights, depending on the circumstances and applicable legal requirements. These include the rights of access, rectification, erasure, restriction of processing, data portability, and objection.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing lawfully conducted before consent was withdrawn. You may object to processing for direct marketing purposes, after which the relevant personal data may no longer be processed for that purpose.
You may submit a request to privacy@cloudengagepro.com. We may request additional information where necessary to verify your identity. We will not request more personal information than is reasonably necessary to handle your request.
We generally respond within one month of receiving your request. Where a request is complex or multiple requests are received, the statutory response period may, subject to the conditions of the GDPR, be extended by up to two additional months. We will inform you of the extension and its reasons within the required period.
If your request concerns personal data that we process solely on behalf of a client, the client may be the data controller. In that situation, we provide assistance with the client’s response in accordance with our contractual and statutory obligations.
If you believe your personal data is not being processed lawfully, you may submit a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or another competent European data protection supervisory authority, where applicable.
12. Data from Other Sources and Automated Decision-Making
Business contact information may be obtained not only directly from you but also from your organization or relevant publicly available business sources. Where this occurs, the applicable GDPR transparency obligations apply, including, where required, providing information about data categories, sources, and processing purposes.
The use of Salesforce, marketing automation, or AI does not automatically mean that CloudEngagePro makes decisions for its own purposes based solely on automated processing that produce legal or similarly significant effects for individuals. If such decision-making is actually implemented, specific information must be provided about the relevant logic, significance, and anticipated consequences, to the extent required by the GDPR.
13. Children and Minors
CloudEngagePro provides services to businesses, professionals, and organizations. Our website and consulting activities are not specifically directed toward minors. If we become aware that personal data relating to a minor has been received without an appropriate lawful basis, we will assess the necessary measures, including deletion where appropriate and legally required.
14. Changes to This Privacy Policy
We may update this Privacy Policy when legislation, business activities, technologies, service providers, or our data processing practices change. The current version will be published on CloudEngagePro.com and include a revision date. Where a change materially affects the processing of personal data, we assess whether additional notification or consent is required.
15. Contact Regarding Privacy and Data Protection
If you have questions about this Privacy Policy, personal data processing, international data transfers, or your rights under the GDPR, please contact us using the information below.
CloudEngagePro.com
A trade name of OnlineMarketingMan.net
Zwanebloem 3
5803 LW Venray
The Netherlands
Privacy inquiries: privacy@cloudengagepro.com
General inquiries: info@cloudengagepro.com
We handle privacy inquiries and requests carefully and assess the information, safeguards, or further action required in each situation.