Privacy Policy
Last updated: 9 September 2026
1. Who is responsible?
The Kitchen Theory Sarl, trading as Cloud Factory, is the data controller for personal data collected through this website. Its registered address is 32, avenue Victor Hugo, 1750 Luxembourg. You can contact us at contact@cloudfactory.lu. Further company details appear in our Impressum.
Data Protection Officer: Maurice Delcourt — contact@cloudfactory.lu.
2. Data we process and why
Website operation and security
Our hosting provider may process technical information such as IP address, date and time, requested page, browser and device information. We use this information to deliver and secure the website, diagnose errors and prevent abuse. The legal basis is our legitimate interest in operating a secure website.
Enquiries and forms
When you submit an event enquiry, we process the information you provide, such as your name, contact details, preferred location, event date, guest count, budget and message. We use it only to answer your request, prepare an offer and organise the requested service. The legal basis is taking steps at your request before entering into a contract and, where applicable, performing that contract.
Job applications
When you apply to join Cloud Factory, we process the name, contact details, position, message and any CV you choose to upload to assess your application, contact you and manage the recruitment process. Uploaded CVs are sent directly to authorised Cloud Factory staff as email attachments and are not made publicly accessible on the website. The legal basis is taking steps at your request before potentially entering into an employment contract and our legitimate interest in recruiting suitable team members. Please do not include sensitive personal information that is not needed for your application.
Cloud Club and newsletters
Cloud Club registration is provided through Leat. When you follow the registration link, Leat processes the details and marketing choices you submit under its own interface. Marketing messages are sent only where you have given the required consent. You can unsubscribe using the link in each message.
Analytics
Google Analytics 4 is configured to load only after analytics consent. If enabled, it helps us understand website use and measure actions such as order, booking and enquiry clicks. You may refuse or withdraw analytics consent without losing access to the website.
Your AI Pizza Concierge
The website offers Your AI Pizza Concierge, an optional AI assistant operated by Cloud Factory and powered through the OpenAI API. The concierge loads only after you enable the AI Concierge category and choose to open the chat. Before it loads, we clearly tell you that you are interacting with an AI system, not a person. If you continue, your messages and technical data needed to operate and secure the service are sent from our server to OpenAI for processing on our behalf. To improve the concierge and our services, Cloud Factory stores a redacted copy of each visitor question with its broad category and date for up to 60 days. We do not store IP addresses or full chat transcripts. Redaction removes obvious contact details and links but cannot guarantee that every personal detail has been removed, so do not enter health information, payment details, passwords or other sensitive or confidential information. The concierge can make mistakes; verify important information with Cloud Factory.
3. Cookies and optional services
We do not load optional analytics or AI services before your permission. You may accept all, reject all or choose by category. Your choice can be changed at any time using in the footer.
Google Analytics and the AI Concierge are disabled when the relevant category is refused. Withdrawing analytics consent stops further collection and removes accessible Google Analytics cookies from this domain. The AI Concierge does not require an optional third-party cookie on this website.
4. Recipients and service providers
Personal data is accessible only to authorised Cloud Factory staff and service providers that need it for the purposes described above. Relevant providers may include OVHcloud for hosting, the website-form and email providers, Leat for Cloud Club, Google for consented analytics, and OpenAI for the optional AI assistant operated by Cloud Factory. Order, delivery, booking, map and social-media links lead to separate services that process data under their own privacy notices.
5. International transfers
Some providers may process data outside the European Economic Area, including OpenAI when it processes AI Concierge messages for Cloud Factory. Where international transfers occur, we require an applicable transfer mechanism and appropriate safeguards under applicable data-protection law. Please consult the relevant provider terms for further details.
6. Retention
We keep personal data only for as long as necessary for the purpose for which it was collected, to manage the customer relationship, recruitment process, or to meet legal, accounting and dispute-resolution obligations. Unsuccessful or irrelevant enquiries are deleted or anonymised when no longer needed. Unsuccessful job applications are deleted when the recruitment process and any necessary follow-up period have ended, unless the candidate agrees to be considered for future opportunities. Provider-specific retention settings are reviewed in the relevant service accounts.
7. Your rights
Subject to the conditions of the GDPR, you may request access, correction, deletion, restriction, portability or object to processing. Where processing relies on consent, you may withdraw it at any time without affecting earlier processing. We do not use this website to make decisions about you based solely on automated processing that produce legal or similarly significant effects.
Send requests to contact@cloudfactory.lu. You also have the right to lodge a complaint with Luxembourg's National Commission for Data Protection (CNPD).
8. Changes to this notice
We may update this notice when our website, providers or legal obligations change. The date at the top shows the latest revision.