Privacy Policy The Good Cloud 5 September 2018

Scope of processing of personal data

We only collect and use our users' personal data to the extent necessary to provide a functioning website together with our content and services. We do not sell, trade, transfer, share any personally identifiable information with outside parties without explicit consent for the user. The collection and use of personal data of our users is normally conducted only with the consent of the user, for example when you order a service from us. An exception applies in cases where it is not practicably possible to obtain prior consent and processing this data is permitted by law.

Cookies

We don't like the use of cookies so we use them as little as possible. If we do decide to use cookies in the future it would be solely to benefit the user and general experience of the website and web-shop. We will then update this policy.

Processing of your personal data is conducted on the following legal grounds:

  • Consent
  • Contractual performance or pre-contractual measures
  • Legal obligations
  • When this is necessary to safeguard a legitimate interest of our company or of a third party and when the interests and fundamental rights and freedoms of the stakeholder do not outweigh the former interest.

Erasure of data and storage period

The personal data of the stakeholder is erased or blocked as soon as the purpose of storage is fulfilled. Furthermore, storage can take place when erasure is in conflict with a legal obligation to store data, e.g. derived from the applicable Tax Code or other laws.

Description and scope of data processing

You can also register on our website. In this case the personal data entered by you will be processed by us. Here too the data is not passed to third parties. The following data is collected in the course of the registration process:

  • The user's IP address
  • E-mail address
  • Name and address
  • Payment details

The processing of your personal data is necessary for contract, performance or a pre-contractual measure. This can however, also take place on the basis of your consent. Your registration is necessary in order to perform the contract or to carry out a pre-contractual measure. Furthermore this is necessary for the provision of the content and services on our website. Storage ends as a matter of course when the purpose has been fulfilled. If the collection and processing of your personal data is necessary for a pre-contractual measure or for performance of the contract, we are then obliged to observe statutory storage periods. In this case erasure is not possible until expiry of this period.

E-mail contact

Our website also contains a possibility to e-mail us, to contact us in electronic form. The following data is processed as part of the contact process:

  • E-mail address
  • Name

Your consent to processing of the data is obtained as part of the transmission procedure, and you are referred to this privacy statement.

You can also use our e-mail address to contact us. Your e-mail is processed by us. Your data is not passed to third parties. None of this data is passed to third parties in this context. Thus, this data is used exclusively for processing the conversation. Your consent forms the legal basis for the data processing. The data is erased once the purpose of the data processing has been achieved. This may depend on the circumstances of the individual case involved in the establishment of contact. Immediate erasure may possibly be prevented by a statutory storage period. You can revoke the consent you have given us.

Storage

We provide a service with which you can store and share your personal data. This data is stored in our datacenter in the Netherlands and will never be used for any other purpose than your storing and synchronising your data. We will not access your stored data in any way, nor will we make it available for others, unless the Dutch law requires us to do so. You can either add, erase or share your files from the service at will, and we will neither know it nor be able to do anything about that. When you share files with others, they will be able to see some basic information about who shared this information with them. All data you have stored in our service will be permanently deleted 30 days after the service contract has ended.

Encryption used to protect personally identifiable information

On our website and in our web-shop we use TLS encryption to protect your data from any unauthorised third parties from "listening in".

Rights of data subjects

You are a data subject (stakeholder) and you have the following rights with regard to us:

  • You can request information about which personal data of which origin is stored about you and for which purposes. You also have the right to be informed when your data is passed to third parties. In this case you can be informed about the identity of the recipient or the categories of recipients.
  • Should your personal data be incorrect or incomplete, you can request correction or addition.
  • You can object to the processing of your personal data for advertising purposes. This is however unnecessary because we will never use your data to that end.
  • You have the right to limit processing if:
    • you contest the correctness of the personal data relating to you for a period that enables the responsible party to check the correctness of the personal data;
    • if the processing is unlawful and you reject the erasure of the personal data and instead request limitation of the use of the personal data;
    • if the responsible party no longer requires the personal data for the purposes of the processing, you however require this data for the establishment, exercise or defence of legal claims, or when you have lodged an objection to the processing under Art. 21 (1) GDPR and it is not yet clear whether the proper reasons of the responsible party prevail over your reasons.
  • You can request the erasure of your personal data. This is possible when the legal basis for the data processing is not given or has ceased to exist. The same applies in cases where the purpose of the data processing is no longer given due to time elapsed or other reasons. Please note that erasure may be prevented by an existing storage period or other protection-worthy interests of our company. We will be happy to inform you of this on request. Should we have made your data public, we are obliged to inform each recipient that you have requested the erasure of all links to this personal data or to copies of this personal data.
  • Furthermore, you have a right of objection if your protection-worthy interest due to a personal situation outweighs the interest of the data processing. This does not apply if we are obliged to conduct the processing on the basis of a statutory regulation.
  • Irrespective of any other regulatory or judicial constraints, you have the right to file a complaint to a supervisory authority if you believe that the processing of personal data relating to you is in violation of data protection rules.
  • You have the right to receive personal data relating to you, which you have supplied to the responsible party, in a structured, accessible and machine-readable format. This only applies to the data we have in our administration. Data you store in our service will never be accessed by us and you can always retrieve it using the sync client. It is therefore unnecessary to have us do that for you.

If you wish to exercise your rights, or if you have any questions about this policy, please contact us.

Changes

This privacy policy is subject to change, for instance when laws change or when our service changes.

As long as we have your mail address, we will tell you when this happens.

Download our privacy policy

You can download our privacy policy here in PDF format.