LEGAL // PRIVACY

Privacy Policy

Courtesy translation. This is a non-binding English translation; the German version (Datenschutzerklärung) is the sole legally authoritative text.

This policy informs you about the processing of personal data in connection with this website in accordance with the GDPR.

01Controller

Controller within the meaning of the GDPR:

Dennis Kionga, Managing Director
Cloud Cape IT Security GmbH
Im Zukunftspark 4, 74076 Heilbronn, Germany
Phone: +49 7131 618 718 0
Email: info@cloudcape.de

02Hosting (Vercel)

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA (Vercel B.V. in the EU where applicable). When the website is accessed, the hosting provider automatically processes server log files transmitted by your browser: in particular IP address, browser type and version, operating system, and the date and time of access. This processing is necessary for the technical delivery and security of the website.

The legal basis is Art. 6(1)(b) GDPR (performance of, or steps prior to, a contract) and Art. 6(1)(f) GDPR (legitimate interest in secure, reliable hosting). Data may be transferred to the USA; Vercel processes data in accordance with applicable EU data transfer mechanisms (Standard Contractual Clauses / Data Privacy Framework where applicable).

03Data collection on this website

  • Server log files: collected automatically by our hosting provider when the site is accessed (see section 02).
  • Contact form: the data you enter is processed to handle your inquiry (see section 04).
  • Inquiries by email or phone: your details are processed and stored to handle your request. The legal basis is Art. 6(1)(b) GDPR for contract-related inquiries, otherwise Art. 6(1)(f) GDPR (legitimate interest in processing inquiries).

04Contact form (Formspree)

To process and deliver contact-form submissions to Cloud Cape, we use the service Formspree. The provider is Formspree, Inc., 309 E 21st St, Rm 3331, Austin, TX 78705, USA. The data entered into the contact form (name, company, email address, phone number if provided, subject and message) is processed on Formspree's servers and delivered to our inbox by email.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures / responding to your inquiry) or Art. 6(1)(f) GDPR (legitimate interest in processing inquiries), depending on the nature of the request. A data processing agreement pursuant to Art. 28 GDPR is in place with Formspree. Processing takes place on servers in the USA, and data is therefore transferred to the USA. The EU Standard Contractual Clauses concluded by Formspree as a processor serve as the appropriate safeguard for this transfer to a third country (Art. 46(2)(c) GDPR). Your data remains with us until your inquiry has been fully processed and is no longer needed, unless statutory retention obligations apply.

05Google Maps

On our contact page we embed map material from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is loaded only after an active click ("click-to-load"); only then is a connection to Google's servers established and your IP address transmitted to Google, potentially also to the USA.

The legal basis is your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG) and/or our legitimate interest in making our location easy to find (Art. 6(1)(f) GDPR). EU Standard Contractual Clauses apply to the transfer to the USA.

06Fonts

The fonts used on this website ("IBM Plex Sans", "IBM Plex Mono", "Unbounded") are served locally from our web server / our hosting provider Vercel. No connection to third-party servers (in particular not to Google) is established, and your IP address is not transmitted for the purpose of font delivery.

07Cookies & local storage

Technically necessary cookies / local storage are used to keep the website functional and user-friendly: specifically, we store your display preference (light/dark mode) and your language selection locally in your browser. This data is not transmitted to us and is not used for tracking.

The legal basis for technically necessary storage is Art. 6(1)(f) GDPR (legitimate interest in a technically functioning, optimized service). Cookies requiring consent are only set on the basis of your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG), which you may withdraw at any time.

08Storage period

Personal data is deleted as soon as the purpose of processing ceases to apply and no statutory retention periods conflict with deletion. Data from inquiries (contact form, email, phone) is deleted once the inquiry has been conclusively handled and no further retention is required or legally mandated.

09Your rights

Under the GDPR you have the following rights:

  • Access to the data processed about you (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR), both in general and against direct marketing
  • Withdrawal of consent given, with effect for the future
  • Lodging a complaint with a data protection supervisory authority

To exercise your rights, an informal message to info@cloudcape.de is sufficient.