Privacy Policy

Last updated: 13 August 2026

Celestio Cloud runs on top of the Kepler Cloud infrastructure as a product of Kepler Technologies AB. This Privacy Notice informs you why and how we process your personal data and how we respect your privacy.

This is a translation for convenience. The Swedish version is the legally binding one.

Data controller

Kepler Technologies AB (operating the Celestio Cloud service, later referred to as “Celestio Cloud”, “we”, “us”), org.nr 556858-3131, Brogatan 9, 252 66 Helsingborg, Sweden. Website: celestiocloud.com. Contact for all privacy matters: support@celestiocloud.com.

Introduction

This Privacy Notice applies to you if you are:

• Celestio Cloud’s customer or a representative of Celestio Cloud’s customer (“Customer”);
• User of Celestio Cloud’s offerings (“User”);
• Celestio Cloud’s prospect customer or a representative of a prospect customer (“Prospect Customer”);
• A representative of Celestio Cloud’s business partner (“Partner”);
• Visitor of Celestio Cloud web portals (“Visitor”).

This Privacy Notice only covers personal data processing carried out by Celestio Cloud. It does not address, and we are not responsible for, the privacy practices of any third parties. This applies also where our offerings or web portals include hyperlinks to third parties’ web portals. Please note that this Privacy Notice applies to processing of personal data carried out by Celestio Cloud as a data controller. As regards any personal data that our Customers or Users store in or upload to our service, we process such personal data on behalf of our Customers as a data processor. This means that the Customer (or their end customer, as the case may be) is considered the data controller with respect to such personal data.

Personal data we collect and sources of data

(A) Customers

When signing up to our service online or signing an agreement with us, we ask you to provide basic contact information, like name, email, phone number, address, user name, job title, employer or company name.

In addition, we process the following data in relation to the service provision: (i) information about the customer relationship, like the contract between us, start and end dates of the customer relationship and details of the offerings ordered; (ii) billing information, like credit card details, invoicing, bank account information, payments made and outstanding payments; and (iii) all your interactions with us, like communication with our Support or Sales teams, contact requests, feedback and complaints.

Please note that if you do not provide all the personal data we may reasonably request, we may not be able to provide our offerings to you. If you participate in our webinars or events, we may process additional information about your attendance, like your interest in the topic and any information you provide in connection with the registration (for example your dietary requirements).

(B) Users

We collect two types of data from Users: (i) user data; and (ii) technical data. Although technical data is not meant to identify individuals, sometimes individuals can be recognised from it, either alone or when combined or linked with user data. In such situations, technical data can also be considered personal data under applicable laws and we will treat the combined data as personal data.

Primarily the user data is received directly from Users when they register to the service or otherwise at the beginning of and during the customer relationship. We collect and process, for example, the following user data: (i) name and contact details; (ii) email address; (iii) phone number; (iv) credit card details, invoicing and billing information; (v) other personal data Users provide themselves, for example when communicating with our Support team.

We use cookies and other analytics technologies to collect and process technical data when Users interact with our service through the Celestio Cloud control panel. This allows us to calculate the aggregate number of people accessing our service and to monitor the use of the service. This helps us improve our offerings and better serve our Customers and Users. We also use cookies that make the use of the service easier, for example by remembering usernames, passwords and preferences, and to enable certain functions of the control panel, like support chat. We may use web portal analytics to compile technical data and reports on the usage of our offerings. For information about the use of cookies on our web portal, please see the “Visitors” section below.

Technical data we gather in connection with the use of the service includes, for example: (i) the User’s IP address; (ii) browser type and version; (iii) preferred language; (iv) geographic location using the IP address; (v) operating system and computer platform; (vi) the full URL clickstream to, through and from our service, including date and time; (vii) products or offerings the User viewed or searched for while using our service; and (viii) areas of our service the User has visited.

(C) Prospect Customers

We are continuously prospecting new customers and generating sales leads. We may create profiles of Prospect Customers and contact them to provide relevant information about our offerings, to schedule meetings, or to invite them to a webinar or event hosted by Celestio Cloud. For this purpose we process: (i) basic contact details of the Prospect Customer or their representatives, like name, email address, job title, company name; (ii) any communications and interaction between us, like marketing messages or contact requests; (iii) your interest in or participation in our webinars or events, and the information you provide in connection with the registration. We collect this information from you directly (for example when you submit a contact request form), through your interaction with us or the Celestio Cloud web portal, from publicly available resources like LinkedIn, or from our external service providers who generate sales leads.

(D) Partners

We collect personal data of the representatives of our Partners to manage the partner relationship. We handle basic contact information, like name, email address, phone number, job title, employer or company name, to contact Partners and provide relevant information about our offerings, to schedule meetings, or to invite them to webinars or events hosted by Celestio Cloud. We also process personal data relating to any interactions the Partners may have with us, like communications via email or Slack, or submissions through our contact forms. Personal data of Partners is primarily received directly from the Partners. We may also search for potential new Partners from publicly available sources, like LinkedIn, and contact them.

(E) Visitors

We collect personal data of our web portal Visitors with the help of cookies. Cookies that are not necessary for the provision of the web portal are created and stored on the basis of the consent given by the Visitor. Visitors can change their consent settings at any time. For more information about cookies used on our web portal, please see our Cookie Policy.

Purposes and legal grounds

(A) Customers and Users

Purposes of the processing: (i) to provide our offerings and carry out our contractual obligations, including managing user credentials and facilitating transactions and payments, and using personal data to communicate and solve issues when a Customer or User contacts our Support team; (ii) to manage the customer relationship, using basic contact information to provide relevant information about our offerings, advertise new features and products, schedule meetings, or invite Customers to webinars or events; (iii) for customer communication regarding our offerings and updates or changes, including promotional communications about new features and invitations to events; (iv) for quality improvement and trend analysis, using aggregated non-identifiable data where possible; and (v) to ensure compliance with our Terms of Service and applicable laws.

Legal grounds for processing: (i) our legitimate interests to run and manage our business, to provide the offerings Customers have ordered, to run, improve and develop our offerings, and to promote our offerings; (ii) our contractual obligations to provide the offerings to our Customers; (iii) in some cases your consent (for example subscribing to our newsletter); and (iv) our legal obligations (for example our obligation to report criminal activities to law enforcement).

(B) Prospect Customers

We handle personal data of Prospect Customers to sell, market and promote Celestio Cloud offerings, and to improve our brand reputation and recognition. We may create profiles of Prospect Customers by ranking them based on their interest in topics relevant to Celestio Cloud, like data security or certain product features. The ranking is influenced by interactions with the Celestio Cloud web portal, communications with Celestio Cloud, registration to webinars or events, and input by our sales and marketing teams. The processing does not involve automated decision making. The processing is based on our legitimate interests to sell, market and promote our offerings and brand.

(C) Partners

We handle personal data of Partners to manage and develop our business partnerships and to communicate with our Partners. We may contact Partners to provide relevant information about our offerings, to schedule meetings, or to invite them to webinars or events. The processing is based on our legitimate interests to market and promote our offerings and to improve and develop our service offerings.

(D) Visitors

We handle personal data of our web portal Visitors in order to provide the web portal and to analyse its usage, for example to understand how Visitors interact with the web portal and to gather analytics on the number of visitors and their geographical location. The processing is based on our legitimate interest to provide and maintain our web portal, and/or your consent (for example in the case of non-essential cookies).

International transfers

We store personal data primarily within the European Union (EU). However, we may transfer personal data outside the EU or European Economic Area (EEA) in limited cases, for example when we share personal data with affiliated companies or business partners established in non-EEA countries, or when we use external service providers or vendors based outside the EEA. If we transfer personal data outside the EEA, we take steps required by law to ensure that your privacy is protected. This includes requiring our service providers and vendors to enter into binding contractual commitments designed to protect your data, and evaluating the information security measures undertaken by such providers. When we share personal data outside the EEA, we rely on either the Standard Contractual Clauses approved by the EU Commission or the EU Commission’s Adequacy Decision, depending on the transfer location. All Kepler Technologies group companies, regardless of their location, follow the same information security management system designed to ensure a high level of security and confidentiality of our information assets.

How we share personal data

We may share personal data with third parties in the following circumstances:

1. Kepler Technologies group companies. Your personal data may be shared with or accessed by Kepler Technologies group companies as part of running our business, to enable internal collaboration such as sales and marketing, customer relationship management, service provision, customer support and management of our internal IT systems.
2. For the provision of Celestio Cloud offerings, and managing and developing the customer relationship. We share personal data with third-party service providers to the extent necessary to provide our offerings, manage the customer relationship and promote our offerings (data storage, analytics, sales, marketing and customer support). While the customer database is hosted on our own servers within the EU, we use third-party tools for example to facilitate credit card payments and manage communications between our Support team and Customers and Users. We have taken appropriate contractual and organisational measures to ensure the personal data is processed only for permitted purposes, securely and in accordance with applicable laws.
3. For legal compliance. We may share personal data with third parties to comply with our legal obligations, for example in response to lawful requests by public authorities or law enforcement, legal process (such as a court order, search warrant or subpoena), to satisfy applicable laws or regulations, to detect, prevent or address fraud, security or technical issues, or where we have a good faith belief that there is an emergency that poses a threat to your or another person’s health and safety. Where possible, we will inform you in advance about such disclosure and processing.
4. For other legitimate purposes. We may share personal data where we have a legitimate reason, for example to ensure complementary service offerings and to respond to tenders, or in connection with a business transition such as a merger, acquisition or sale of assets.
5. With your explicit consent. We may share personal data with third parties for other purposes when we have your explicit consent to do so. You have the right to withdraw this consent at any time.

All of our affiliates and third-party service providers are required to take appropriate security measures to protect your data and may only process personal data for the purposes mentioned in this Privacy Notice and in accordance with our instructions.

Retention

Celestio Cloud does not store personal data longer than legally permitted and than is necessary for the purposes described in this Privacy Notice. The storage period depends on the nature of the information and the purposes of processing.

• Users. Typically we store a User’s personal data for as long as the User is a registered user of our offerings. We may retain it longer if required by law or authorities’ orders, if we have reasonable grounds to believe it is necessary for investigations relating to illegal or criminal activities or breach of our Terms of Service, or if we need it for internal reporting and reconciliation.
• Customers and Partners. We retain personal data for as long as the customer or partner relationship continues, and thereafter for as long as we may need it for internal reporting and reconciliation or to initiate or defend legal proceedings.
• Prospect Customers. We retain personal data for as long as you remain a potential customer. We review our prospective customer database regularly to ensure the personal data remains relevant and accurate.
• Visitors. You can delete the cookies stored on your device at any time through your browser settings.

Your rights

You always have the right to:

1. Obtain confirmation as to whether or not personal data concerning you is being processed and, where that is the case, access to the personal data.
2. Request an electronic copy of the personal data for portability.
3. Have incorrect, imprecise, incomplete, outdated or unnecessary personal data corrected or completed.
4. Request restriction of processing of your personal data in the circumstances referred to in Article 18 of the GDPR.

You also have the right to:

5. Request erasure or deletion of your personal data. We will always respond to your request and inform you whether your personal data will be deleted or retained despite your request, including the reasoning behind any retention.
6. Withdraw your consent at any time, where the processing is based on your consent.

Where the processing of your personal data is based on our legitimate interest, you also have the right to object to the processing in the circumstances referred to in Article 21 of the GDPR. Please note that if you request deletion of or restrictions to the personal data we process about you, we may not be able to provide our offerings to you.

How to use these rights. If you want to exercise any of the above rights, please contact us at support@celestiocloud.com. Please include your full name, company name (if applicable), address, email address and phone number. When you exercise your rights, we may need to request additional information to verify your identity. This is a security measure to ensure we do not disclose personal data to any person who does not have the right to receive it. We may reject requests that are unreasonably repetitive, excessive or manifestly unfounded.

Direct marketing

Notwithstanding any consent granted beforehand for the purposes of direct marketing, you have the right to opt out of receiving electronic direct marketing communications from us by using the unsubscribe option offered in connection with any direct marketing message. Regardless of your possible opt-out, we will use Customers’ and Users’ email addresses to send occasional communications regarding updates to our offerings or important information regarding the Kepler Cloud infrastructure.

Lodging a complaint

You have the right to make a complaint at any time to the supervisory authority in your country of residence. As Kepler Technologies AB is established in Sweden, the relevant supervisory authority is the supervisory authority in Sweden. We would, however, appreciate the chance to deal with your concerns before you approach any supervisory authority.

Security

We have physical, technical and organisational measures and procedures in place to safeguard and secure the personal data we gather and process. The measures include, for example and where appropriate, encryption, firewalls, secure facilities and managing access rights to systems. Our security controls are designed to maintain an appropriate level of data confidentiality, integrity and availability. We regularly test our web portals, data centres, systems and other assets for security vulnerabilities. However, please remember that you, as a Customer or User, are responsible for the confidentiality and security of the credentials and passwords used to access our offerings. To protect your account with an extra layer of security, we encourage you to enable two-factor authentication (2FA).

Updates

We may update this Privacy Notice from time to time by publishing a new version on our web portal. If we plan to introduce material changes, we will inform you about it in advance.

Questions or concerns?

If you have any questions about this Privacy Notice or the way Celestio Cloud processes your personal data, please contact us at support@celestiocloud.com.