Privacy Policy
Last Updated: November 1st, 2026
1. Who we are
Our website address is https://finopsweekly.com, including its subdomains. We are an information and service platform specializing in the FinOps sector, targeting professionals and businesses in the cloud ecosystem.
The data controller responsible for your personal data is:
- Legal Name: Cloud Cost Control SL (operating FinOps Weekly and SmartClouds)
- Tax Identification Number (NIF): B19340702
- Registered Address: Passeig d'Àngel Guimerà 67, 08230 Matadepera (Barcelona), Spain
- Commercial Registry: Registro Mercantil de Barcelona, Sheet B-620287, Entry 1
- Contact Email: smartclouds@globaltech.tv
More information about the website owner is available in our Legal Notice: https://finopsweekly.com/legal-notice/
2. What Personal Data We Collect and Why
We collect various types of information for different purposes to provide and improve our services.
a) Website Comments:
Data Collected: When visitors leave comments on the site, we collect the data shown in the comment form (name, email address, website), as well as the visitor’s IP address and browser user agent string to help detect spam.
Gravatar: An anonymized string (hash) created from your email address may be provided to the Gravatar service to check if you are using it. Gravatar’s privacy policy is available here: https://automattic.com/privacy/. After your comment is approved, your profile picture is visible to the public in the context of your comment.
b) Newsletter Subscription and Sponsorships:
Data Collected: When you subscribe to our newsletters, we collect your name and email address to send relevant content, industry news, and sponsor offers. Our newsletters are sent through beehiiv, Inc., which acts as our processor and may process data in the United States (EU-US Data Privacy Framework where certified, or Standard Contractual Clauses). beehiiv measures opens and clicks in our emails so we can report aggregated campaign performance. To protect its signup forms against bots and abuse, beehiiv uses HUMAN Security, Inc. as its sub-processor, which processes your IP address and browser and device signals when you use a beehiiv signup form on our website (United States; Standard Contractual Clauses).
Purpose: The legal basis for processing is your explicit consent. You can withdraw it at any time via the unsubscribe link in each communication.
Sponsorships: In the case of sponsored content, we may share aggregated and anonymized data on campaign performance (e.g., open rates, clicks) with our sponsors. We will never share your personally identifiable data without your explicit consent.
c) Webinar and Event Registration:
Data Collected: To register for our webinars or promoted events, we may ask for your name, surname, email address, company, and position. Sometimes we use third-party platforms for registration management (e.g., Zoom, GoToWebinar), which have their own privacy policies that we recommend you review.
Purpose: We use this data to manage your registration, send reminders, and share relevant information about the event. If the webinar is sponsored, we may share your registration details with the sponsor, but only with your explicit consent at the time of registration.
d) Video and Podcast Production:
Data Collected: If you participate as a speaker or interviewee in our video or podcast productions, we will collect your name, image, voice, and professional biography.
Purpose: The legal basis for this processing is the fulfillment of our collaboration agreement. We use this data for the production, distribution, and promotion of the content on our platforms and third-party channels (e.g., YouTube, Spotify).
e) Media:
If you upload images to the website, avoid uploading images with embedded location data (GPS EXIF). Visitors can download and extract location data from images on the website.
f) Cookies:
We use cookies to enhance your experience on our website. For more detailed information, please refer to our Cookie Policy.
g) Embedded Content from Other Websites:
Articles on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves exactly as if the visitor had visited the other website. These sites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with the embedded content, including tracking your interaction if you have an account and are logged in to that website.
h) Community Gamification & Leaderboard Data:
To manage our community leaderboard, we process specific metadata related to your Slack activity. This includes your Slack User Tag, the number of reactions your posts receive, and the length (character count) of your messages.
Content Exclusion: We explicitly do not process, analyze, or store the substantive content of your messages for the purpose of computing leaderboard scores.
Public Display: Your Slack User Tag and associated engagement rank are displayed publicly on the
finopsweekly.comleaderboard.Legacy Members & Opt-Out: Members who joined the community prior to the implementation of this feature may opt out of leaderboard tracking or leave the workspace at any time. To request removal from the leaderboard while remaining in the community, contact
smartclouds@globaltech.tv.
i) Advertising and conversion measurement (only with your consent):
Data Collected: If you accept marketing cookies in our cookie banner, we use the following tools: Meta Pixel (Meta Platforms Ireland Ltd.), LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company), Reddit Pixel (Reddit, Inc.), Google Ads conversion tracking and Google AdSense (Google Ireland Ltd.). They collect online identifiers (cookies such as _fbp, li_sugr, bcookie, _rdt_uuid, _gcl_au, __gads or IDE), your IP address, browser and device data, the pages you visit and the actions you complete on our site (for example, a newsletter signup).
Purpose: To measure how many newsletter signups and visits come from our ads on Meta, LinkedIn, Reddit and Google, and, through Google AdSense, to show advertising on our website. Personalised ads are only shown if you consent; otherwise AdSense shows non-personalised ads, which still use cookies for frequency capping, fraud prevention and measurement where you have consented to them.
Legal basis: Your consent (Art. 6.1.a GDPR and Art. 22.2 LSSI), given through our cookie banner. You can withdraw it at any time via "Manage consent" at the bottom of every page. Withdrawal does not affect processing carried out before it.
Joint controllership: For the collection and transmission of this data through their tags, Cloud Cost Control SL and each platform (Meta Platforms Ireland Ltd., LinkedIn Ireland Unlimited Company, Reddit, Inc. and Google Ireland Ltd.) act as joint controllers (Art. 26 GDPR; CJEU C-40/17 Fashion ID). Each platform is solely responsible for its subsequent processing, described in its own privacy policy: https://www.facebook.com/privacy/policy, https://www.linkedin.com/legal/privacy-policy, https://www.reddit.com/policies/privacy-policy and https://policies.google.com/privacy. You may exercise your rights with us or with them.
International transfers: These providers may transfer data to the United States. Transfers rely on the EU-US Data Privacy Framework where the recipient is certified, or on Standard Contractual Clauses approved by the European Commission.
Retention: Cookies last up to the period stated in our Cookie Policy (https://finopsweekly.com/cookie-policy-eu/); data held by the platforms follows their own retention policies.
j) Website analytics (only with your consent):
Data Collected: If you accept statistics cookies, we use Google Analytics 4 (Google Ireland Ltd.) and Nelio A/B Testing (first-party) to understand how our website is used: pages visited, time on site, device and browser type, approximate location, referral source and the campaign parameters (UTM) of the link you arrived from. GA4 uses cookie identifiers (_ga, _ga_<ID>) and processes your IP address; it is not anonymous.
Purpose: To measure audience, the performance of our content and newsletter signups, and to test alternative versions of our pages.
Legal basis: Your consent (Art. 6.1.a GDPR and Art. 22.2 LSSI). Without consent, Google Analytics only receives cookieless signals without identifiers (Google Consent Mode).
International transfers: Google LLC, United States, under the EU-US Data Privacy Framework.
Retention: Google Analytics data is retained for 14 months.
k) Enrichment of professional contact data:
Data Collected: For newsletter subscribers and community and event contacts, we complete professional information about you (current job title, company, and the URL of your public LinkedIn profile) from publicly available professional sources, starting from your name, surname, email address and company.
How: We use Airtable (Formagrid Inc.), our database provider, including its AI features, which rely on Google's Gemini models (Google as Airtable's sub-processor), and Bright Data Ltd., which performs web searches and reads public web pages on our behalf.
Purpose: To understand the professional profile of our audience (roles, companies and industries) so we can tailor our content, events and sponsorship offers. We do not use this data to make decisions that produce legal or similarly significant effects on you.
Legal basis: Our legitimate interest (Art. 6.1.f GDPR) in knowing our B2B professional audience. We have assessed that this interest is not overridden by your rights, because we only use professional data and do not publish it.
Your right to object: You may object to this processing at any time, without giving reasons, by writing to smartclouds@globaltech.tv. We will stop enriching your data and delete the enriched fields.
International transfers: Airtable and Google may process data in the United States (EU-US Data Privacy Framework and/or Standard Contractual Clauses). Bright Data is based in Israel, a country with an EU adequacy decision.
Retention: Enriched fields are kept while you remain a subscriber or contact, and are deleted when you unsubscribe or object.
3. Who We Share Your Data With
We do not sell or rent your personal data to third parties. However, we may share your information with:
Service Providers (processors): companies that provide us with services such as hosting and content delivery (Hostinger, Cloudflare), newsletter delivery and subscriber management (beehiiv, Inc., which uses HUMAN Security, Inc. as a sub-processor for bot protection on its signup forms), our database and its AI features (Airtable, with Google as sub-processor), web search and page reading for contact enrichment (Bright Data Ltd.), webinar platforms, anti-spam and security (Google reCAPTCHA, Cloudflare Turnstile) and analytics (Google Analytics 4, only with your consent). These providers only have access to the data necessary to perform their functions, act on our instructions and are obligated to protect it.
Advertising platforms: Meta Platforms Ireland Ltd., LinkedIn Ireland Unlimited Company, Reddit, Inc. and Google Ireland Ltd. (Google Ads and AdSense), only with your consent (see 2(i)).
Sponsors: As mentioned above, and only with your prior consent, we may share registration data from webinars or events with their sponsors.
Legal Obligations: If a password reset is requested, your IP address will be included in the reset email. We may also disclose your information when required by law or to protect our rights.
4. How Long We Retain Your Data
Comments: If you leave a comment, the comment and its metadata are retained indefinitely to recognize and approve future comments automatically instead of holding them in a moderation queue.
Registered Users: For users who register on our website (if any), we store the personal information provided in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also view and edit that information.
Newsletter Subscribers: Your data will be retained as long as you do not withdraw your consent.
Webinar/Event Attendees: Data is retained as long as necessary to manage the event and afterwards for the legally required period to handle any potential liabilities.
5. Your Rights Over Your Data
You have the right to:
Access the personal data we hold about you.
Rectify inaccurate or incomplete data.
Delete your data when, among other reasons, it is no longer necessary for the purposes collected.
Restrict the processing of your data.
Object to the processing of your data. In particular, you can object at any time to the enrichment of your professional data described in 2(k).
Request the portability of your data to another service provider.
If you have an account or have left comments on this site, you can request an export file of your personal data, including any data you have provided to us. You can also request that we delete your personal data, excluding any data we are required to keep for administrative, legal, or security purposes.
Where we process your data on the basis of your consent, you can withdraw it at any time, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, you can contact us at smartclouds@globaltech.tv. We will reply within one month. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at https://www.aepd.es.
6. Where Your Data Is Sent
Visitor comments may be checked through an automated spam detection service. Some of our service providers (for example, for email delivery, analytics, content delivery and, only with your consent, advertising measurement) may be located outside the European Economic Area (EEA), mainly in the United States. In such cases, we ensure that data transfers are carried out with appropriate safeguards, such as the EU-US Data Privacy Framework adequacy decision, where the provider is certified, or Standard Contractual Clauses approved by the European Commission.
7. Data Security
We have implemented technical and organizational security measures to protect your personal information from loss, misuse, and unauthorized access.
8. Changes to This Privacy Policy
We reserve the right to modify this Privacy Policy at any time. Any changes will be posted on this page, and you will be notified by email if the changes are significant.
9. Contact
If you have any questions about this Privacy Policy, you can contact us at:
FinOps Weekly – Cloud Cost Control SL (NIF B19340702)
Passeig d'Àngel Guimerà 67, 08230 Matadepera (Barcelona), Spain
Email: smartclouds@globaltech.tv
Contact Form: https://finopsweekly.com/contact-us/
