Thank you for visiting CloudOrange.

We at CloudOrange are committed to protecting the information that you share with us and explaining how we collect, process, and share that information online. When you use our services, you’re trusting us with your information. We understand this is a big responsibility and work hard to protect your information and keep it secure.

We provide you with insight into the privacy practices employed here at CloudOrange. This Privacy Policy is meant to help you understand the following:

• What information we collect
• How we collect it
• Why we collect it
• How we keep it secure
• How you can update, manage, export, and delete your information

Background

This Policy provides an overview of how CloudOrange IT Solutions (a sole proprietorship registered under Udyam Registration in India, together with any associates or affiliates, collectively hereinafter referred to as “CloudOrange”) collects the personal data of “data subjects” (hereinafter referred to as “you” or “your”), how it handles it, and how it protects your privacy. In this policy, “we”, “us” and “our” refer to CloudOrange or its associates or affiliates.

End Users of CloudOrange’s Products and Services
CloudOrange is a leading provider of cloud-based services and solutions. If you are an employee or other end user of a client, please contact your employer with any questions about how your end user data is collected and processed, or to seek clarification or exercise any rights you may be offered under data protection laws in your jurisdiction.

With regard to personal data, CloudOrange may act both as a data controller and a data processor (or agent) that processes end user data on behalf of its client, which is the controller or owner of such data under applicable data protection laws.

In the latter case, CloudOrange assists its clients in addressing data protection inquiries from end users to the extent applicable to its services, but typically does not respond directly to such inquiries from end users.

CloudOrange is also a data controller in certain cases where there is an express agreement between CloudOrange and the client, or may be a controller in certain circumstances where there is written consent from the client based on business needs. Further, CloudOrange is also a data controller to the extent of its customers’ data which it obtains and processes directly—through lead-generation platforms where the customer has given express consent, social media platforms where the customer has contacted us, email referrals from existing clients, or trade shows where the customer has visited and shared their contact information with CloudOrange.

1. If You Are Located in the EU

I. Personal Data 

a) What “Personal Data” do we collect from you?
In the process of rendering our services, we collect personally identifiable information (PII) — information that can be used to identify you — such as:

Examples of sensitive PII elements include, but are not limited to:

• Name
• Social Security Number, full or truncated (National Identification Number) such as Passport, Aadhaar, etc.
• Citizenship, legal status
• Birth date, place of birth
• Home and personal cell telephone numbers
• Personal email address, mailing and home address
• Security clearance
• Financial information to the extent required
• Law enforcement information, employment information, educational information
• Examples of non-sensitive PII elements include, but are not limited to:
• Office location
• Business telephone number
• Business email address
• Badge number
• Other publicly available information

II. Processing of Personal Data

b) How do we process your personal data?

We may process data about your use of our website and services (“usage data”). This may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views, navigation paths, and information about timing, frequency, and patterns of service use. The source of usage data is our analytics tracking systems and any manually filled forms. The purpose is to analyze and improve website and service performance. The legal basis is our legitimate interest in monitoring and enhancing user experience.

We may process your (“account data”) — such as name, email address, contact details, qualifications, employment history — sourced from third-party sites, job portals, and social media platforms (LinkedIn, Twitter, Facebook, YouTube, Instagram, Pinterest, etc.), where you have consented to share your data. Account data is processed to operate our website, deliver services, ensure security, maintain backups, and communicate with you. The legal basis is legitimate interest and performance of a contract between you and us.

We may store your (“profile data”) — such as name, address, phone number, email, gender, date of birth, employment details — in our database to contact you regarding contracting opportunities, product portfolios, or services relevant to your needs. The legal basis is your express consent and/or the performance of a contract (or steps at your request to enter into one).

c) When can we process your personal data?

We can process your personal data if:

• You are a client or vendor of CloudOrange (or are interested in becoming one)
• You use products and/or services developed by us
• You work for a client/vendor or an organisation using our products/services
• You are a potential client we wish to offer our services to
• You are our employee, subcontractor, or a prospective hire

We do not process personal data if:

• It pertains to children under 13 years of age — our services are not directed to them. If we discover we have collected such data without parental consent, we will delete it immediately.
• If you believe we have collected personal data from someone below the age of consent in your jurisdiction without proper approval, please notify us for immediate action.

d) Why do we process your personal information?

We process your non-sensitive personal information for purposes such as:

• Advertising and sales activities to present our products and services
• Creating and executing contracts with you or your employer to:
  i. Provide services to clients and end users
  ii. Receive goods and services from vendors
  iii. Manage relationships with clients, vendors, and service/product users
• Administering our website, fixing defects, data analysis, testing, and collecting statistics/surveys
• Improving our website for better content delivery and user experience
• Providing specific products/services under a contract, including transaction processing, authentication, and marketing
• Performing benefit administration or other transactions requested by you
• Responding to questions, complaints, or reviews
• Sending communications about transactions, products, promotions, or tailored offers
• Complying with laws, legal orders, law enforcement requests, or preventing suspected illegal activity
• Supporting our business operations
• Product development and website administration

III. What legal basis do we have for collecting and processing your information?

Our legal basis for each way we collect information from you is described in earlier sections. Where CONSENT is the basis, you may withdraw your consent at any time by contacting our Information Security Officer or by using the “unsubscribe” link found in the footer of our email communications.

Certain jurisdictions, including those in the European Union, require that we identify the legal grounds for collecting, using, sharing, and otherwise processing personal information. CloudOrange IT Solutions relies on the following legal grounds for the activities described in this Privacy Policy:

• Necessary to perform a contract with you as an individual or to take steps at your request before entering into such a contract.
• Our legitimate interests, including:
  i. Performance of contracts with our clients
  ii. Implementation and operation of business-wide information sharing and operational structures
  iii. Customer relationship management, marketing, and analytics
  iv. Fraud prevention, misuse of IT systems, or anti–money laundering activities
  v. Whistleblower scheme operations
  vi. Physical, IT, and network security
  vii. Internal investigations
  viii. Potential mergers, acquisitions, or business restructuring
• Compliance with legal obligations and/or defense against legal claims, including those related to labor law, social security, data protection, tax, and regulatory compliance.
• Protection of the vital interests of any individual.
• Performance of a task carried out in the public interest or in the exercise of official authority vested in CloudOrange IT Solutions.
• Consent, as permitted by applicable law.

Authorized Service Providers
We may engage trusted third parties to perform certain functions on our behalf, including payment processing, shipping, customer support, data analysis, hosting on cloud servers, and other services to help improve our products and solutions. Personal information may be disclosed to such service providers operating in India, the APAC region, the European Union, Switzerland, the Middle East, Africa, the United States of America, or other regions where CloudOrange conducts business.

Location-Based Services
Certain CloudOrange solutions may offer location-based features on mobile technologies. To enable these services, we (and our partners) may collect, use, and share precise location data, including the real-time geographic location of your device. Depending on configuration, location-based services may use GPS, Bluetooth, IP addresses, crowd-sourced Wi-Fi hotspot data, cell tower locations, and other technologies to determine your device’s location.

Sale or Transfer of Business
If all or part of CloudOrange IT Solutions is sold or transferred, personal information may be provided to the purchaser as part of the transaction. We will make reasonable efforts to ensure that the purchaser agrees to process your personal information in accordance with this Privacy Policy.

Other Disclosures
We may disclose personal information as permitted or required by law, when necessary for safety or legal reporting, or to protect our legal rights, enforce our Terms of Use, or safeguard the rights of others. We may also disclose information to auditors, legal advisors, or in response to a lawful request such as a subpoena. Additionally, we may aggregate and anonymize personal information (e.g., traffic patterns, usage statistics) and share such data in non-identifiable form.

Note: Consent withdrawal may not always be possible if contractual obligations or applicable laws require us to retain your personal information for a specified period.

IV. Providing Your Personal Data to Others

• We may disclose your profile data, usage data, account data (collectively “your personal data”) to our trusted business associates and partner entities where reasonably necessary for the purposes and on the legal bases described in this Privacy Policy.
• As a sole proprietorship, CloudOrange IT Solutions does not have a corporate “group of companies,” but may work with affiliated consultants, strategic partners, and long-term subcontractors who operate under strict confidentiality and data protection agreements. We may also disclose your personal data to:
• Our insurers and/or professional advisers, where necessary, to obtain or maintain insurance coverage, manage risks, receive legal or professional advice, or establish, exercise, or defend legal claims in any forum (court proceedings, administrative processes, or alternative dispute resolution).
• Our suppliers, subcontractors, clients, and financial institutions for purposes such as processing claims, executing payments, or fulfilling contractual business objectives.

V. Access

a) Personal Data of Third Parties
If you provide CloudOrange with personal data belonging to third parties (such as names, email addresses, or phone numbers), you confirm that you have the legal right to do so, including any necessary consent from those individuals. This may include, but is not limited to:

• Referring contacts for marketing materials or service information
• Sharing details about open positions or project opportunities
• Third parties can opt out of receiving future communications by clicking the “unsubscribe” link in our messages or by contacting us at it@cloudorange.de
• In certain cases, CloudOrange or its authorized partners may automatically collect data using cookies, web logs, web beacons, or similar tools. This information helps us improve the usability, efficiency, and relevance of our website and marketing content.

b) Who Has Access to the Data We Collect?
We process and access the data collected from you directly. However, we also engage carefully selected third-party service providers to assist with specific functions, which may include:

• Payment processors – processing your payments securely
• Customer service platforms – managing communications with you
• Email campaign tools – delivering newsletters and updates
• Website management services – ensuring functionality and performance
• Website design and programming services – developing and maintaining features
• Clients, subcontractors, or contractors – to the extent necessary for fulfilling business obligations
• Analytics and dashboard preparation services – for performance monitoring and insights

All third parties we work with are contractually bound to use your personal data only for the purposes we specify, and are prohibited from sharing or retaining it for any other reason.

VI. Your Rights Over Your Personal Data

You have the right to control how your personal data is collected, stored, and processed. Specifically, you have the following rights under applicable data protection laws:

• Right to be informed:
  This Privacy Policy explains what we collect, why we collect it, and how we use it.
• Right of access:
  You may request a copy of the personal data we hold about you.
• Right to rectification:
  You can request that we correct any inaccurate or incomplete personal data we hold.
• Right to erasure (“right to be forgotten”):
  You can request that we delete certain personal data we hold about you, subject to contractual obligations or legal requirements.
• Right to restrict processing:
  You can ask us to limit certain types of processing of your personal data.
• Right to data portability:
  Where applicable, you may request that we provide your personal data in a portable, machine-readable format for transfer to another service provider.
• Right to object:
  You may object to how we process your personal data, including for direct marketing purposes.
• Rights related to automated decision-making and profiling:
  We do not use automated decision-making or profiling. However, you have these rights under applicable law with other services.
• Your Right to Withdraw Consent:
  Where we rely on your consent to collect or process personal data, you can withdraw that consent at any time. If you receive marketing emails from us, you can use the “unsubscribe” link in those messages to stop receiving further communications.
• To exercise any of these rights, contact us at it@cloudorange.de with your request.

VII. Cookies and Similar Technologies

We use cookies and similar technologies to better understand how visitors interact with our website, improve user experience, and measure marketing performance. Cookies help us track:

• How visitors navigate our site
• Which pages and content are most viewed
• The proportion of visitors accessing our site from desktop vs. mobile devices
• The effectiveness of marketing campaigns
• You may block most cookies by adjusting your browser settings or by managing preferences in the cookie consent banner when you first visit our site.

VIII. Privacy Concerns, Contacting Us, and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact: 

CloudOrange IT Solutions – Data Protection Contact
📧 it@cloudorange.de

We take privacy concerns seriously and will respond to all legitimate requests in accordance with applicable data protection laws.

2. In General – For All Our Valued Stakeholders

What Information Do We Collect?

We collect information from you when:

• We communicate with you (via email, phone, or in person)
• You place an order or request a service
• You subscribe to our newsletter or updates
• You fill out a contact or service request form

When ordering, registering, or engaging with us, you may be asked to provide details such as:

• Your name
• Email address
• Contact number
• Banking or payment details (for billing purposes)

You may, however, visit our website without providing personal information.

What Do We Use Your Information For?

Any of the information we collect from you may be used in one or more of the following ways:

• To personalize your experience:
  To better understand and respond to your individual needs.
• To improve our website:
  We continuously update our offerings based on the feedback and interaction data we receive from you.
• To improve customer service:
  To more effectively respond to your queries, support requests, and service needs.
• To process transactions:
  Your information will not be sold, exchanged, transferred, or given to any other company without your consent, except for the express purpose of delivering the purchased product or service.
• To administer promotions, surveys, or site features:
  To offer you relevant opportunities while maintaining control over your personal data.
• To send periodic communications:
  To provide updates regarding your order, services, company news, and relevant product or service information.

You can opt out of receiving marketing communications at any time by using the unsubscribe link in our emails.

How Do We Protect Your Information?

We implement industry-standard security measures to protect your personal information, including:

• Maintaining secure, access-controlled databases
• Granting access only to authorized personnel on a need-to-know basis
• Using encryption and secure protocols for sensitive transactions

Do We Use Cookies?

Yes. Cookies are small files transferred to your computer’s hard drive via your web browser that enable our systems to recognize your browser and remember certain information. Cookies help improve user experience and track site performance.

You can adjust your browser settings to block cookies or respond to our cookie consent notice when visiting our site. 

Do We Disclose Any Information to Outside Parties?

We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties.

We may disclose your information if required to:

• Comply with legal obligations
• Enforce our website terms and policies
• Protect our rights, property, or safety, or that of others

Non-personally identifiable information may be shared with trusted partners for marketing, analytics, or other operational purposes, as outlined in Section IV of this policy.

3. General Information

Third-Party Links

Occasionally, at our discretion, we may include or offer third-party products or services on our website. These third-party sites have their own independent privacy policies, and CloudOrange IT Solutions does not accept any responsibility or liability for the content or activities of these linked sites. However, we strive to protect the integrity of our website and welcome any feedback regarding these third-party sites.

Children’s Online Privacy Protection
In accordance with applicable Indian laws and regulations, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, CloudOrange IT Solutions does not knowingly collect personal information from anyone under the age of 18. Our website, products, and services are intended for users who are at least 18 years old or older.

Usage of Outbound Links
Our website may contain links to other websites operated by parties unrelated to CloudOrange IT Solutions. Once you click on these outbound links, we have no control over how these third parties collect, store, or process your personal data.

CloudOrange IT Solutions is not responsible for the privacy practices or content of third-party websites and encourages you to review their privacy policies before sharing any personal information.

How Long We Process Your Personal Data
We process your personal data only for as long as necessary to fulfill the purposes for which it was originally collected. Once these purposes have been met, your data will be securely deleted or archived, except where retention is required to comply with Indian laws, contractual obligations, or other legitimate business purposes.

Use of Social Plugins as Part of Social Media

How to retract your agreement of the processing of your data?

Our website may include social media features such as the Facebook “Like” button and widgets, or interactive mini-programs that run on our site. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our site. Your interactions with these features are governed by the privacy policy of the company providing them.

How to Retract Your Agreement on the Processing of Your Data
You have the right to withdraw your consent for the processing of your personal information at any time. To do so, you can:

Send an email to it@cloudorange.de

Send a written request to the following address:

CloudOrange IT Solutions
Top Floor, Kottukappally House, Moozhimala Road, Veliyambam Post, Pulpally, Wayanad, Kerala – 673579 India

Locations and International Transfers

CloudOrange IT Solutions may transfer or store your personal information outside India when necessary to provide our services or comply with legal obligations. We ensure that such transfers comply with applicable Indian data protection laws and take reasonable measures to safeguard your data during transfer.

Business Transfers

CloudOrange IT Solutions currently does not intend to sell its business. However, in the unlikely event of a sale, acquisition, or merger, we will ensure that the acquiring entity is legally bound to honor our commitments regarding your personal information.

You will be notified via email or a clear notice on our website of any change in ownership or data use practices, and informed of your options related to your personal data.

Your Consent

By using our website and services, you consent to this Privacy Policy, Cookie Policy, and Terms of Service.

Changes to Our Privacy Policy

We may update this Privacy Policy from time to time by posting a new version on our website. The date of the latest update will be indicated on the policy page.

You are encouraged to check this page periodically to stay informed of any changes. In the event of significant legal, regulatory, or business changes affecting this policy or your consent, we will notify you and request confirmation of your consent to continue processing your data.

For any questions, suggestions, or concerns, please contact us at:
www.cloudorange.de/contact/