Privacy and AI Statement – GooshCloud B.V.
GooshCloud B.V. (“GooshCloud”, “we”, “us” or “our”) attaches great importance to the protection of personal data and the responsible use of Artificial Intelligence (AI). In this statement, we explain how we process personal data and how we use AI within our organization and services.
This statement has been prepared in accordance with the General Data Protection Regulation (GDPR) and, where applicable, the EU Artificial Intelligence Act.
1. Who is responsible for the processing?
GooshCloud B.V.
Eekmolenweg 18
7241 CM Lochem
The Netherlands
www.gooshcloud.com
+31 5732820920
GooshCloud B.V. is responsible for the processing of personal data as described in this Privacy and AI Statement.
2. What personal data do we process?
GooshCloud B.V. processes personal data because you use our services and/or because you provide this data to us yourself.
We may process the following personal data:
* First and last name
* Company name and contact details
* Address details
* Telephone number
* Email address
* Bank account number
* Billing and payment information
* IP address
* Account and profile information
* Correspondence by email, telephone or other communication channels
* Other personal data actively provided by you
3. Special and sensitive personal data
Our website and services are not intended to collect data from visitors under the age of 16, unless they have permission from a parent or guardian. However, we cannot verify whether a visitor is older than 16.
If you believe that we have collected personal data about a minor without parental or guardian consent, please contact us so that we can delete this information.
4. Purposes and legal bases for processing personal data
We process personal data only where permitted under Article 6 of the GDPR.
Purpose Legal basis
Creating and managing customer accounts Performance of a contract
Providing cloud, hosting, managed IT and related services Performance of a contract
Processing payments and invoicing Performance of a contract / legal obligation
Sending newsletters or commercial information Consent or legitimate interest, where permitted
Contacting customers where necessary to provide services Performance of a contract / legitimate interest
Informing customers about changes to services or products Legitimate interest
Delivering goods and services Performance of a contract
Complying with legal obligations, including tax obligations Legal obligation
Improving our website, services and internal processes Legitimate interest
5. Use of Artificial Intelligence (AI)
GooshCloud may use Artificial Intelligence to support its services, internal processes and customer support activities. This may include, for example:
* Supporting technical analysis
* Improving operational efficiency
* Generating or editing text
* Processing information more efficiently
* Supporting service delivery and internal decision-making
AI is used as a supporting tool. Where appropriate, human oversight is applied to review AI-generated outputs before they are used or shared.
6. Human oversight
Where AI is used in processes that may affect customers or other individuals, GooshCloud aims to apply appropriate human oversight. AI-generated results may be reviewed, validated or adjusted by employees where necessary.
GooshCloud remains responsible for the quality, security and reliability of its services.
7. Transparency regarding AI use
Texts, images or other content used by GooshCloud may, in whole or in part, be generated or edited using AI.
Where AI-generated or manipulated content gives a realistic representation of persons, objects, places or events, GooshCloud will disclose this where required under applicable transparency obligations, including the EU AI Act.
8. Automated decision-making
GooshCloud’s current privacy policy states that automated processing may be used for decisions that can have significant consequences for individuals, and that AI tools may be used for this purpose.
Where automated decision-making as referred to in Article 22 of the GDPR is used, GooshCloud will ensure that appropriate safeguards are in place, including the right to obtain human intervention, express your point of view and contest the decision, where applicable.
9. Use of data in AI systems
When using AI systems, GooshCloud takes appropriate measures to protect the confidentiality, integrity and availability of data.
We limit the use of personal data to what is necessary for the intended purpose and, where possible, apply anonymization, pseudonymization or data minimization.
When external AI suppliers are used, GooshCloud ensures that appropriate contractual, technical and organizational safeguards are in place.
10. Retention periods
GooshCloud does not retain personal data longer than strictly necessary for the purposes for which the data was collected.
The following retention periods apply:
- General personal data: 7 years
- Financial data relating to VAT: 10 years
- Other data: for as long as necessary to provide services, maintain customer relationships or comply with legal obligations
11. Sharing personal data with third parties
GooshCloud uses subcontractors and service providers to deliver its services. We only share personal data where necessary for service delivery or where required by law.
This may include:
- IT service providers
- Hosting and infrastructure providers
- Payment and accounting providers
- Subcontractors involved in service delivery
- Professional advisers or authorities where legally required
Where required, GooshCloud enters into data processing agreements with these parties to ensure an appropriate level of security and confidentiality.
12. Transfers outside the European Economic Area
Where personal data is processed outside the European Economic Area, GooshCloud ensures that appropriate safeguards are in place, such as European Commission-approved Standard Contractual Clauses or processing in countries with an adequacy decision.
13. Cookies and similar technologies
GooshCloud’s current privacy policy states that GooshCloud does not use cookies or similar technologies. However, the website also displays a cookie banner referring to essential and optimization cookies.
GooshCloud should ensure that its cookie statement and cookie banner are aligned. Where non-essential cookies are used, prior consent will be requested where required by law.
14. Security of personal data
GooshCloud takes the protection of personal data seriously and implements appropriate technical and organizational measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized changes.
GooshCloud applies security measures in accordance with ISO 27001.
15. Your rights
Under the GDPR, you have the following rights:
* Right of access
* Right to rectification
* Right to erasure
* Right to restriction of processing
* Right to data portability
* Right to object
* Right to withdraw consent
You may exercise some of these rights through your account settings. You may also submit a request to GooshCloud using the contact details provided on the website.
To verify your identity, GooshCloud may ask you to provide a copy of your identification document. In that case, please black out your photo, MRZ, passport number and Citizen Service Number/BSN.
GooshCloud will respond to your request as soon as possible and no later than within four weeks.
16. Complaints
If you have a complaint about the processing of your personal data, please contact GooshCloud first.
You also have the right to lodge a complaint with the Dutch Data Protection Authority.
17. Questions
If you have questions about this Privacy and AI Statement or about our use of AI and personal data, please contact GooshCloud using the contact details published on our website.
18. Changes
GooshCloud reserves the right to amend this Privacy and AI Statement. The most current version will be published on our website.
Organization: GooshCloud B.V.
Version: 1.2
Effective date: 17 June 2026
