GDPR Commitment – CloudyDes Workspace

Quick Overview

At CloudyDes Workspace, we are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR). If your data involves users within the European Union, we provide the tools and agreements necessary to maintain full legal compliance.

What is GDPR?

The General Data Protection Regulation (GDPR) is a European law that came into effect on May 25, 2018. It is designed to protect the personal data of individuals in the EU and regulate how that data is collected, processed, and stored.

Does GDPR Apply to You?

GDPR applies to you if:

• You are a resident of the European Union, or
• You handle the personal data of individuals located in the EU.

If you use CloudyDes Workspace to process personal data such as names, email addresses, phone numbers, or any other personally identifiable information, then GDPR applies to your usage.

Our Commitment

At CloudyDes Workspace, we pledge to:

• Process data only for the intended, disclosed purpose.
• Access data only when technically necessary (e.g., for technical support).
• Protect data using the latest industry security standards.
• Never sell or share data for commercial or third-party marketing purposes.
• Maintain full compliance with all GDPR core principles.

Data Processing Agreement (DPA)

To ensure full compliance, a Data Processing Agreement (DPA) is required between the platform and the user.

• We provide a standard, GDPR-compliant DPA.
• The DPA clearly defines the rights and obligations of both parties.
• To maintain uniform legal compliance for all users, individual modifications to the DPA are not permitted.
• You can request or sign the DPA by contacting our support team.

Sub processors

We utilize trusted third-party service providers to operate our platform, including cloud hosting, payment gateways, analytics tools, and email delivery systems. All of our sub processors:

• Are fully GDPR-compliant.
• Have a formal DPA in place with us.
• Implement high-level security and encryption standards.

Security & Data Protection

We employ a robust range of security measures, including:

• End-to-end data encryption.
• Regular, automated backups.
• Advanced firewall and anti-spam protection.
• Continuous access monitoring and activity logging.

Data Breach Policy

In the unlikely event of a security breach:

• An immediate internal investigation will be conducted.
• Relevant authorities and affected users will be notified within 72 hours.
• We will disclose the type of data affected and explain the corrective measures being taken.

User Rights under GDPR

We fully support and facilitate your rights, including:

• Access: The right to see your personal data.
• Rectification: The right to correct inaccurate data.
• Erasure: The "Right to be Forgotten."
• Portability: The right to transfer your data.
• Objection: The right to object to specific types of processing.

Data Retention & Deletion

Data is retained only as long as necessary to provide our services. Upon account cancellation, data is temporarily held for a short grace period before being permanently and securely deleted from our systems.

Contact & Support

For any privacy or GDPR-related inquiries, please reach out to our Data Protection Officer: 📧 privacy@cloudydes.com