Company

Products

Privacy at a Glance

Inhalt
1. General Information
2. Verantwortlichkeit und allgemeine Informationen
3. Ihre Datenschutzrechte
4. Hosting und technische Bereitstellung
5. Kontaktaufnahme
6. Bewerbungen
7. Externe Angebote und Links
8. Social-Media-Auftritte

1. General Information

1.1 General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data means any information relating to an identified or identifiable individual. Detailed information on data protection can be found in the following sections of this Privacy Policy.

1.2 Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the relevant contact details in the section “Controller” of this Privacy Policy.

1.3 How do we collect your data?
When you access this website, technically necessary data is automatically processed by the web server. This includes, in particular, your IP address, information about the browser and operating system used, the time the page was accessed and the page requested. Further information can be found in the section “Server Log Files”.
We receive additional personal data when you provide it to us yourself, for example when you contact us via a contact form, by email or by telephone.

1.4 What do we use your data for?
Technical data generated when you access the website is processed in order to provide the website and ensure its secure and technically error-free operation. Data that you provide to us when contacting us is used to process your respective request.

1.5 What rights do you have regarding your data?
Subject to the applicable statutory requirements, you have, in particular, the right to obtain information about the processing of your personal data and to request rectification, erasure or restriction of processing. Where processing is based on consent you have given, you may withdraw that consent at any time with effect for the future. You may also have a right to data portability and a right to object to certain types of processing. Furthermore, you have the right to lodge a complaint with a competent data protection supervisory authority.

You may contact us at any time regarding these or any other questions concerning data protection.

2. Controller and General Information

2.1 Data Protection
We treat your personal data confidentially and in accordance with applicable data protection legislation and this Privacy Policy.

This Privacy Policy informs you about which personal data is processed when you use this website or contact us, the purposes for which it is processed and the legal bases on which such processing is carried out.

2.2 Verantwortliche Stelle
The controller responsible for the processing of personal data in connection with this website is:

The Cloud Networks Germany GmbH
Leuchtenbergring 3
81677 Munich
Germany
Telephone: +49 (0) 89 419 422-0
Email: datenschutz@thecloud.eu

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2.3 Data Protection Officer
You can contact our Data Protection Officer at the address stated above, adding “Data Protection Officer”, or by email at datenschutz@thecloud.eu.

2.4 Retention Period
Unless a more specific retention period is specified in this Privacy Policy, we store personal data only for as long as necessary for the respective purpose of processing. The data will subsequently be deleted unless statutory retention obligations or other legal grounds require further storage.

2.5 Legal Bases for Data Processing
We process personal data only where there is a legal basis for doing so. Depending on the respective purpose, processing may in particular be necessary in order to take steps prior to entering into a contract or to perform a contract (Art. 6(1)(b) GDPR), to comply with a legal obligation (Art. 6(1)(c) GDPR), or on the basis of a legitimate interest (Art. 6(1)(f) GDPR). Where processing is based on your consent, it is carried out pursuant to Art. 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future.

The legal basis applicable to the respective processing activity is specified in the following sections of this Privacy Policy.

2.6 Recipients of Personal Data
Personal data is transferred to other parties only where this is necessary for the purposes described in this Privacy Policy, where there is a legal obligation to do so, or where another legal basis permits such transfer. Where service providers process personal data on our behalf, this is carried out in compliance with the statutory requirements governing processing on behalf of a controller.

3. Your Data Protection Rights

3.1 Withdrawal of Consent
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal of consent remains unaffected.

3.2 Right to Object pursuant to Art. 21 GDPR
Where we process your personal data on the basis of a legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.

If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defence of legal claims.

3.3 Access, Rectification, Erasure and Restriction of Processing
Subject to the applicable statutory requirements, you have the right of access to your personal data and information concerning its processing (Art. 15 GDPR), the right to rectification of inaccurate data (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), and the right to restriction of processing (Art. 18 GDPR).

Where we process personal data automatically on the basis of your consent or for the performance of a contract, you also have the right to receive the data you have provided to us in a structured, commonly used and machine-readable format or, where technically feasible, to have it transmitted to another controller (Art. 20 GDPR).

You may contact us at any time to exercise your rights.

3.4 Data Portability
Where we automatically process personal data that you have provided to us on the basis of your consent or for the performance of a contract, you have the right to receive this data in a structured, commonly used and machine-readable format. You may also request that we transmit this data directly to another controller where technically feasible.

3.5 Right to Lodge a Complaint with a Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. This applies in particular to a supervisory authority in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.
The data protection supervisory authority responsible for us is:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
Further information and contact details are available at www.lda.bayern.de.

4. Hosting and Technical Provision

4.1 Hosting
This website is hosted on servers within the Wifirst Group in France.

When you access this website, technically necessary data, in particular your IP address and other connection data, is processed by the web servers used. This processing is carried out for the purpose of providing the website securely, reliably and without technical errors on the basis of Art. 6(1)(f) GDPR.

Further information about the data processed in this context can be found in the section “Server Log Files”..

4.2 Server Log Files
When you access this website, information is automatically recorded by the web server in server log files. This may include, in particular:

• IP address of the accessing device
• Date and time of access
• Page accessed or file requested
• Amount of data transferred
• Referrer URL, where transmitted by the browser
• Browser type and browser version
• Operating system used
• HTTP status code

This data is processed in order to provide the website technically, ensure the stability and security of its operation, and enable technical errors and abusive access to be identified and investigated. Server log data is not combined with other data sources and is not used to analyse user behaviour.
Processing is based on our legitimate interest in the secure, stable and technically error-free operation of this website pursuant to Art. 6(1)(f) GDPR.

Server log files are stored only for as long as necessary for the purposes stated above. Where data is required for further investigation or preservation of evidence in connection with a security-related incident, it may be retained until the respective matter has been concluded.

4.3 TLS Encryption

This website is transmitted securely via HTTPS. We use SSL/TLS encryption for this purpose. This protects data transmitted between your browser and our web server against unauthorised interception and modification during transmission.

4.4 Cookies and Similar Technologies
This website does not use cookies or similar technologies to store information on your device or access information already stored on your device.

5. Contacting Us

5.1 Contact Form
If you send us an enquiry via the contact form, the information you provide in the form, including the contact details entered there, will be stored by us for the purpose of processing your enquiry and any follow-up questions. We will not disclose this data without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary in order to take steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where such consent has been requested. Consent may be withdrawn at any time.

The data you enter in the contact form will remain with us until you request its erasure, withdraw your consent to its storage, or the purpose for storing the data no longer applies, for example once your enquiry has been fully processed. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

5.2 Contact by Email or Telephone
If you contact us by email or telephone, your enquiry, including any personal data arising from it, such as your name and the content of your enquiry, will be stored and processed by us for the purpose of handling your request. We will not disclose this data without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary in order to take steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where such consent has been requested. Consent may be withdrawn at any time.
Data transmitted to us in connection with your enquiry will remain with us until you request its erasure, withdraw your consent to its storage, or the purpose for storing the data no longer applies, for example once your enquiry has been fully processed. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

6. Application

6.1 Application Process
You may apply to us for advertised vacancies or submit a speculative application, in particular by email or post. As part of the application process, we process the personal data that you provide to us with your application.

6.2 Data Processed and Purpose
This may include, in particular, your contact and communication details, information about your professional background and qualifications, application documents, and information generated during job interviews.
We process this data insofar as this is necessary to decide whether to establish an employment relationship. Processing is carried out in particular on the basis of Section 26 of the German Federal Data Protection Act (BDSG). Where consent is obtained in an individual case, the corresponding processing is carried out on the basis of Art. 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future.

6.3 Recipients
Within our company, access to your application data is limited to those persons and departments that require it in order to conduct the application process.

If your application is successful, the data required for the employment relationship will be transferred to the systems intended for this purpose and subsequently processed as part of the employment relationship.

6.4 Retention Period
If no employment relationship is established, we generally retain your application data for up to six months after completion of the application process. This is done in particular to safeguard our legitimate interests in the establishment, exercise or defence of legal claims pursuant to Art. 6(1)(f) GDPR.

Data may be retained for a longer period where this is necessary due to a specific legal dispute or statutory retention obligations, or where you have consented to longer retention.

6.5 Applicant Pool
If we are unable to offer you a suitable position at the time of your application, we may offer to retain your application documents in our applicant pool for consideration for future vacancies. Inclusion in the applicant pool takes place exclusively on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR.
Consent is voluntary and may be withdrawn at any time with effect for the future. Following withdrawal, your data will be deleted from the applicant pool unless another legal basis requires further retention.

If consent is not withdrawn beforehand, the data will be deleted from the applicant pool no later than two years after consent was given.

7. External Services and Links

7.1 External Links
This website contains links to external websites and online services provided by third parties, for example to our company profiles on social media and professional networking platforms. These are external links only. Simply accessing our website does not establish a connection to the respective providers through these links.

If you follow an external link, you leave our website. From that point onwards, personal data is processed by the respective provider in accordance with its own data protection provisions. Information about the processing of your personal data can be found in the respective provider’s privacy policy or data protection information.

This applies in particular to links to our profiles on Facebook, LinkedIn and Kununu.

7.2 Other External Content
Our website also contains links to websites operated by our customers and business partners, as well as to news portals and other external information services, for example in connection with references, success stories or further information. These are also external links only. When you follow such a link, you leave our website. The operator of the website or service you access is responsible for any subsequent processing of personal data. Further information can be found in the respective provider’s data protection information.

8. Social Media Profiles

8.1 Our Social Media Profiles
We maintain company profiles on various social media and career platforms. When you visit one of these profiles, you leave our website and access the service provided by the respective platform operator.

We currently maintain profiles on:

• [Facebook]
• [LinkedIn]
• [Kununu]

8.2 Data Processing on the Platforms
We maintain publicly accessible profiles on social networks. The social networks we use are listed above under “8.1 Our Social Media Profiles”.
Social networks such as Facebook and similar services may generally analyse your user behaviour extensively when you visit their websites or websites containing integrated social media content, such as Like buttons or advertising banners. Visiting our social media profiles may trigger various processing activities relevant to data protection.
If you are logged into your social media account and visit one of our social media profiles, the operator of the social media platform may associate this visit with your user account. In certain circumstances, your personal data may also be collected if you are not logged in or do not have an account with the respective social media platform. Such data may, for example, be collected through cookies stored on your device or by recording your IP address.
Using the data collected in this way, platform operators may create user profiles containing information about your preferences and interests. This may be used to display interest-based advertising both within and outside the respective social media platform. If you have an account with the respective social network, interest-based advertising may be displayed on devices on which you are or have been logged in.
Please also note that we are unable to monitor all processing activities carried out by social media platforms. Depending on the provider, additional processing activities may therefore be carried out by the respective platform operator. Further details can be found in the terms of use and privacy policies of the respective social media platforms.

8.3 Legal Basis
Our social media profiles are intended to ensure a broad online presence for our company. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Analysis processes initiated by the social networks may be based on different legal grounds, which must be specified by the respective social network operators, for example consent pursuant to Art. 6(1)(a) GDPR.
Controller and Exercise of Rights
When you visit one of our social media profiles, for example on Facebook, we and the operator of the social media platform may be jointly responsible for certain processing activities triggered by your visit. You may generally exercise your rights, including access, rectification, erasure, restriction of processing, data portability and the right to lodge a complaint, both against us and against the respective social media platform operator, insofar as the respective party is responsible for the processing concerned.
Please note that, despite any joint responsibility with social media platform operators, we do not have full control over the processing activities carried out by those platforms. Our ability to influence such processing depends substantially on the respective platform operator.

8.4 Data Processing and Retention Period
If you interact with our social media profiles, for example by commenting on posts or articles, clicking “Like” or otherwise reacting to content, this data generally remains on the respective platform. We do not additionally store such interactions in our own systems. The respective platform operator’s data protection provisions apply to the storage and deletion of this data.

Where an interaction or direct message results in a specific matter requiring action, we may transfer the personal data required for this purpose to our own systems and process it there. This may be the case, for example, if you ask us a question, request information or information material, or ask us to contact you. We process only the data required to handle the respective matter.

Data transferred to our systems is stored only for as long as necessary to handle the respective matter, unless statutory retention obligations or other legal grounds require further storage.

We have no control over the storage or retention periods applied to data by the respective platform operator. Further information can be found in the respective provider’s data protection information.

Last updated: September 2026

Contact