Privacy Policy
Last updated: May 2026. This policy describes how TheCloudChef.io ("the Site") processes personal data when you visit this technical blog. It is written to align with the EU/UK General Data Protection Regulation (GDPR) and good-practice transparency for visitors worldwide.
1. Data controller
The data controller responsible for this Site is:
Oscar Garcia Jr.
Operating TheCloudChef.io
Email: contact@thecloudchef.io
For GDPR requests (access, erasure, etc.), use the email above and include "GDPR request" in the subject line so we can respond within statutory timeframes.
2. Hosting and platform (Blogger / Google)
The Site is published on Blogger, a service operated by Google LLC (or its regional affiliate). When you load pages, Google processes technical and account-related data as described in Google's Privacy Policy and Blogger's terms. We do not control Google's infrastructure logging; we describe our own choices (analytics, ads, contact) below.
3. What personal data we process and why
3.1 Data you send us voluntarily
If you email us or use a contact mechanism, we process your name, email address, message content, and related metadata (e.g. timestamps) to read and reply. Legal basis (GDPR Art. 6(1)(b)): steps prior to a contract / our legitimate steps to respond to your request; where applicable Art. 6(1)(f) legitimate interest in operating the Site and communicating with readers.
3.2 Server and security logs
Like most sites, hosting and network systems may process IP address, user agent, date/time, referrer, request path for security, abuse prevention, and troubleshooting. Legal basis: Art. 6(1)(f) legitimate interests in security and service integrity. Where we or our analytics provider apply IP anonymisation, this reduces identifiability of analytics data.
3.3 Cookies and similar technologies
We use cookies and similar storage where necessary for the Site to function and, where you consent, for measurement and advertising. Legal basis: Art. 6(1)(a) consent for non-essential cookies (e.g. personalised ads, optional analytics where consent is required); Art. 6(1)(f) or (b) for strictly necessary cookies. Use the cookie banner or tool provided on the Site (e.g. Google consent options where implemented) to adjust preferences where available.
For a detailed list of cookies, retention, and vendors, see our Cookie Policy page (publish separately and link it from your site menu).
3.4 Google AdSense and advertising partners
Where enabled, Google AdSense (and possibly other ad partners) may use cookies or similar technologies to serve and measure ads, including personalised ads if you consent. Google and partners may process data as described in Google's advertising policies. You can control personalised ads from Google at adssettings.google.com and learn about industry opt-outs at aboutads.info/choices and youronlinechoices.eu (EU).
3.5 Google Analytics (if used)
If we use Google Analytics, it helps us understand aggregate traffic (e.g. pages viewed, general location). We aim to use settings consistent with privacy guidance (e.g. IP anonymisation where offered). Legal basis: your consent where required, or legitimate interest only where permitted by law without consent.
3.6 Embeds (YouTube, GitHub, etc.)
Articles may embed third-party content. Those providers may collect data (e.g. IP address, device data) under their own policies when you interact with the embed. We do not control their processing; please read their privacy notices.
4. Recipients and categories of recipients
Personal data may be shared with:
- Google (Blogger hosting, and where used: Analytics, AdSense, fonts/CDN as configured)
- Advertising and analytics vendors you consent to via the cookie/consent tools on the Site
- Professional advisers where required (e.g. legal), and authorities where the law requires disclosure
We do not sell your personal data.
5. International transfers
Data may be processed in the European Economic Area (EEA), the UK, the United States, and other countries where our providers operate. Where GDPR applies, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs), UK addenda where relevant, or other mechanisms offered by providers (e.g. Google's data protection terms), together with supplementary measures where required.
6. Retention
- Emails and enquiries: kept only as long as needed to respond and for a limited follow-up period unless law requires longer retention.
- Analytics: per settings in the analytics product (e.g. automatic deletion after a defined period where configured).
- Cookies: as set out in the Cookie Policy / vendor documentation.
7. Your rights (EEA, UK, and similar laws)
Depending on your location, you may have the right to:
- Access your personal data
- Rectification of inaccurate data
- Erasure ("right to be forgotten") in certain cases
- Restriction of processing in certain cases
- Data portability for data you provided where processing is based on consent or contract and is automated
- Object to processing based on legitimate interests (including profiling in some cases)
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
- Lodge a complaint with a supervisory authority
Supervisory authorities: EEA residents may contact their local Data Protection Authority (list: EDPB members). UK residents may contact the ICO.
Automated decisions: we do not use automated decision-making or profiling that produces legal or similarly significant effects solely by automated means for visitors of this blog.
8. Children
The Site is directed at a general technical audience and is not aimed at children. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will take appropriate steps.
9. Security
We use reasonable organisational and technical measures appropriate to the nature of this blog (e.g. secure communication where offered by providers). No method of transmission over the Internet is 100% secure.
10. Changes
We may update this policy to reflect legal, technical, or operational changes. The "Last updated" date at the top will change when we do; material changes may be highlighted on the Site where practical.
11. Contact
Questions or GDPR requests: contact@thecloudchef.io
This Privacy Policy is provided for general information and does not constitute legal advice. Have it reviewed by qualified counsel for your specific situation, especially if you process special-category data or operate at scale. For disclaimers about tutorials, code samples, and liability, see the separate Disclaimer page.