GDPR Service Policy

Service Terms

Our Regulatory and Compliance Services (“RACs”) and applicable EU General Data Protection Regulation (“GDPR”) compliance obligations are incorporated herein by reference. Unless otherwise stated, capitalized terms used herein have the meaning ascribed to them in the universal Terms of Use and purchase of Services, if any. By using our Services and products, you (the “Client”) acknowledge that you have read and understand the Compliance Registry’s policies, (i.e. Privacy Policy, Terms of Use policy, and our Acceptable Use policy terms and conditions) that are included along the GDPR Service Policy terms, herewith. As used herein, “CloudCover”, “Services”, “cloudcover.cc”, “we”, “us”, “our” or “ours” refers to the CloudCover organization and its Services and Affiliates.

1. Our Obligations

Our Services, and applicable GDPR compliance obligations are stated within this GDPR Service Policy. Once you have submitted information or provided answers within any of our service offerings (“Services”) which require engagement to the RACs Compliance Registry profile questionnaire (“Registry Profile”) provided that (you) the Client do not request additional changes, modifications, customized answers or similar non-standard work (“Custom Modification”) we shall furnish to you access to the Compliance Registry which includes your Compliance Registry profile (“Registry Profile”) and/or Compliance Registry summary (“Registry Report”).

Upon your request, opt-in access may be afforded to (you) the Client to our Services which may be assigned to you. Upon further opt-in to Service’s acceptance of terms and conditions (Acceptable Use) policy, you may be given online access to the Registry Profile and/or to the Compliance Registry Account (“CRA”) questionnaire including a registered username and pass-code, which will remain under our control and ownership until and unless you determine to proceed with our Services and pay the related fee and/or agree to engage any of our Services by opt-in request. At which time, the Registry Profile information that (you) the Client provide, due to your registration, is where (you) the Client may change the pass code and any relevant business information that may improve the accuracy of your Client Registry Profile. As the Client user, you do have the right to get a copy of all your Client data held by the CloudCover, request a correction, deactivate or delete your account.  The Client however, has no right to use the RACs Compliance Registry, except as permitted by us and we reserve in our sole discretion, the right to change or remove any and all registration information and/or Registry Profile data for the purpose of masking (you) the Client and your Registry Profile identity (anonymity) for the purpose of archiving, tracking analysis and/or forensic claims and actuarial risk analysis.

We do not have a duty to and do not generally screen or edit content or links originating from your Registry Profile, but we reserve the right to refuse Services, monitor or to remove, without notice, any content or links which, in our sole discretion or that of a court or regulatory agency, is deemed illegal, misleading, or obscene, or is otherwise in breach of our universal Terms of Use, Anti-Spam or Acceptable Use policies or any other terms provided to you, when administrating the Registry Profile.

2. Your Obligations

You agree to accurately complete your Registry Profile no later than five (5) days following the date you sign-in for Services. In the event that your Registry Profile has not been received following the expiry of the period, your Registry Profile will be populated with generic answers that, in our reasonable opinion, is related to your Registry Profile’s industry, class of trade, NAICS/NACE, jurisdiction and/or domicile geography.

For a period of 30 days following the date that the Registry Profile was delivered to you, you will be permitted to request three (3) minor Customer Support interactions. If you request Custom Modifications, we will furnish to you the updated Registry Profile report within five (5) business days.

You may download the Registry Profile report as one report only, displayed as a single Registry Profile report for the single purpose specified. You may create one duplicate of the Registry Profile report for back-up purposes.

You are responsible for the security and privacy of your downloaded Registry Profile report that we provide, including without limitation, its accuracy and truthfulness and for ensuring that it does not contain any spelling or grammatical errors or infringe upon the rights of any third party. This applies to content created by us at your direction for inclusion on the Registry Profile report that has been reviewed and approved by you. You agree not to store, link to, transmit, advertise or make available any website content is illegal, misleading, or obscene, or is otherwise in breach of these Terms of Use, our universal Terms of Use or Acceptable Use Policy or any other terms provided to you.

NOTWITHSTANDING ANYTHING IN THIS AGREEMENT, ALL WEBSITE CONTENT IS YOUR SOLE RESPONSIBILITY. YOU AGREE TO INDEMNIFY, DEFEND AND HOLD HARMLESS CLOUDCOVER, AND CLOUDCOVER’ AFFILIATES FROM ANY AND ALL CLAIMS, INCLUDING WITHOUT LIMITATION, MISAPPROPRIATION OF ANY COPYRIGHT, PATENT, TRADEMARK, TRADE SECRET, DATA, MUSIC, IMAGE, OR OTHER PROPRIETARY OR PROPERTY RIGHT, FALSE ADVERTISING, UNFAIR COMPETITION, DEFAMATION, BUSINESS OR PERSONAL DISPUTE OR ARGUMENT, INVASION OF PRIVACY OR RIGHTS OF CELEBRITY, VIOLATION OF ANY ANTI-DISCRIMINATION LAW OR REGULATION, OR ANY OTHER RIGHT OF ANY PERSON OR ENTITY, OR ANY PERSONAL OR BUSINESS ARGUMENT OR DISPUTE LOSSES, DAMAGES, LIABILITIES, JUDGEMENTS, OR SETTLEMENTS, INCLUDING REASONABLE LEGAL FEES, COSTS, AND OTHER EXPENSES INCURRED BY US , RELATED TO OR IN CONNECTION WITH THIS AGREEMENT. THE TERMS OF THIS SECTION WILL SURVIVE ANY TERMINATION OF THIS AGREEMENT.

If you require CUSTOMER SUPPORT help desk support from us, please contact us.

3. Archiving upon Termination / Right to be Forgotten

You acknowledge and agree that once your Services are terminated your CRA may be archived for 90 days. If you request that your Registry Profile be closed, erased, deleted and/or forgotten, we shall act upon your request. If the amounts due and payable hereunder are not paid by the end of your Registry Profile’s archive period then closure, erasure, deletion and/or forgotten request shall be implemented. We will not be responsible for any errors, loss of information or any other mishap that may occur following non-payment. Retrieval of the Registry Profile upon erasure, deletion and/or forgotten request will no longer be possible. Client’s re-visiting, their Registry Profile during the archive period will see an error or substitute message window until the amounts due and payable have been paid or erasure, deletion and/or forgotten request has been implemented.

4. Privacy Policy

All Client Registry Profiles contain a link to our Privacy Policy which accurately conveys the information collection and usage practices of the Client’s company represented in your CRA profile answers. If you currently have a privacy policy applicable to your GDPR, please provide a link to it, within the CRA compliance notation area. If you do not, you are advised to consult with a privacy/legal expert or a data protection officer (DPO) to help you create a privacy policy that meets the requirements applicable to your GDPR responsibilities.

5. Information Collection & Use

We use the information collected about (you) the Client, to process orders and to provide a more personalized and value-added experience. We may also use your information to communicate with you about products, services, and future promotions. For the purposes of order verification and fraud prevention, we may exchange information about our customers internally within the Compliance Registry and among our affiliates.

The type of information we collect, use, or share may depend on the product or service you have with us. At times, we may request that you voluntarily supply identifying information for purposes such as receiving correspondence, registering the CRA, making purchases, or participating in online surveys, forums, blogs, chat sessions, or market research. If you elect to participate, we may require you to provide business information, including your name, mailing address, phone number, financial institution information, credit card information, or e-mail address. In certain areas of Services, you may provide employee information such as when adding additional authorized users to your Registry Profile and updating contact information. When you submit business information to us, you understand and agree that we may access, store, and use your information.

Based upon the personally identifiable information you provide us, we may send you a welcoming email to verify your username and password. We will also communicate with you in response to your inquiries, to provide the services you request, and to manage your account. We will communicate with you by email or telephone, in accordance with your wishes. We may send you strictly service-related announcements on rare occasions when it is necessary to do so. Generally, you may not opt-out of these communications, which are not promotional in nature. If you do not wish to receive them, you have the option to deactivate your account. If you subscribe to the Compliance Registry’s Services, such as the Regulatory and Compliance Service’s Compliance Impact Score (CIS), the Governance Risk Score (GRS) and/or the CyberSafety Score (CSS) your business information will be de-personalized (masked) and your CRA anonymity aggregated in order to provide subscribers with statistical information to help you make wise security decisions as you seek the optimal way to manage your privacy and security business.

For testimonials, we obtain the customer’s consent prior to posting their name along with their testimonial. We are not responsible for the personally identifiable information you choose to submit through testimonials. Information you provide will be safeguarded according to industry standards for security and confidentiality.

We recognize and appreciate the importance of responsible use of the information you choose to provide to your Registry Profile. We take steps to require that our vendors, consultants, suppliers, and contractors observe our Privacy Policy with respect to security and the collection, use, and exchange of our customers’ information. They are expected to abide by our Privacy Policy when conducting work for us and are prohibited from using your personally identifiable information for any other purpose.

We are committed to ensuring that the information we obtain and use about our Client (customers) is accurate. You can help us maintain accurate records by updating your Registry Profile or by using one of the methods listed below. Our service representatives are trained to answer questions about and give you reasonable access to your personal information in our database.

For General Inquiries:  If you have questions regarding this GDPR / Service Policy, the CRA practices, or your dealings with our Sites, please contact us: support@cloudcover.net

CloudCover
Customer Support Services
2999 County Road 42 West
Saint Paul, MN 55306-6995

Phone: 1-651-900-1858
Fax: 1- 877-532-0390
E-mail: support@cloudcover.net

 

General Inquiry:
If you have questions regarding this Privacy Policy, or practices concerning our website, please contact: support@cloudcover.net