( legal )

PRIVACY POLICY.

data controller

CLOUD DISTRICT S.L.
Tax ID No. B86056074
Calle Ferraz 78, 3 B - 28008 Madrid
Data Protection Officer: dpd@clouddistrict.com

purposes of the processing of personal data

Manage and maintain the contractual relationship.
Respond to requests for information.
Manage personnel recruitment processes.
To send commercial communications regarding our own or third-party products and services.
Retention periods: The data will be retained for as long as the contractual relationship is maintained, as long as the data subject does not request its erasure, or does not have to be deleted because it is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims.

origin

Provided directly by the user or collected through cookies and similar tracking technologies on the website of the data controller.

legal bases

Performance of a contract with the user.
Cloud District's legal obligations.
Cloud District's legitimate interests.
User consent.

recipients of personal data

Public administrations competent, to comply with legal obligations, financial institutions for the collection of our services and service providers. All of this disclosures are necessary for the fulfilment of the purposes indicated above, or are carried out in compliance with a legal obligation.

rights of the data subjects

We inform you that you may exercise, where appropriate, the rights of access, rectification, erasure, restriction of processing, to object, data portability, not to be subject to a decision based solely on automated processing, as well as the right to withdraw consent.
You may exercise your rights by email: dpd@clouddistrict.com, or at the registered office of Cloud District: C/ Ferraz 78, 3ªB - 28008 Madrid - Spain.
You can lodge a complaint with the Spanish Data Protection Agency: www.aepd.es, the Spanish Supervisory Authority for data protection matters.

extended information

1. Data controller

CLOUD DISTRICT S.L. is the controller of your personal data for the purposes of providing you with the services identified in this Privacy Policy.

Cloud District S.L. is a company domiciled at C/ Ferraz 78, 3ªB - 28008 Madrid - Spain, and its Tax ID No. is B86056074 (hereinafter, "Cloud District").

At Cloud District we are committed to the fundamental right to the protection of your personal data and this Privacy Policy is intended to inform you of your rights under the General Data Protection Regulation ("GDPR").

We inform you that Cloud District has appointed a Data Protection Officer who is available to answer any questions or queries in relation to the processing of your data. You may contact the DPO at dpd@clouddistrict.com.

2. What information do we process?

a) Data you provide us directly:

We collect information about you when you contact us through the channels provided for this purpose, such as the contact forms on the website, when you apply to join our team or attend to one of our events.

When you contact us through these channels, we will ask for your name and lastname, email address, telephone number, professional details or CV, depending on the nature of the form.

All fields marked with an asterisk (*) must be completed, so that the omission of any of them could prevent us from providing the requested services or dealing with your request. You must provide accurate and truthful information. Impersonation and the use of aliases or anonymous names are prohibited.

You may not use offensive expressions or names that coincide with trademarks, trade names, or the names or pseudonyms of public figures or celebrities, unless you are authorized to do so. In order to ensure the information provided is always up-to-date and error-free, you must notify Cloud District of any changes that occur to the data you have provided to us.

Likewise, by clicking on the "I accept" button (or equivalent) incorporated in the aforementioned forms, you declare that the information and data you have provided in them are accurate and truthful.

b) Data collected indirectly:

When you browse, different cookies and other tracking technologies may be installed on your device, as explained in our Cookie Policy.

3. What is the origin of the data?

In most cases, the personal data we process has been provided directly by you. We understand that any data you provide to us is provided freely and voluntarily.

In the event that the personal data provided is from a third party, you guarantee that you have informed them of this Privacy Policy and have obtained their authorization to provide the data to Cloud District for the purposes indicated above.

Likewise, you guarantee that the data provided are accurate and up-to-date, and you are responsible for any damage, direct or indirect, that may be caused as a result of non-compliance with this obligation.

4. For what purpose and on what legal bases do we process your data?

Cloud District acts as the data controller of personal data for the following purposes and in accordance with the following legal bases:

Based on the performance of a contract or pre-contractual measures:
a) To provide you with the services you have requested from us and to respond to your requests for information within the framework of a pre-contractual relationship.
b) Assess the CVs received and manage the recruitment processes.
Based on Cloud District's compliance with legal obligations:
a) To allow data subjects to exercise their rights.
b) To comply with any regulations applicable to Cloud District.
Based on your consent:
a) To carry out segmentation and profiling based on your interests and through the analysis of the use of the services offered, such as browsing history, in order to adapt offers and promotions to each user, offering personalized services and information.
b) Where appropriate, keep you informed about our own or third-party products and services, always sent through Cloud District by electronic means.
c) Where appropriate, disclose your data to third parties with whom Cloud District has business relationships.
d) To answer your requests for information and manage your registration and participation in our events and initiatives.
Based on the existence of a legitimate interest of Cloud District:
a) To keep you informed about Cloud District's products and services, related to those previously contracted and that may be of interest to you.
b) To carry out regular reviews of our services and conduct satisfaction surveys in order to evaluate and improve the quality of the service we provide.
c) To ensure the operability and security of our website and of its visitors.

If you do not want us to process your data for these purposes, you may object at any time by contacting us at dpd@clouddistrict.com, as indicated in the Exercise of Rights section of this Privacy Policy.

5. To whom do we disclose your data?

All disclosures of personal data that we make are necessary for the fulfillment of the above-mentioned purposes, or are made to comply with a legal obligation:

a) Where we are legally required to disclose this information. For example, we may disclose your data to competent public authorities, law enforcement agencies, judges and courts when they issue a request for information with which we are legally required to comply.
b) To payment service providers, such as banks and payment gateways, where necessary to process payments made by the user through such providers.
c) To companies that provide IT services, tools or infrastructure supporting the services provided by CloudDistrict, such as hosting providers, CRM providers and email service providers.

In this regard, we inform you that any disclosure that occurs will be carried out taking into account all the necessary legal safeguards. We also guarantee that we sign specific contracts with all our service providers as required under the applicable regulations.

Where suppliers are located outside the European Union or in countries not deemed to provide an adequate level of protection under data protection regulations, Cloud District will take the necessary safeguards to ensure that data is transferred securely. This may include, among other measures, entering into Standard Contractual Clauses approved by the European Commission, or relying on one of the exceptions provided for under applicable regulations.

6. Exercising Your Rights.

We inform you that you can exercise the following rights:

The right of access to your personal data to know which data is being processed and the processing operations carried out with them.
The right to rectification of any inaccurate personal data.
The right to erasure of your personal data, where possible.
The right to request the restriction of the processing of your personal data when the accuracy, lawfulness or necessity of the processing of the data is doubtful, in which case, we may keep the data for the exercise or defence of claims.
The right to object to automated decision-making, including profiling.
The right to object to the processing of your personal data when the legal basis that enables us to process it, in accordance with section 4 above, is legitimate interest.
The right to the portability of your data, when the legal basis that enables us to process them as indicated in section 4 above is the existence of a contractual relationship or your consent.
Right to withdraw any consent given to Cloud District.

You can exercise your rights at any time and free of charge in the following ways:

By sending an email to dpd@clouddistrict.com through the email address with which you registered for our services and indicating the right you wish to exercise.
By sending a written request to the address C/ Ferraz 78, 3ªB - 28008 Madrid - Spain, indicating the right you wish to exercise.
In addition, when you receive any communication from us, by clicking on the unsubscribe section that will contain that communication, you will be able to unsubscribe from all marketing communications.

When you exercise your rights, and only in the event that we have doubts about your identity, we may request additional information from you to verify your identity.

We also inform you that you have the right to lodge a complaint with the Spanish Data Protection Agency if you consider that we have infringed data protection legislation in relation to the processing of your personal data.

In addition, we inform you that you can sign up for the Robinson List at www.listarobinson.es: the advertising exclusion system managed by the Spanish Association of Digital Economy (ADIGITAL), in which you can register in order to show your opposition to the use of your data for the purpose of sending you commercial communications.

7. Retention period of your data.

We will only process your data for as long as necessary to offer you our services and they will only be retained to comply with our legal obligations and the legitimate defence of our interests. In these cases, we will keep your data for as long as the law allows you to take legal action arising from your relationship with Cloud District, in general, this period will be 5 years from the end of the contractual relationship.

For accounting purposes, in accordance with the legal obligations that apply to us, we may keep your data for up to 6 years after the end of the contractual relationship between you and Cloud District.

The data we process through cookies or similar tracking technologies, whether for marketing, analytical or security purposes, will have the duration indicated in our Cookie Policy.

Data processing based on your consent will continue until you withdraw your consent or exercise a right that entails the erasure of your data or the termination of the processing.

8. Security and confidentiality.

In order to prevent unauthorized access or unauthorized disclosure of personal data, we have taken appropriate technical, organisational and physical measures to safeguard and protect the information we collect from you.

9. Minors.

Minors under 14 years of age may not use the services available through our website without the prior authorization of their parents, guardians or legal representatives, who will be solely responsible for all acts carried out through the site by minors in their care, including filling in forms with the personal data of said minors and ticking, where appropriate, the boxes that accompany them.

In this sense, and to the extent that Cloud District does not have the capacity to control whether or not users are minors, it must be the parents and guardians who enable the necessary mechanisms to prevent them from accessing the website and/or providing personal data without their supervision, and Cloud District does not accept any responsibility in this regard.

10. Updates to this Privacy Policy.

We do our best to keep our Privacy Policy fully up to date. Any changes to this Privacy Policy will be made available through the appropriate channels. Substantial changes may be notified to users where appropriate.

Last updated: April 29, 2026.