Privacy policy

Data controller: EasyDataHost SL — NIF / EU VAT: ESB87347621 — Avenida de la Industria 32, Alcobendas (Madrid), Spain. Contact: privacy@bucketmigrator.com.

What we collect and why

Contact / migration request form

When you submit the contact form we process: source and destination provider, source region, estimated volume, preferred currency, your email address, your message, the language you used, a technical user-agent string and a pseudonymised derivative of your IP address (keyed hash; the plain IP is not stored), used only for abuse prevention.

• Purpose: answering your request and preparing a quote (pre-contractual measures taken at your request) and preventing abuse of the form (legitimate interest).
• Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in abuse prevention).
• Whether providing data is required: providing it is voluntary, but without the fields marked as required (providers, volume and email) we cannot answer your request or prepare a quote.
• Storage: requests are stored in a database on EasyDataHost SL’s own EU-hosted infrastructure and forwarded as an internal email notification via Microsoft 365 (Microsoft Ireland Operations Ltd. acting as processor).
• Retention: requests are deleted automatically from our database after 365 days, unless they led to a contract; the internal email notifications are deleted from our corporate mailbox within the same period.

Browser preferences (no tracking)

Your language, currency and cookie-consent choices are stored locally in your browser (localStorage and one functional cookie). They are not used for tracking and contain no personal information; our server reads the language cookie only to redirect you to the site version in your language.

Analytics (Google Analytics 4, opt-in only)

The site loads no analytics by default. If you accept “Allow analytics” in the cookie banner, we load Google Analytics 4 (Google Ireland Limited) to produce aggregate usage statistics. Legal basis: your consent (Art. 6(1)(a) GDPR), withdrawable at any time via the “Cookie preferences” link in the footer. Google may transfer data to the United States under the EU–US Data Privacy Framework. Cookie names and lifetimes are listed in the cookie policy.

Data processed when executing a contracted migration

We do not store the contents of migrated objects. We process the bucket credentials provided for the job (AES-256-GCM encrypted, decrypted only in memory during execution and deleted on request when the job closes) and transfer metadata (key names, sizes, checksums, timestamps) that forms part of the audit report. Legal basis: Art. 6(1)(b) GDPR (performance of the contract).

Recipients

We do not sell personal data or disclose it to third parties for their own purposes. Hosting runs on EasyDataHost SL’s own EU infrastructure. External processors: Microsoft 365 (email notifications) and — only if you opt in via the cookie banner — Google (Google Analytics usage statistics). If the contact form is protected with Cloudflare Turnstile, Cloudflare Inc. acts as a processor solely to distinguish humans from bots on submission. Data is processed in the EU; these processors may process data in the United States under the EU–US Data Privacy Framework safeguards.

Your rights

Under the GDPR you can request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. Write to privacy@bucketmigrator.com. You can also lodge a complaint with the Spanish supervisory authority (AEPD, www.aepd.es).

Security

Transport encryption (TLS) on every connection, restrictive file permissions on the leads database, access limited to authorized staff, and automatic purge after the retention period.