Legal
Privacy policy
Last updated 2026-09-11
This policy explains how Oceanic Hub LLC processes personal data collected through oceanic.cloud, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
Controller: Oceanic Hub LLC (FEIN 35-2951175)
Address: 5555 Collins Avenue, apt. 10H, Miami Beach, FL 33140, United States
Data protection contact: studio@oceanic.cloud
Oceanic Hub LLC is incorporated in the United States and has no establishment in the European Union. Where we offer services to people located in the Union, the GDPR applies to us under its article 3(2). You can send any question or rights request to the email address above.
2. What data we process and where it comes from
We process only the data you provide voluntarily and the strictly technical data generated by browsing:
| Source | Data |
|---|---|
| Contact form | Name, work email address, company (optional) and the content of the message you write. |
| Direct email | Whatever data you include when writing to studio@oceanic.cloud. |
| Browsing | Technical request data (IP address, browser and device type, date and time, page requested) logged by our hosting provider for security and operational reasons. |
| Web analytics (only with your consent) | Aggregated, pseudonymised usage data: page views, referrer, visit duration and interaction events. |
We do not collect special categories of data, and we do not carry out automated decision-making or profiling that produces legal effects concerning you.
3. Purposes and legal bases
| Purpose | Legal basis | Retention |
|---|---|---|
| Responding to your enquiry and any follow-up correspondence. | Your consent, art. 6(1)(a) GDPR, given by ticking the form checkbox. | 24 months from last contact, unless the relationship leads to a contract. |
| Managing the pre-contractual or contractual relationship if we decide to work together. | Performance of a contract or pre-contractual steps, art. 6(1)(b) GDPR. | For the duration of the relationship plus the applicable limitation periods. |
| Ensuring the security, availability and integrity of the site and preventing abuse and spam. | Legitimate interest, art. 6(1)(f) GDPR. | Technical logs: 12 months maximum. |
| Measuring use of the site in order to improve it. | Your consent, art. 6(1)(a) GDPR, given in the cookie banner. | As set out in the Cookie Policy. |
| Meeting legal obligations and responding to requests from competent authorities. | Legal obligation, art. 6(1)(c) GDPR. | The period required by the applicable rule. |
We do not use your contact details to send unsolicited marketing. If we ever wanted to, we would ask for separate, specific consent first.
4. Recipients and processors
We do not sell or trade your personal data. We work with providers acting as processors on our behalf under article 28 GDPR contracts:
| Provider | Service | Location |
|---|---|---|
| Vercel Inc. | Website hosting and delivery | United States |
| Resend, Inc. | Delivery of the email generated by the contact form | United States |
| Google Ireland Ltd. | Web analytics, only if you accept analytics cookies | European Union, with possible access from the United States |
| Microsoft Ireland Operations Ltd. | Behaviour analysis with Clarity, only if you accept analytics cookies | European Union, with possible access from the United States |
We may also disclose data to professional advisers or competent authorities where a legal obligation requires it.
5. International data transfers
Because the controller is established in the United States and uses US providers, your data is transferred outside the European Economic Area. These transfers rely on the mechanisms set out in Chapter V GDPR: the Standard Contractual Clauses approved by the European Commission and, where the provider is certified, the EU-US Data Privacy Framework (adequacy decision of 10 July 2023).
You can ask us which safeguards apply to each provider by writing to studio@oceanic.cloud.
6. Your rights
You may exercise the following rights at any time:
- Access: find out what data of yours we process.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete your data when it is no longer needed.
- Objection: object to processing based on our legitimate interest.
- Restriction: ask us to suspend processing while a claim is resolved.
- Portability: receive your data in a structured, commonly used format.
- Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.
To exercise them, write to studio@oceanic.cloud stating which right you wish to exercise. We will respond within one month. We may ask you to prove your identity if there is reasonable doubt about who is making the request.
If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority of your country of residence.
7. Security
We apply appropriate technical and organisational measures to protect data: encryption in transit (HTTPS), access control over the contact mailbox, minimisation of the data collected, and periodic review of our providers. No system is entirely infallible, but we keep these measures current and proportionate to the risk.
8. Minors
This site is aimed at businesses and professionals. We do not knowingly collect data from children under 14. If we find that a minor’s data has been provided, we will delete it.
9. Changes to this policy
We may update this policy if our processing activities or the applicable rules change. The version in force is always the one published on this page, with its update date.