Privacy Policy

1) Introduction and Contact Information of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we provide information about how we handle your personal data when you use our website. Personal data refers to any data that can be used to personally identify you.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Cloud Sharks AG, Pankofen-Hauptstraße 13, 94447 Pankofen, Germany, Tel.: +4999314053800, Email: https://privacy@cloud-sharks.com/. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 The controller has appointed a data protection officer, who can be reached as follows: “Jürgen Hoffmann”

2) Data Collection When You Visit Our Website

2.1 When you use our website solely for informational purposes—that is, if you do not register or otherwise provide us with information—we collect only the data that your browser transmits to the website server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

- The website you visited

- Date and time of access

- Amount of data sent in bytes

- Source/referrer from which you accessed the page

- Browser used

- Operating system used

- IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively should there be concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock icon in your browser address bar.

3) Cookies

To make your visit to our website more enjoyable and to enable the use of certain features, we use cookies—small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain on your device for a longer period and allow for the storage of website settings (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of your web browser’s cookie settings.

If personal data is also processed by individual cookies we use, the processing is carried out in accordance with Art. 6(1)(b) GDPR either for the performance of the contract, in accordance with Article 6(1)(a) of the GDPR in the event that consent has been given, or in accordance with Article 6(1)(f) of the GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website as well as a user-friendly and effective design of the site visit.

You can configure your browser to be notified when cookies are set and decide individually whether to accept them, or to exclude the acceptance of cookies in specific cases or generally.

Please note that if you do not accept cookies, the functionality of our website may be limited.

4) Contacting Us

When you contact us (e.g., via the contact form or email), personal data is collected. The specific data collected when using a contact form is indicated on the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for establishing contact and the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted after your inquiry has been fully processed. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively resolved and provided that no statutory retention obligations preclude this.

5) Registration on the Portal or Forum

You can register on our website by providing personal data. The personal data processed for registration is specified in the registration form used for this purpose. We use the so-called double opt-in procedure for registration, i.e., your registration is only complete once you have confirmed your registration by clicking the link in a confirmation email sent to you for this purpose. If you do not confirm your registration within 24 hours, your registration will be automatically deleted from our database. Providing the aforementioned data is mandatory. You may voluntarily provide any additional information by using our portal.

When you use our portal, we store the data necessary for contract fulfillment, including any payment method details, until you permanently delete your account. Furthermore, we store the voluntary data you provide for the duration of your use of the portal, unless you delete it beforehand. You can manage and change all information in the secure customer area. The legal basis is Art. 6(1)(f) GDPR.

In addition, we store all content you publish (such as public posts, wall entries, guestbook entries, etc.) to operate the website. We have a legitimate interest in the provision of the website, including all user-generated content. The legal basis for this is Article 6(1)(f) of the GDPR. If you delete your account, your public posts—particularly those in the forum—will remain visible to all readers, but your account will no longer be accessible. All other data will be deleted in this case.

6) Comment Feature

When using the comment function on this website, in addition to your comment, information regarding the time the comment was created and the commenter name you selected is stored and published on this website. Furthermore, your IP address is logged and stored. This storage of the IP address is carried out for security reasons and in the event that the data subject infringes the rights of third parties through a submitted comment or posts illegal content. We require your email address to contact you in the event that a third party reports your published content as unlawful.

The legal basis for the storage of your data is Article 6(1)(b) and (f) of the GDPR. We reserve the right to delete comments if they are reported as unlawful by third parties.

7) Web analytics services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.

By default, when you visit the website, Google Analytics 4 sets cookies, which are small text files stored on your device and collect certain information. This information includes your IP address, although Google truncates the last digits to prevent direct identification of individuals.

The information is transmitted to Google’s servers and processed there. This may also involve transfers to Google LLC, which is based in the United States.

Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics and truncated is not merged with other data from Google. The data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.

All processing described above, in particular the setting of cookies on the device used, takes place only if you have given us your have given your explicit consent in accordance with Article 6(1)(a) of the GDPR.

Without your consent, Google Analytics 4 will not be used during your visit to the site. You may revoke your consent at any time with future effect. To exercise your right of revocation, please deactivate this service using the “Cookie Consent Tool” provided on the website.

We have entered into a data processing agreement with Google that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further legal information regarding Google Analytics 4 can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic Features

Google Analytics 4 uses the special “demographic characteristics” feature and can generate statistics that provide insights into the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third-party providers. This allows target groups to be identified for marketing activities. However, the collected data cannot be attributed to any specific individual and is deleted after being stored for a period of two months.

Google Signals

As an extension of Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have personalized ads enabled and have linked your devices to your Google Account, Google may, subject to your consent to the use of Google Analytics pursuant to Article 6(1)(a) of the GDPR, analyze your usage behavior across devices and create database models, including those related to cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the “Personalized ads” feature in your Google Account settings. To do so, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de For more information about Google Signals, please visit the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs

As an extension to Google Analytics 4, the “UserIDs” feature can be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Art. 6(1)(a) GDPR, have set up an account on this website, and log in to this account on various devices, your activities, including conversions, can be analyzed across devices.

For data transfers to the U.S., the provider has joined the EU-U.S. Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with European data protection standards.

8) Site Features

8.1 Applications for Job Postings via Email

On our website, we list current job openings in a separate section, and interested candidates may apply via email to the contact address provided.

Applicants must provide all personal data necessary for a thorough evaluation, including general information such as name, address, and contact details, as well as performance-related documentation and, if applicable, health-related information. Details regarding the application can be found in the job posting.

Upon receipt of the application via email, the data will be stored and evaluated solely for the purpose of processing the application. If we have any questions, we will contact the applicant via the email address or phone number provided. Processing is based on Article 6(1)(b) of the GDPR (or Section 26(1) of the BDSG), under which the application process is considered the initiation of an employment contract.

To the extent that special categories of personal data within the meaning of Art. 9(1) GDPR (e.g., health data such as information regarding severe disability status), processing is carried out in accordance with Article 9(2)(b) of the GDPR so that we may exercise the rights arising from labor law and the law on social security and social protection and fulfill our obligations in this regard.

Cumulatively or alternatively the processing of special categories of data may also be based on Article 9(1)(h) of the GDPR if it is carried out for the purposes of preventive healthcare or occupational medicine, for the assessment of the applicant’s fitness for work, for medical diagnosis, care, or treatment in the health or social sector, or for the administration of systems and services in the health or social sector.

If the applicant is not selected or withdraws their application prematurely, the data they submitted, as well as all electronic correspondence, including the application email, will be deleted no later than 6 months after a corresponding notification. This period is based on our legitimate interest in answering any follow-up questions regarding the application and, if necessary, fulfilling our obligations to provide evidence under the regulations on the equal treatment of applicants.

In the event of a successful application, the data provided will be processed on the basis of Art. 6(1)(b) GDPR (in the case of processing in Germany in conjunction with § 26(1) BDSG) for the purpose of carrying out the employment relationship.

8.2 Online Applications via a Form

On our website, we list currently vacant positions in a separate section, for which interested parties can apply using a corresponding form.

Applicants must provide all personal data necessary for a thorough evaluation, including general information such as name, address, and contact details, as well as evidence of qualifications and, if applicable, health-related information. Details regarding the application can be found in the job posting.

When the form is submitted, applicant data is transmitted to us in encrypted form using state-of-the-art technology, stored by us, and evaluated exclusively for the purpose of processing the application. Processing is based on Article 6(1)(b) of the GDPR (or Section 26(1) of the BDSG), under which the application process is considered the initiation of an employment contract.

Cumulatively or alternatively, the processing of special categories of data may also be based on Article 9(1)(h) of the GDPR if it is carried out for the purposes of preventive healthcare or occupational medicine, for the assessment of the applicant’s fitness for work, for medical diagnostics, care, or treatment in the health or social services sector, or for the administration of systems and services in the health or social services sector.

If an applicant is not selected or withdraws their application early, the data submitted via the form, as well as all electronic correspondence—including the application email—will be deleted no later than six months after notification. This period is based on our legitimate interest in answering any follow-up questions regarding the application and, if necessary, fulfilling our obligations to provide evidence under the regulations on the equal treatment of applicants.

9)Tools and Miscellaneous

9.1 Cookie-Consent-Tool

This website uses a so-called “cookie consent tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The “Cookie Consent Tool” is displayed to users when they visit the page in the form of an interactive user interface, where they can grant consent for specific cookies and/or cookie-based applications by checking the appropriate boxes. When using the tool, all cookies/services requiring consent are loaded only if the respective user grants the corresponding consent by checking the boxes. This ensures that such cookies are set on the user’s respective device only if consent has been granted.

The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, the storage, assigning, or logging cookie settings, this is done in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies and, consequently, in the legally compliant design of our website.

Another legal basis for the processing is Article 6(1)(c) of the GDPR. As the data controller, we are legally obligated to make the use of non-technically necessary cookies contingent upon the user’s consent.

Where necessary, we have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further information about the operator and the settings options for the cookie consent tool can be found directly in the corresponding user interface on our website.

9.2 - Adobe Acrobat Sign

For the digital signing of documents, we use the services of the following provider:

Adobe Systems Software Ireland Limited, 4-6 Riverwalk, City West Business Campus, Dublin 24, Ireland

The service enables the legally valid signing of documents via electronic signature from any device.

To this end, in addition to the electronic signature for verification and proof of signing, the service collects, stores, and transmits usage data of the device used (in particular the IP address) as well as certain transaction data.

Processing is based on our legitimate interest in efficient and time-saving business management and customer-friendly and effective document management in accordance with Art. 6(1)(f) GDPR.

We have entered into a data processing agreement with the service provider that protects the data of our website visitors and prohibits the disclosure of such data to third parties.

10) Rights of the Data Subject

10.1 Under applicable data protection law, you have the following rights as a data subject (rights of access and intervention) vis-à-vis the controller regarding the processing of your personal data; please refer to the cited legal basis for the respective conditions for exercising these rights:

- Right of access pursuant to Art. 15 GDPR;

- Right to rectification pursuant to Art. 16 GDPR;

- Right to erasure pursuant to Art. 17 GDPR;

- Right to restriction of processing pursuant to Art. 18 GDPR;

- Right to be informed pursuant to Art. 19 GDPR;

- Right to data portability pursuant to Art. 20 GDPR;

- Right to withdraw consent pursuant to Art. 7(3) GDPR;

- Right to lodge a complaint pursuant to Art. 77 GDPR.

10.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF INTERESTS DUE TO OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THIS RIGHT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.

11) Duration of Storage of Personal Data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing, and—where applicable—the relevant statutory retention period (e.g., retention periods under commercial and tax law).

When processing personal data based on explicit consent pursuant to Art. 6(1)(a) GDPR, the data in question will be stored until you withdraw your consent.

If statutory retention periods exist for data processed within the scope of contractual or quasi-contractual obligations based on Article 6(1)(b) of the GDPR, this data is routinely deleted upon expiration of the retention periods, provided they are no longer necessary for the performance of a contract or for entering into a contract and/or we no longer have a legitimate interest in further storage.

When processing personal data based on Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

When processing personal data for the purpose of direct marketing pursuant to Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Article 21(2) of the GDPR.

Unless otherwise specified in the other information in this statement regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.