Data Protection Policy
Last updated: 16.04.2025
Cloudblick ("we", "our", or "us") is committed to ensuring the security and protection of the personal data that we process and to providing a compliant and consistent approach to data protection. This policy outlines our responsibilities and obligations under the General Data Protection Regulation (GDPR) and other applicable data protection laws in Germany.
1. Purpose
This policy sets out how Cloudblick protects personal data and ensures the rights of individuals are respected in accordance with GDPR. It applies to all employees, contractors, and third-party service providers.
2. Scope
This policy covers all data subjects whose personal data is collected, stored, or processed by Cloudblick, including but not limited to:
- Website visitors
- Clients and customers
- Employees and contractors
3. Data Protection Principles
Cloudblick is committed to processing personal data in accordance with the following principles:
- Lawfulness, Fairness, and Transparency
- Purpose Limitation
- Data Minimization
- Accuracy
- Storage Limitation
- Integrity and Confidentiality
- Accountability
4. Legal Basis for Processing
We only process personal data when there is a legal basis to do so under GDPR, including
- Consent
- Contractual necessity
- Compliance with legal obligations
- Legitimate interests
5. Data Subject Rights
We ensure that data subjects can exercise their rights under GDPR, including:
- The right to access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- The right to withdraw consent
Requests can be made by contacting us at support@cloudblick.com.
6. Data Security
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Secure servers and infrastructure
- Data encryption
- Access controls and authentication
- Regular security audits
- Employee training and awareness
7. Data Breach Response
In the event of a personal data breach, we will:
- Contain and assess the breach
- Notify affected individuals where required
- Report the breach to the relevant data protection authority within 72 hours if necessary
- Review and update internal procedures to prevent future incidents
8. Data Retention
Personal data is retained only as long as necessary to fulfill its purpose or to meet legal, contractual, or regulatory requirements. Retention periods are reviewed regularly.
9. Third-Party Processors
Cloudblick ensures that all third-party processors are GDPR-compliant and have appropriate data protection agreements in place.
10. International Data Transfers
When transferring data outside the EEA, we ensure that appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.
11. Employee Responsibilities
All employees and contractors must adhere to this policy and participate in regular data protection training. Breaches of this policy may result in disciplinary action.
12. Monitoring and Review
This policy is reviewed annually and updated as needed to reflect changes in law, regulation, or internal practices.
13. Contact Us
Cloudblick- Berlin, Germany
- Email: Support@cloudblick.com
- Website: https://cloudblick.com