User Privacy Policy

User Privacy Policy

We have compiled all essential information about our handling of your personal data and your corresponding rights here in our User Privacy Policy.

1. Scope and updates of this User Privacy Policy

This User Privacy Policy is effective from 01 March 2021.

In order to ensure that this policy reflects current legislation we may issue updates to it from time to time. You will receive notice of such changes and be asked to confirm your agreement to such changes that we deem necessary to protect our users interests.

This User Privacy Policy applies to your use of this website and all Cloud4Events applications, services (including payment services), products and tools (collectively the ‘Services’), regardless of how you access or use these Services, including

2. Controlling Entity

Which Cloud4Events group company is responsible for the collection and processing of your personal data in connection with the provision of the Services (the Controlling Entity) depends on how you use our Services. Initially, all registrations will be via our UK based Cloud4Events Ltd company and therefore will be governed by the laws of England. As further companies in the Cloud4Events group are launched we may inform you of changes to the Controlling Entity relevant for you and your data. We will not alter your Controlling Entity without informing you in advance.

2.1 Use of the Services

Users who wish to purchase goods, materials or equipment via the Cloud4Events online event marketplace will need to register information that will enable transactions to proceed smoothly via our appointed transactions management system facilitated by Stripe [insert co details]. By agreeing to this Privacy Policy you also permit Cloud4Events to share your personal data with Stripe in connection with the provision of our payment services to buyers.

2.2 Use of the payment services for sellers

If you are a seller, depending on the region in which you are located and whether we provide our payment services there, initially, our UK based company, Cloud4Events Ltd will be responsible for the collection and processing of payment related data in connection with the provision of our payment services to sellers. Payment processes in this regard will be managed on behalf of Cloud4Events by Stripe [insert co details]. By agreeing to this Privacy Policy you also permit Cloud4Events to share your personal data with Stripe in connection with the provision of our payment services to sellers.

3. Data protection officer and contact

We have appointed a data protection officer to oversee the protection of your personal data. If you have any questions about this User Privacy Policy or about data protection at Cloud4Events in general, you can contact the data protection officer by emailing dpo@cloud4events.com.

4. What personal data we collect and process

We collect your personal data when you use our Services, create a new Cloud4Events account, provide us with information via a web form, add or update information in your Cloud4Events account, participate in online community discussions or otherwise interact with us. We also collect personal data from other sources (such as other Cloud4Events Inc. corporate family members, credit agencies or bureaus, and other data brokers).

5. Purposes and legal basis for data processing and categories of recipients

We process your personal data for various purposes and based on several different legal bases that allow this processing. For example, we process your personal data to provide and improve our Services, to provide you with a personalised user experience on this website, to contact you about your Cloud4Events account and our Services, to provide customer service, to provide you with personalised advertising and marketing communications, and to detect, prevent, mitigate and investigate fraudulent or illegal activity.

We also share your information with third parties, including service providers acting on our behalf, for these purposes. In addition, we may share your personal data among Cloud4Events group companies in order to fulfill our contract with you under the User Agreement and, if applicable, the Payments Terms of Use.

6. International data transfers

Some recipients of your personal data are located outside your country or have offices in countries where data protection laws may provide a different level of protection than the laws in your country. When transferring personal data to such recipients, we provide appropriate safeguards.

7. Storage duration and erasure

Your personal data will be stored by us and our service providers in accordance with applicable data protection laws to the extent necessary for the processing purposes set out in this User Privacy Policy (see 5. Purposes and legal basis for data processing and categories of recipients for more information on the processing purposes).

Subsequently, we will delete your personal data in accordance with our data retention and deletion policy or take steps to properly render the data anonymous, unless we are legally

obliged to keep your personal data longer (e.g. for legal compliance, tax, accounting or auditing purposes).

In Europe, the retention periods are generally between 6 and 10 years (e.g. for contracts, notifications and business letters). As far as legally permissible or required, we restrict the processing of your data instead of deleting it (e.g. by restricting access to it). This applies in particular to cases where we may still need the data for the execution of the contract or for the assertion of or defence against legal claims, or where such retention is otherwise required or permitted by law. In these cases, the duration of the restriction of processing depends on the respective statutory limitation or retention periods. The data will be deleted after the relevant limitation or retention periods have expired.

8. Rights as a data subject

Subject to possible restrictions under national law, as a data subject, you have the right to access, rectification, erasure, restriction of processing and data portability with regard to your personal data. In addition, you can withdraw your consent and object to our processing of your personal data on the basis of our legitimate interests. You can also lodge a complaint with a supervisory authority.

Exercising your rights and managing your settings

9. Cookies & similar technologies

When you use our Services, we and selected third parties may use cookies and similar technologies to provide you with a better, faster and safer user experience or to show you personalised advertising. Cookies are small text files that are automatically created by your browser and stored on your device when you use the Services. You can find detailed information about our use of cookies and similar technologies and your choices in our User Cookie Notice.

10. Data security

We protect your personal data through technical and organisational security measures to minimise risks associated with data loss, misuse, unauthorised access and unauthorised disclosure and alteration. To this end, we use firewalls and data encryption, for example, as well as physical access restrictions for our data centres and authorisation controls for data access.