Data Controller:

CloudDistrict S.L.
B86056074
C/ Princesa 24 - Bajo Dc. 28008 - Madrid
dpd@clouddistrict.com

Data protection officer:dpd@clouddistrict.com

Purposes of the processing of personal data

• Manage and maintain the business relationship.
• Attend to requests for information.
• Manage the recruitment process.
• Send commercial communications of our own or of third parties, always through CLOUD DISTRICT.
• PlData retention periods: As long as the commercial relationship is maintained or its elimination is not requested by the data subject, they should not be deleted because they are necessary for the fulfillment of a legal obligation or for the formulation, exercise and defense of claims.

Source

• Provided by the user

Legal basis

• The performance of a contract with the user.
• The legal obligations of CLOUD DISTRICT.
• The legitimate interest of CLOUD DISTRICT.
• The user’s consent.

Data transfers

• All are necessary for the fulfillment of the above mentioned purposes, or are carried out in compliance with a legal obligation. Public administrations, suppliers for the provision of the requested services, companies and collaborating entities.

Data Subjects’ Rights

They will be exercised by e-mail: dpd@clouddistrict.com, or at the registered office of CLOUD DISTRICT: C/ Princesa 24 - Bajo Dc 28008 - Madrid.

We inform you that you can exercise, where appropriate, the rights of access, rectification or erasure, restriction of processing, objection, data portability and the right to the rights of access, rectification or erasure, restriction of processing, portability, and the right to object to automated individual decisions, as well as to withdraw the consent provided.

You can file a complaint with the Spanish Supervisory Authority: www.aepd.es.

More information in the complete Privacy Policy of this document..

Identification of the Controller

CLOUD DISTRICT, S.L. is the Controller of the processing of your personal data to provide you the services identified in this privacy policy.

CLOUD DISTRICT, S.L., is a company domiciled at C/ Princesa 24 - Bajo Dc 28008 - Madrid and its Tax ID number is B86056074 (hereinafter, “CLOUD DISTRICT”).

En CLOUD DISTRICT is committed to the fundamental right to the protection of your personal data and this privacy policy is intended to inform you of your rights in accordance with the General Data Protection Regulation (“GDPR”).

We hereby inform you that CLOUD DISTRICT has a Data Protection Officer in accordance with the GDPR, who is at your disposal for any doubts or queries regarding the processing of your data, and whom you may contact through dpd@clouddistrict.com

What information will we collect from you?

You should be aware that there are different ways to collect personal data

The data you provide directly to us:

We collect information about you when you contact us through the channels provided for this purpose, such as the contact form on the website.

When you contact us through these channels, we will ask you for some personal information such as your name, email address, telephone number or the company you belong to if you are writing on behalf of an organisation.

All the fields marked with an asterisk (*) in the forms provided will be mandatory, the omission of any of them could lead to the impossibility of us being able to provide the services requested. You must provide truthful information, and it is forbidden to impersonate anyone or to use an alias or anonymous name.

You may not, when providing any data that may be requested from you on the channels, choose expressions that are offensive, correspond to trademarks, trade names, names or pseudonyms of public figures or celebrities that you are not authorised to use.

In order to ensure that the information provided is always up to date and error-free, you shall inform CLOUD DISTRICT as soon as possible of any changes to your personal data that may take place.

Likewise, by clicking on the “I accept” (or equivalent) button incorporated in the aforementioned forms, you declare that the information and data you have provided are accurate and truthful.

Data obtained indirectly:

When you browse, different cookies and other tracking devices may be installed on your device, as explained in our Cookies Policy.

What is the source of your data?

We consider that all the data processed by CLOUD DISTRICT has been provided to us freely.

In the event that the personal data provided is from a third person, you guarantee that you have informed them of this Privacy Policy and have obtained their authorisation to provide the data to CLOUD DISTRICT for the purposes indicated above. You also guarantee that the information provided is accurate and up to date, and you are responsible for any direct or indirect damage or harm that may be caused as a result of non-compliance with this obligation.

How will we use your personal information and what services will we provide you?

CLOUD DISTRICT acts as the controller of the personal data for the following purposes:

• Based on the management of the contractual or precontractual relationship:
• To provide you with the services you have requested from us and to respond to your requests for information.
• To evaluate the CVs received and manage the recruitment processes.

• Based on compliance with legal obligations of CLOUD DISTRICT:
• To allow users to exercise their rights.
• Comply with the regulations applicable to CLOUD DISTRICT.

• On the basis of the explicit, free and unequivocal consent that you give us at the time of collecting your data:
• Perform segmentation and profiling activities according to your interests and through the analysis of the use of the services offered, such as browsing history, in order to customize offers and promotions to each client, offering personalized services and information.
• If applicable, to keep you informed about our own products and services or those of third parties, always sent through CLOUD DISTRICT by electronic means.

• Based on the existence of a legitimate interest of CLOUD DISTRICT:
• To keep you informed about the products and services of CLOUD DISTRICT, related to those previously contracted and that may be of interest to you.
• To carry out periodic reviews of our services and carry out satisfaction surveys in order to evaluate and improve the quality of the service we provide.

NoHowever, if you do not wish your data to be processed for any of these purposes, you may object at any time by contacting us at dpd@clouddistrict.com as indicated in the Rights Management section of this Privacy Policy.

Data transfers and international transfers

All transfers of personal data that we carry out are necessary for the fulfilment of the above-mentioned purposes, or are made in order to fulfil a legal obligation:

• To public administrations and the administration of justice, and to law enforcement agencies in compliance with the legal obligations applicable to us

In this regard, we inform you that any transfer will be made considering all the necessary legal safeguards. We also guarantee that we sign specific contracts with all our service providers as established by the regulations.

Likewise, CLOUD DISTRICT guarantees that in the event that there are suppliers located in countries outside the European Union or other countries not considered adequate in accordance with data protection regulations, the necessary precautions are taken to ensure that the data may be transferred securely, either because the supplier offers appropriate safeguards, through, among others, the adoption of the European Commission's Standard Contractual Clauses, or because any of the exceptions set forth in the regulations are complied with.

Exercising your rights.

We inform you that you will be able to exercise the following rights:

• Rights of access to your personal data to know which ones are being processed and the processing operations carried out with them.
• Right to rectification any inaccurate personal data.
• Right to erasure your personal data, where possible.
• Right to restrict processing of your personal data when the accuracy, legality or necessity of the data processing is in doubt, in which case, we may retain the data for exercise or defence of claims.
• Right to object to automated decision making, including profiling.
• Right to object to the processing of your personal data when the legal basis that enables us to process them is the legitimate interest.
• The right to data portability, when the legal basis that enables us to process them is the existence of a contractual relationship or your consent.
• Right to withdraw the consent granted to CLOUD DISTRICT.

You can exercise your rights at any time and for free in the following ways:

• By sending an e-mail to dpd@clouddistrict.com, indicating the right you wish to exercise and your identification data.
• By sending a written request to the address C/ Princesa 24 - Bajo Dc 28008 - Madrid indicating the right you wish to exercise and your personal data.
• In addition, when you receive any communication from us, by clicking on the unsubscribe section that will contain that communication, you can unsubscribe from all previously accepted commercial communications.

We also inform you that you have the right to file a complaint with the Spanish Supervisory Authority (AEPD), if you believe that we have breached the applicable data protection legislation regarding the processing of your personal data.

In addition, we inform you that you can sign up for the Robinson List at www.listarobinson.es: the advertising exclusion system managed by the Spanish Association for the Digital economy (ADIGITAL), where you can register in order to show your opposition to your data being used for the purpose of sending you commercial communications.

Retention periods and Cookies.

We will only store your data for as long as it is necessary to provide you with these services. Any of the data you provide us through the channels will be blocked as long as they are no longer necessary to manage the service and will only be available in case there is a legal obligation (derived from a request from the State Security Forces or Courts and Tribunals) as well as when you exercise your rights.

Security and confidentiality.

We are dedicated to the security of your information. In order to prevent unauthorized access or unauthorized disclosure of personal data, we have undertaken appropriate technical and physical measures and management processes to safeguard and secure the information we collect from you.

Minors

Minors under 14 years of age may not use the services available through the Website without the prior authorization of their parents or legal representatives, who shall be solely responsible for all acts performed through the Website by the minors in their care, including the filling of forms with the personal data of such minors and the marking, where appropriate, of the boxes accompanying them. In this regard, and to the extent that CLOUD DISTRICT is not able to control whether or not users are minors, it shall be the parents and guardians who shall enable the necessary mechanisms to prevent minors from accessing the Website and/or providing personal data without their supervision, and CLOUD DISTRICT shall not accept any liability in this regard.

Update of the privacy policy

We make our best efforts to maintain our privacy policy updated. If we make changes, they will be clearly identifiable in a clear and specific manner, as possible in the relationship we have established with you (e.g., we may communicate changes to you by email).

This privacy policy has been reviewed and published as of February, 28, 2023.