General information
Cloudiax AG, as the operator of the websites and cloud services www.cloudiax.com, portal.cloudiax.com, status.cloudiax.com and various personal cloud services under *. cloudiax.com takes the protection of your personal data very seriously and strictly adheres to the rules of the legal data protection regulations as well as this privacy policy.
Which data is processed in detail and how it is used depends on the agreed cloud services. Insofar as personal data (name, address, telephone number and e-mail addresses) are collected on our pages, this is always done on a voluntary basis unless higher rights preclude this or if we need the data for carrying out the cloud services. These data will not be disclosed to third parties without your express consent unless we explicitly state in this privacy policy.
Provider and responsible
Headquarters
Cloudiax AG
Kastanienallee 11
23899 Gudow
Germany
Trade register: Lübeck HRB 23402
Tax Office Kleve, 116/5702/3684
VAT ID No. DE 813 45 11 92
Phone
+49 2822 7131 620
24/7 Emergency Hotline
+49 2822 7131 600
E-mail
info@cloudiax.com
Managing board
Dirk Cyrener, MBA (CEO)
Chairman of the supervisory board
Werner Hölzl
Main shareholders with over 25%
Dirk Cyrener (CEO)
Werner Hölzl (Chairman of the Supervisory Board)
Data protection officer
Peter Grätz (privacy@cloudiax.com)
Audit Statement
ISAE 3402/PS 951 certification
The internal control system (ICS) of Cloudiax AG is certified according to ISAE 3402/PS 951 certification.
Subsidiary company
Cloudiax North America Corp.
480 University Avenue, Suite 1500
Toronto, Ontario, M5G 1V2, Canada
Ontario corporation number: 1000042020
President and Managing Director: Dirk Cyrener, MBA
Subcontractor
For our cloud services we rent data center space and internet lines in the following data centers (colocation). All deployed IT equipment is owned by Cloudiax AG.
As a customer, you decide where the cloud services and thus your valuable data will be hosted: either in Germany, Canada, or Singapore.
Data center Germany
CSN-Solutions; Inh. Stephan Rakowski
Kastanienallee 11
23899 Gudow/Kehrsen
Redundant power: N+1
Redundant cooling: N+1
Certificate (in German): ISO 27001 certificate
Certificate translation in English: ISO 27001 certificate translation
Data center Canada
Equinix Inc.
30 Bramtree Court, Brampton
Ontario, CA, L6S 5Z7
Redundant power: N+1
Redundant cooling: N+1
Certificates: SOC 1 Type II, SOC 2 Type II, ISO 27001, ISO 22301, PCI DSS
Data center Singapore
Equinix Inc.
Pioneer Walk, #04 01
Singapore, 627753
Redundant power: N+1
Redundant cooling: N+1
Certificates: SOC 1 Type II, SOC 2 Type II, ISO 27001, ISO 22301, PCI DSS
Backup data center
The backup data center is used for storing redundant backups for disaster recovery. All backups from the data centers mentioned above are stored here in encrypted form as an additional safeguard.
Equinix GmbH
Gutleutstrasse 310
60327 Frankfurt
Germany
Redundant power: N+1
Redundant cooling: N+1
Certificates: SOC 1 Type II, SOC 2 Type II, ISO 27001, ISO 22301, PCI DSS
Cybersecurity
Our cloud services are regularly scanned for vulnerabilities and data leaks by an external service provider.
DGC AG
Deutsche Gesellschaft für Cybersicherheit
Ballastkai 9
24937 Flensburg
Germany
Software manufacturer
In order to provide our cloud service, we use software programs from various manufacturers. In the 3rd level support case, they receive limited and Cloudiax monitored access to our systems.
Types of data collected
The website operator collects, uses and transfers your personal data only if this is permitted by law or if you consent to the collection of data.
Personal information is any information that is used to identify your person and which can be traced back to you. The personal data that this website processes on its own or by a third party includes: first name, last name, e-mail address, telephone number, photos, video recordings, name and website of the company as well as the position of the person in the company.
Full details of each type of personal information processed can be found in the relevant sections of this privacy policy or at times through explanatory text that appears prior to data collection.
You can also visit our websites without providing your personal information.
The user may provide personal data voluntarily.
Any use of cookies – or other tracking tools – by this website or third party service providers used by this website is for the purpose of providing the service requested by the user and for any other purposes described in this document and, if applicable, described in the Cookie and Google Analytics Guidelines.
In which places, which data, how and why we process your personal data on our websites:
References, Partners, Shareholders and Cloudiax employees
Which data: Person name, position in the company, photo, video and name of the company.
How: Only with the express permission of the relevant users (written consent by e-mail address) and in compliance with the applicable data protection regulations.
Why (purpose):
– So that our interested parties can hear the opinions of our references about us.
– Presentation of Cloudiax employees, partners, shareholders and references.
Who (data receiver): publicly on the Cloudiax website.
Deletion period: Due to replacement of newer Videos/Photos of relevance or at the request of the person.
Contact form
Which data: Name, company and e-mail address.
How: In compliance with applicable data protection regulations. Without your consent this data will not be disclosed to third parties.
Why (purpose): for contacting.
Who (data receiver): The data is used by our sales team.
Registration: By completing and sending the form to us.
Deletion period: Contact details that are sent directly to us by e-mail will be within our email-system, which does an automated archiving after 2 years and will be finally deleted after 5 years, unless higher rights preclude this.
Registration form for our events
Which data: E-mail address.
How: In compliance with applicable data protection regulations. Without your consent this data will not be disclosed to third parties.
Why (purpose): To carry out the event.
Who (data receiver): The data is used by our marketing team.
Registration: By completing and sending the form to us.
Deletion period: After the end of the event.
Partner Agreement
Which data: Name, position in the company, address and name of the company, telephone number, e-mail address.
How: In compliance with applicable data protection regulations. Without your consent this data will not be disclosed to third parties.
Why (purpose): The data will be used for the partner contract and thus for our common future cooperation.
Who (data receiver): The data is used by our order team.
Registration: By completing and sending the form to us.
Deletion period: After the end of the contract, as far as no higher law precludes this.
Cloud service portal.cloudiax.com
The information on this point can be found under Cloud services.
Cloud services
Cloudiax provides its customers and thus the employees (natural persons) with the customers, referred to below as user, access to various business applications via various cloud services mentioned above. For this purpose each user receives a C-account, which consists of the customer number and a consecutive number. C-account and personal password provide personal login to these cloud services. Basically this C-account for Cloudiax is anonymous because the allocation between C-account and employees at our customers is not done by Cloudiax but by the customer himself. The responsibility for the processing of personal data and data protection for the C-accounts of a particular customer lays within the administration of the customer. Cloudiax has no way of identifying the natural person which is connected to the C-Accounts.
When using the cloud services through the C-account (user), pseudonymized data will be collected and stored based on the legitimate interest of the Cloudiax. Cloudiax uses this data to improve its own cloud services and to draw conclusions about errors in the operation of cloud services. In addition the data is stored for security and proof reasons, for example to clarify cases of abuse.
This data will be stored and secured for the duration of the contract between Cloudiax and the customer and will be completely deleted by the Cloudiax systems after expiration of the contractual relationship, whereby the customer will be provided with the databases and data of the business application at the end of the contract period. Thus the personal data and usage profiles of the C-accounts contained in the business applications and databases are also handed over to the customer. The customer also receives regular copies of these data during the entire contract period and can save and secure them on his systems due to his legitimate interest.
Any further transmission of this data to third parties will not take place unless a higher right by e.g. courts and / or tax authorities enforce the release. The user can voluntarily deposit his name and e-mail address as well as his telephone number with his C-account via the cloud service portal.cloudiax.com. In this case, Cloudiax is able to inform the user of operational conditions, e.g. an impending expiry of his password, information about disruptions in the procedures, etc. to inform by e-mail or in urgent cases to reach by phone.
The user is entitled and able to change or delete this voluntarily deposited data at any time. The following information is stored during the use of the cloud services through the user: services used with time and date of use; browsers and operating systems used; used IP address; storage, modification and deletion of data by the user within the cloud services with date and time. When logging on to the cloud services through the C-account, a temporary cookie with the session ID is stored on the user’s local computer, which allows the user to use the cloud services without re-login. This cookie is automatically deleted when the session ID expires.
Cloudiax AG uses LinkedIn to pass on news about the company and its products to interested parties, as well as to point out open positions within the company on a case-by-case basis.
Cloudiax does not perform any personal evaluations (statistics), nor is personal data processed within the company.
Except in case of an application for an open position, that is being triggered via LinkedIn, Cloudiax processes this personal data based on GDPR Art.6 (1) b) since the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps prior to entering into a contract at the data subject’s request.
Cookie Policy
This website uses cookies for the pseudonymised range measurement, which are transmitted from either our server or the third party server to the user’s browser. Cookies are small files that are stored on your device. Your browser accesses these files. The use of cookies increases the usability and security of this website.
Most of the cookies we use are so-called “session cookies”. They will be deleted automatically at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases to exclude the acceptance of cookies for certain cases or in general as well as the automatic deletion of cookies when closing the browser.
If you do not want cookies to be stored on your device to measure your reach, you can contradict the use of these files here:
- Cookie opt-out page of the Network Advertising Initiative: http://optout.networkadvertising.org/?c=1
- Cookie opt-out page of the US website:
http://optout.aboutads.info/?c=2 - Cookie opt-out page of the European website: http://optout.networkadvertising.org/?c=1
Popular browsers offer the preference option of not allowing cookies.
Note: There is no guarantee that you will be able to access all functions of this website without restrictions if you make the appropriate settings.
Necessary cookies used by our website (www.cloudiax.com)
Name: cookie_notice_accepted
Purpose: This cookie is set when the user accepts the cookie policy of our website or denies the Tracking Cookies when visiting our website for the first time.
Deletion period: 3 months
Name: wp-wpml_current_language
Purpose: We use session cookies for technical functions of the site, such as saving searches, site registration, or the use of the private area. This cookie remembers the language settled by the visitor.
Deletion period: session cookie
Name: cloudiaxTargetCheckbox
Purpose: The user can choose which kind of content he wants to become on the web page “Help”.
Deletion period: 30 days
Name: cloudiaxPopup
Purpose: This cookie prevents the user from seeing an advertising popup appear many times during the period of one week.
Deletion period: 1 week
Tracking cookies (Marketing analysis) used by our website (www.cloudiax.com)
Name: _ga
Purpose: Registers a unique ID to generate statistical information about how the visitor uses the site.
Deletion period: 2 years
Name: _ga_ZE3NWTFT1Y
Purpose: Used by Google Analytics to reduce the request rate.
Deletion period: Session, 1 minute
Name: _gid
Purpose: Registers a unique ID to generate statistical data about how the visitor uses the site.
Deletion period: Session, 1 minute
Cookies used on sap.cloudiax.com and sap2.cloudiax.com
Name: JSESSIONID
Purpose: Registers a unique ID to identify a web session.
Deletion period: Session
Cookies used on portal.cloudiax.com
Name: ASP.NET_SessionId
Purpose: It is used to maintain an anonymous user session through the server.
Deletion period: Session
Name: __RequestVerificationToken
Purpose: Designed to stop unauthorized publishing of content on a website called Cross-Site Request Forgery. It contains no information about the user and is deleted when the browser is closed.
Deletion period: Session
Name: .ASPXAUTH
Purpose: It is used to identify a logged in user to enable access to secure areas of a site.
Deletion period: Session
Cookies used on status.cloudiax.com
Name: ARRAffinity
Purpose: It is used for load balancing to ensure that visitor page requests are routed to the same server in any browser session.
Deletion period: Session
Consent mode for traffic in European Economic Area (EEA)
We utilize Google’s Consent Mode to meet the data protection requirements in the European Economic Area (EEA). The Consent Mode allows us to adjust the functionality of our Google tags based on our users’ consent settings. Here are the main points:
- Tag Adjustment: Google tags are adjusted according to users’ consent settings. This means that the tags are only activated when the corresponding consent is given.
- Data Collection and Usage: For users who have given their consent, data such as conversions and website interactions can be collected. If no consent is given, this data is not collected.
- Data Protection and User Rights: The Consent Mode helps us uphold users’ data protection rights and ensures that personal data is processed only with explicit consent.
Google Analytics
Due to our legitimate interests this website uses for the optimization and analysis of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR the “Google Analytics” service offered by Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA). The service (Google Analytics) uses “cookies” – text files that are stored on your device. The information collected by the cookies is usually sent to a Google server in the US and stored there.
Google LLC complies with European data protection law and is certified under the Privacy Shield Agreement: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
On this website accesses the IP anonymization. The IP address of the users is shortened within the member states of the EU and the European Economic Area and in the other contracting states of the agreement. This reduction eliminates the personal reference of your IP address. The user’s IP address provided by the browser will not be combined with other data stored by Google.
Under the terms of the Order Data Agreement, which we have created as a website operator with Google Inc., the information we collect will be used to compile an evaluation of website usage and website activity and to provide services related to internet usage.
The data collected by Google on our behalf will be used to evaluate the views of each page by each user for example to generate activity reports on the website to improve our content, usability and page layout.
You have the option to prevent the storage of cookies on your device by making appropriate settings in your browser. There is no guarantee that you will be able to access all features of this website without restrictions if your browser does not allow cookies.
Furthermore you can use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. The following link leads you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=de
Here you can find additional information on data usage by Google Inc.:
- https://policies.google.com/privacy/partners?hl=de (Data collected by Google partners)
- https://adssettings.google.de/authenticated (Settings about advertising that will be displayed to you)
- https://policies.google.com/technologies/ads?hl=de (Use of cookies in ads)
- https://policies.google.com/privacy?hl=de (Google Privacy Policy)
Newsletter Subscription
We “the Cloudiax AG” as a website operator offer you a newsletter by informing you about the scheduled maintenance windows, service failures, product information, events and webinars as well as our news. If you would like to subscribe to the newsletter, you must enter a valid e-mail address. If you subscribe to the newsletter, you agree to the newsletter reception and the explained procedures.
The newsletters are distributed through the automation mailing platform MailChimp, The Rocket Science Group, LLC – 675 Ponce de Leon Ave NE – Suite 5000 – Atlanta, GA 30308 USA. Information about the company’s privacy policy can be found here: https://mailchimp.com/legal/privacy/?_ga=2.34761640.844981075.1526663437-125771996.1526663437
As personal data your e-mail address (mandatory field for subscribing to the newsletter) will be stored at the mail service provider MailChimp (not pseudonymised). MailChimp collects this data in order to send you the newsletter.
Withdrawal and termination
You can revoke your consent to receive the newsletter at any time and thus cancel the newsletter subscription. After your termination your personal data will be deleted. Your consent to the newsletter shipping expires at the same time. At the end of each newsletter you will find the link to termination.
Rights of the user
As a user you have the right to receive, upon request, free information about which personal data has been stored about you. You also have the right to correct incorrect data and to restrict or delete your personal information. If applicable you can also claim your right to data portability. If you believe that your data has been processed unlawfully, you can file a complaint with the appropriate regulatory agency.
Deletion of data
If your wish does not conflict with a legal duty to retain data (e.g, data retention), you have the right to delete your data. Data stored by us, if they are no longer necessary for your purpose and there are no legal retention periods, will be deleted. If deletion can not be carried out because the data is required for legitimate legal purposes, data processing is restricted. In this case, the data is locked and not processed for other purposes. You can unsubscribe from the mailing list at any time by clicking on the unsubscribe link in the footer of each email you receive from us about your selected information or by clicking on the unsubscribe link: https://cloudiax.us18.list-manage.com/unsubscribe?u=ab577d8ef8c555cc63de498b2&id=7c49abe3bb
Google Fonts
Google Fonts is a font-visualization service provided by Google Inc. that allows this site to embed related content on its pages.
This page uses so-called web fonts to represent the font. These are provided by Google. When you visit our page your browser loads the required web font into your browser cache. This is necessary so that your browser can also display a visually improved presentation of our texts. If your browser does not support this feature, a default font will be used by your computer for viewing. To avoid private information being provided to Google, these open source fonts are accessed on our servers.
For more information about Google Webfonts visit https://developers.google.com/fonts/faq?hl=en-US&csw=1
Adobe Sign
The data transmitted via https://www.cloudiax.com/sign-partner-agreement/ will be used for the partner contract and thus for our common future cooperation. We will use this data only for this purpose and delete it after the end of the contract, as far as no higher law precludes this. The partner contract is generated in Adobe Sign and sent to the contract signer. This process is certified by Adobe Sign and the certificate is stored in our Documents Adobe Sign account.
Adobe has more information at https://www.adobe.com/privacy/policies-business/esign.html.
YouTube
In our website we use YouTube. This is a video portal of YouTube LLC., 901 Cherry Ave., 94066 San Bruno, CA, hereinafter referred to as “YouTube.”
YouTube is a subsidiary of Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereafter referred to as “Google.”
By signing up to the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active, Google and its affiliate YouTube guarantees EU privacy protection also be respected when processing data in the US.
We use YouTube in conjunction with the Advanced Privacy Mode feature to help you watch videos. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the quality improvement of our website. According to YouTube the Enhanced Privacy Mode feature means that the data specified below will not be transmitted to YouTube’s server unless you actually start a video.
Without this “Advanced Privacy,” you will be connected to the YouTube server in the United States as soon as you visit one of our websites that has a YouTube video embedded on it.
This connection is required in order to be able to display the respective video on our website via your Internet browser. In the course of this YouTube will at least collect and process your IP address, the date and time as well as the website you have visited. It also connects to Google’s “DoubleClick” ad network.
If you are logged in to YouTube at the same time YouTube will assign the connection information to your YouTube account. If you want to prevent this you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.
For the purpose of functionality and analysis of user behavior YouTube permanently stores cookies on your device via your Internet browser. If you do not agree with this processing you have the option to prevent the storage of cookies by a setting in your Internet browser. More information can be found above under “Cookies”.
Further information about the collection and use of data as well as your rights and protection options is available from Google in the privacy policy at https://policies.google.com/privacy.
Google Maps
In our website we use Google Maps for the representation of our location as well as for the creation of a driving description. This is a service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereafter referred to as “Google.”
Through EU-US Privacy Shield certification https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active Google guarantees that EU data protection regulations will also apply to the processing of data be respected in the US.
In order to enable the representation of certain writings in our Internet appearance a connection to the Google server in the USA is established when calling our Internet appearance.
Insofar as you call up the component Google Maps included in our website Google will store a cookie on your device via your Internet browser. To view our location and provide directions your user settings and data are processed. Here we can not rule out that Google uses servers in the United States.
The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in optimizing the functionality of our website.
Google can investigate this connection with Google from which website your request has been sent and to which IP address the directions are to be transmitted.
If you do not agree with this processing, you have the option to prevent the installation of cookies by the appropriate settings in your Internet browser. Details can be found above under the heading “Cookies”.
In addition the use of Google Maps and information obtained through Google Maps is governed by the Google Terms of Service https://policies.google.com/terms?gl=US&hl=en and the Google Maps Terms of Service https://www.google.com/intl/de_de/help/terms_maps.html.
In addition Google offers more information at https://adssettings.google.com/authenticated,
https://policies.google.com/privacy.
