Privacy Policy

Keep IT simple! / Privacy Policy

1. Responsible Party

Cloud Dream Team GmbH (“we,” “us,” “our”) is committed to protecting your personal data. This Privacy Policy explains the types of data we collect, how we use it, and your rights regarding your data.

2. Data We Collect

We collect and process personal data provided by you during our business relationship or through your use of our services. This may include:

  • Name and contact details (email, phone number, company address)
  • Company information (company name, business address)
  • Technical information (IP address, device data, usage statistics)

3. Purpose of Data Processing

We process your data for the following purposes:

  • To provide our cloud consulting services (e.g., Microsoft 365, Azure Virtual Desktop, Intune)
  • To provide technical support and customer service
  • To improve and optimize our services
  • To comply with legal obligations
  • To communicate with you for marketing purposes (only with your consent)

4. Legal Basis for Processing

We process your data based on the following legal grounds:

  • Article 6(1)(b) GDPR: to fulfill a contract or perform pre-contractual actions.
  • Article 6(1)(f) GDPR: to protect our legitimate interests, such as improving our services or IT security.
  • Article 6(1)(a) GDPR: based on your consent for marketing activities.

5. Access to Customer Systems and Confidentiality

To provide our services, we may access your systems and data. Access is granted only to authorized employees and only to the extent necessary to fulfill our contractual obligations.

Employee Confidentiality Agreements: All employees with access to customer data are bound by confidentiality agreements and adhere to strict security standards.

Data Minimization and Access Limitation: We restrict access to only the necessary data and ensure that only authorized personnel can access your information.

6. Data Processing Agreement (DPA)

We offer a Data Processing Agreement (DPA) that outlines the contractual measures to protect personal data. This ensures GDPR compliance, especially when accessing customer systems and data.

7. Sharing Data with Third Parties

We do not share your personal data with third parties, except under specific conditions:

  • Consent: When you have provided explicit consent (Art. 6(1)(a) GDPR).
  • Legal Claims: For asserting, exercising, or defending legal claims (Art. 6(1)(f) GDPR) when no overriding privacy interest is at risk.
  • Legal Obligations: When legally required under Art. 6(1)(c) GDPR.
  • Contract Fulfillment: For executing our contractual obligations to you (Art. 6(1)(b) GDPR).

8. Security Standards and Technical/Organizational Measures (TOMs)

We implement strict technical and organizational measures (TOMs) to ensure the security of your data, including:

  • Access controls and access logging
  • Multi-factor authentication (MFA)
  • Encrypted data transmission
  • Regular training and audits for employees

9. Data Transfer to Third Countries

If your data must be transferred outside the EU/EEA to fulfill contractual obligations or with your explicit consent, we ensure GDPR-compliant safeguards are in place, such as EU Standard Contractual Clauses, to protect your data.

10. Data Retention and Deletion

Unless a more specific storage period is outlined in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. Once the processing purpose or any legal retention period expires, your data will be securely deleted in accordance with data protection regulations.

If you submit a justified request for deletion or withdraw your consent for data processing, your data will be deleted unless other legally permissible reasons for retention apply (e.g., tax or commercial law obligations); in such cases, deletion will occur after these reasons cease to apply.

Contact Form and Microsoft Bookings

If you submit inquiries via our contact form, any information provided, including contact details, will be stored by us to process your inquiry and respond to further questions. We also use Microsoft Bookings to manage appointments when requested through our site, where your data is handled solely for communication purposes.

This processing is based on Art. 6(1)(b) GDPR for contract-related inquiries or pre-contractual actions, and otherwise on our legitimate interest in effective communication (Art. 6(1)(f) GDPR) or with your explicit consent (Art. 6(1)(a) GDPR). You may withdraw consent anytime.

Please note that we have no influence on the duration of storage of your data that is stored by the operators of the conference tools for their own purposes. For details, please directly contact the operators of the conference tools.

11. Your Rights

You have the right to:

  • Request information about the data we process.
  • Request the correction or completion of inaccurate or incomplete data.
  • Request deletion of your data, provided there are no legal obligations to retain it.
  • Request restriction of data processing under certain conditions.
  • Withdraw your consent for data processing with future effect.
  • Object to data processing if it is based on a legitimate interest.

To exercise these rights, please contact us using the contact information above.

12. Data Security

We implement technical and organizational measures to protect your data from unauthorized access, loss, manipulation, or destruction, including encryption and regular security audits.

13. Cookies and Tracking Technologies

SSL and/or TLS Encryption

For security and to protect the transmission of confidential content, such as inquiries you submit to us as the website operator, this website uses SSL or TLS encryption. An encrypted connection can be recognized by “https://” in the browser address line and the lock icon.

When SSL or TLS encryption is active, data you transmit to us cannot be accessed by third parties.

Microsoft Clarity

On our website, we use the Microsoft Clarity service for statistical analysis of the use of our website. The provider of Microsoft Clarity is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052 USA (“Microsoft”).

Microsoft Clarity uses cookies and a tracking code to analyze website usage. The information collected, such as your IP address, location, or frequency of visits, is transmitted to Microsoft. This processing is based on your consent according to Art. 6(1)(a) GDPR, which you can withdraw at any time.

Further information: Microsoft Privacy Statement and Microsoft Clarity Terms.

Use of OpenStreetMap

We integrate maps from OpenStreetMap (OSM) to provide interactive location information directly on our website. OpenStreetMap is operated by the OpenStreetMap Foundation (OSMF), located in the United Kingdom.

When you access a page with an embedded OpenStreetMap map, certain technical data (including your IP address, browser type, and device information) may be transmitted to OSMF or their associated tile and API servers. This data is required to display the map content correctly.

We use OpenStreetMap based on our legitimate interest in providing an intuitive and user-friendly website experience (Art. 6 para. 1 lit. f GDPR).

For more information about how OpenStreetMap handles your data, please refer to their privacy policy: 👉 https://wiki.osmfoundation.org/wiki/Privacy_Policy

If you prefer not to load maps directly from external sources, you can disable the display of embedded maps via your cookie preferences.

14. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy as necessary to reflect changes to our services or legal requirements. The latest version of this policy can always be found on our website.Current version October 2024

Contact

If you have any questions regarding data privacy, please contact us using the information provided above.