Privacy Policy

Current version: October 2024

1. Responsible Party

Cloud Dream Team GmbH, Bahnhofstraße 7, 82166 Gräfelfing, Germany
hello@clouddream.team

This privacy policy explains which personal data we process, how we use it and which rights you have.

2. Data We Collect

• Name and contact details, including email, phone number and company address
• Company information
• Technical information such as IP address, device data and usage statistics

3. Purpose of Processing

• Providing our cloud consulting and support services
• Improving and optimising our services
• Complying with legal obligations
• Marketing communication only with the relevant consent

4. Legal Basis

We process data under Art. 6(1)(b) GDPR for contracts and pre-contractual actions, Art. 6(1)(f) GDPR for legitimate interests such as service improvement and IT security, and Art. 6(1)(a) GDPR based on consent.

5. Access to Customer Systems

Where necessary to provide our services, authorised employees may access customer systems and data. Access is restricted to what is required. Employees with access to customer data are bound by confidentiality and strict security standards.

6. Data Processing Agreement

We offer a Data Processing Agreement that defines the contractual measures used to protect personal data.

7. Sharing Data with Third Parties

We share personal data only with consent, for legal claims, where legally required or where necessary to fulfil contractual obligations.

8. Technical and Organisational Measures

• Access controls and logging
• Multi-factor authentication
• Encrypted data transmission
• Regular employee training and audits

9. Transfers to Third Countries

Where data must be transferred outside the EU or EEA, we ensure appropriate safeguards such as EU Standard Contractual Clauses.

10. Retention and Deletion

Personal data is stored while the processing purpose continues or statutory retention obligations apply. It is then securely deleted. Valid deletion requests and withdrawals of consent are honoured unless legal grounds require continued storage.

11. Contact and Microsoft Bookings

When you contact us or book an appointment, we process the information you provide for handling the request and communicating with you. We use Microsoft Bookings for appointments. Processing is based on contractual or pre-contractual necessity, our legitimate interest in effective communication, or your consent.

12. Your Rights

• Access, correction and completion
• Deletion and restriction of processing
• Withdrawal of consent with future effect
• Objection to processing based on legitimate interests

To exercise these rights, please contact us using the details above.

13. Data Security and Encryption

We use technical and organisational measures to protect data against unauthorised access, loss, manipulation and destruction. This website uses SSL or TLS encryption.

14. Microsoft Clarity

Where Microsoft Clarity is enabled on this website, statistical analysis of website usage is performed only with your consent under Art. 6(1)(a) GDPR. Consent may be withdrawn at any time.

Microsoft Privacy Statement ↗︎

15. Mailflow Guard Domain Checker

When you use our free email security check (Mailflow Guard), we process the domain you enter along with the resulting SPF, DKIM and DMARC results. The check, and the company information derived from it, is processed through our partner easyDMARC's TouchPoint platform. This is based on your active use of the tool under Art. 6(1)(a) and 6(1)(f) GDPR.

easyDMARC Legal & Compliance ↗︎

16. Changes

We may update this privacy policy when our services or legal requirements change. The current version is always available on this website.