Privacybeleid

Your privacy is important to us. This privacy policy describes the information practices which we CLOUDSIGMA AG, trading as “CloudSigma” (“we”, “us”) employ in relation to the information which you, (“you”, “your”) provide when using the www.cloudsigma.com site ("Website") or otherwise communicate with us in respect of our services. By accessing and using the Website and/or communicating with us in respect of our services you are accepting and agreeing to the practices described in this Privacy Policy.

The Information We Collect

We collect personally identifiable information relating to you (including name, address, phone number and e-mail address) (“Personal Information”) in the following situations:

• Information you provide: when you enter into agreements with us or enquire in relation to the services which we offer and/or purchase our services or otherwise contact us to obtain information relating to us or our services. In some countries, including countries in the European Economic Area ("EEA"), the information referenced above in this paragraph may be considered personal information under applicable data protection laws.

• Information collected automatically using cookies: whenever you interact with the Website, we receive and store certain types of information using “cookies”. We describe how we use cookies below.

• Information from other sources: we receive information from third parties in the course of providing services to you from time to time (including in the processing of payments.)

The Data and Information you Upload to CloudSigma Services

Users of CloudSigma services can upload and transmit data to virtual drives (“Virtual Drive Data”) for storage and usage in relation to our services. All Virtual Drive Data uploaded to CloudSigma is stored securely on our servers in our dedicated rack space in Switzerland.

Unless you give CloudSigma explicit permission, we will never inspect your stored data and will only measure the volume of your transmitted data for billing purposes or inspect your transmitted data to investigate suspected violations of our Acceptable Use Policy. We will never disclose your data to any third party unless we are required to do so by court or administrative order (see below).

How We Normally Use Information About You We will only use your Personal Information for the purpose(s) for which you provide it to us including for example to:

• respond to your enquiries and provide you with updates relating to our services;

• process requests for services and supply those services to you;

• process payments;

• communicate with you about cloud computing and our services (including) promotional offers;

• update our records and maintain any account information you may have with us;

• prevent or detect fraud or abuses of our Website; and

• enable third parties to carry out technical, logistical or other functions on our behalf.

We only share your Personal Information with our associate offices and appointed agents and subcontractors from time to time where appropriate and with other entities only as described below.

We ensure the parties with whom we share your Personal Information follow practices at least as protective as those described in this Privacy Policy:

• Associates, Agents and Subcontractors: from time to time we request other companies to perform functions on our behalf including processing documentation, sending customer communications, analysing data, providing marketing assistance, processing payments. They have access to personal information needed to perform their functions, but may not use it for other purposes.

• Updates and Promotional offers: if you have consented in advance we send you updates and information on our promotional offers.

• Business transfers: in any transactions (e.g. buying or selling of companies or business units) Personal Information generally is one of the transferred assets.

• Fraud / Credit Risk: where necessary to prevent fraud or reduce credit risk we may exchange your Personal Information with other companies and organisations.

• With your consent: other than as set out above, you will receive notice when information about you might go to third parties and you will have an opportunity to choose not to share your information.

Virtual Drive Data is never shared with associate offices, appointed agents, sub-contractors or other entities and third parties for any reason whatsoever. All data on virtual drives remains on servers wholly owned and controlled by CloudSigma within the legal jurisdiction of Switzerland.

If you are resident in the European Union please note that the Personal Information and Virtual Drive Data you provide to CloudSigma are stored in Switzerland. The data protection laws of Switzerland differ from those of the European Union and you expressly agree to such a transfer for the purpose of us providing you with the information and services you request. Collection of Information by Third-Party Sites

Our Website may contain links to other websites whose information practices may be different to ours. You should consult the privacy notices of those third party sites as we have no control over information that is submitted to, or collected by them.

Data Security

The Client shall retain full sole root/administrative access at the file system level to their data. The Contractor system does not have access or visibility inside cloud servers or to drive data.

All Client data is handled automatically by our system, this includes drive deletion, scheduled deletion of drives (for deprecated accounts), drive cloning and other data operations. The Contractor shall take no additional copies of Client drive data either within or externally from the cloud location without Client express permission. The sole copy of Client drive data resides specifically in our cloud location that the Client chooses unless subject to an explicit Client request to do otherwise.

We employ security measures to prevent unauthorized access to information that we collect from you.

Please note that email correspondence with us is in free format text and cannot be encrypted. Accordingly please do not send any sensitive information such as credit card details or account passwords via email.

Cookies

A cookie is a text-only string of information that a website transfers to the cookie file of the browser on your computer's hard disk so that the website can remember who you are. A cookie will typically contain the name of the domain from which the cookie has come, the "lifetime" of the cookie, and a value, usually a randomly generated unique number.

When you visit our Website we send you a cookie. Cookies may be used in the following ways:

• To enable the personalisation features on our Website (which give you the ability to recall recently viewed pages, save language preference data and see information which you have input online).

• To enable us to keep you logged in and authorised to use our services for a period of time. ● To compile anonymous, aggregated statistics that allow us to understand how users use our Website and to help us improve the structure of our Website. We cannot identify you personally in this way.

Two types of cookies may be used on this website, session cookies, which are temporary cookies that remain in the cookie file of your browser until you leave the site, and persistent cookies, which remain in the cookie file of your browser for much longer (though how long will depend on the lifetime of the specific cookie).

Disabling / Enabling Cookies

You can accept or decline cookies by modifying the setting in your browser. Please note that if you disable cookies you may not be able to use all the features of our Website or CloudSigma services.

Law Enforcement

We share your Personal Information and Virtual Drive Data with law enforcement agencies when obliged to do so by court or administrative order with appropriate jurisdiction.

Data Protection Rights Under the General Data Protection Regulation (GDPR)

If you are a resident of the EEA, you have the following data protection rights:

• If you wish to access, correct, update, or request deletion of your Personal Data during or after termination of the Agreement, you can do so at any time by emailing legal@cloudsigma.com.We will process the request to the extent it is lawful, and will reasonably fulfil such request in accordance with its standard operational procedures to the extent possible.

• In addition, you can object to the processing of your Personal Data, ask us to restrict the processing of your personal information, or request portability of your personal information. Again, you can exercise these rights by emailing legal@cloudsigma.com.

• You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the "unsubscribe" or "opt-out" link in the marketing emails we send you. To opt-out of other forms of marketing, please contact us by emailing legal@cloudsigma.com.

• Similarly, if we have collected and processed your Personal Data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent. ● You have the right to complain to a data protection authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority.

• We shall within forty-five (45) days of termination of the Agreement, delete all Personal Data from our systems and provide you with certificates of such deletion upon request. Excluded from this provision is Customer Data on Hosting types or Backup options with longer retention periods for which, after termination of the Agreement, we can continue storing Customer Data for as long as the retention period defined for the Hosting type or Backup option plus forty-five (45) days. If you make a request to have Customer Data deleted earlier than the expiry of the extended storage period, we shall delete the Customer Data without undue delay, for a charge unless prohibited from doing so by applicable law.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

Children’s Privacy

CloudSigma does not knowingly collect information from children under the age of 13, and children under 13 are prohibited from using our Services. If you learn that a child has provided us with personal information in violation of this Privacy Policy, you can alert us at legal@cloudsigma.com.

Revisions to this Privacy Policy

We reserve the right to revise the whole or any part of this Privacy Policy from time to time. Please review the Privacy Policy periodically for changes. Unless stated otherwise, our current Privacy Policy applies from time to time to all information that we have about you.

How to Contact us

If you have any questions or concerns about this Privacy Policy or how we use your Personal Information and Virtual Drive Data or if at any time you decide that you no longer wish us to hold or use any of your Personal Information and/or Virtual Drive Data or wish to change the use to which your Personal Information and/or Virtual Drive Data can be put, please let us know by emailing us at legal@cloudsigma.com.

Controller of Your Information Information that you provide to us or we gather from the Website or in the course of providing services to you is controlled by CLOUDSIGMA AG.

“CloudSigma” is a trading name and registered trademark of CLOUDSIGMA AG.

Registered in Canton Zug, Switzerland: CHE-115.204.434

Registered office: Rigistrasse 2, 6300 Zug, Switzerland

Last Updated: 1 July 2026

Copyright CLOUDSIGMA AG, 2026. All rights reserved.