Data Privacy Statement

The protection of your personal data is very important to us, and we strictly observe the regulations of the German Federal Data Protection Act [Bundesdatenschutzgesetz - BDSG], the German Teleservices Act [Telemediengesetz - TMG], and the European General Data Protection Regulation (GDPR). The luckycloud services are exclusively hosted on Servers in Germany. Your data are stored fully in accordance with the Laws on Data Protection. Your data can be stored on our servers in encrypted form and are thereby protected against unauthorized access. Even our administrators are not able to view encrypted folders or libraries. Also, the media on which your data are stored are highly encrypted and therefore ensure maximum protection of your data, even in the unlikely case of a physical removal from the servers. We do not store or transfer any IP-based user data.

We observe the highest standards to protect your personal data during the transmission process as well as thereafter and preserve the confidentiality, availability and integrity of such data. However, we point out that security gaps in data transmission on the internet (e.g. in the communication via email outside the luckycloud) are possible, as no method of transmission over the Internet or method of electronic storage is 100% secure. A guaranteed complete protection of data against unauthorized access by third parties is impossible.

Who should I contact?

luckycloud GmbH
Solmsstrasse 18
10961 Berlin

Telephone: +49 (0)30 747 828 26
E-mail: support@luckycloud.de

You can also reach our data protection coordinator at this address. Should you have any concrete questions with regard to your data, the deletion thereof, or your rights, the direct contact for data protection purposes can be reached using the following email address: datenschutz@luckycloud.de. If you would like to send a written request, it shall be sufficient to add the reference "data protection".

What are my rights?

Sie können sich jederzeit an uns wenden, wenn Sie Fragen zu Ihren Rechten im You can contact us at any time, if you have any questions concerning your data protection rights or want to assert any of the following rights:

• Right of withdrawal according to Art. 7 para. 3 GDPR (e.g. you can contact us, if you want to withdraw your consent to receive e-mail messages)

• Right of access according to Art. 15 GDPR (e.g. you can contact us, if you would like to know which personal data have been stored by us concerning you)

• Right to rectification according to Art. 16 GDPR (e.g. you can correct or change your data in your customer dashboard at any time. You can contact us, if you need help, for example to change or replace your e-mail address)

• Erasure according to Art. 17 GDPR (you can contact us e.g. if you want us to delete any personal data stored by us concerning you)

• Restriction of processing according to Art. 18 GDPR (you can contact us e.g. if your e-mail address should not be deleted but only used for sending specific e-mails)

• Data portability according to Art. 20 GDPR (you can contact us e.g. in order to receive your data stored by us in a compressed format, for example because you want to make the data available to another cloud storage)

• Right to object according to Art. 21 GDPR (you can contact us e.g. if you do not agree to the analysis methods mentioned in the privacy policy)

• Right to lodge a complaint with a supervisory authority according to Art. 77 para. 1 GDPR (e.g. you can also lodge a complaint directly with the supervisory authority for data protection)

Deletion of data and storage period

Unless indicated otherwise, we will delete your data as soon as you tell us to do so, or when they are no longer required for contractual purposes, e.g. your e-mail address will be deleted when you delete your user account. Your data shall also be blocked or deleted upon expiry of a statutory storage period, unless the storage of such data is required for the completion or performance of a contract. For some data a longer storage period may be required by law. You shall of course have the right to request information about the stored data at any time.

General Use

Our website can normally be used without providing any personal data. No meta data or other technical data (type of browser, IP address, etc.) will be stored except as required for the establishment of a connection with our website, as the permanent storage of access logs has been disabled by us.

Users must create an account to use the log-in area of luckycloud or luckyStorage. For creating an account, the user must indicate an existing e-mail address or create a new luckyMail address and choose a secure password. A confirmation link will then be sent to the e-mail address indicated by the user which can be used to reset the password if the user forgot the log-in password.

In order to be able to use luckyMail, the user must be registered with luckycloud. The user shall receive an email address during the registration process. With this email address, it is possible to create an anonymous user account for email communication within and outside the luckycloud. The email address used for creating the luckycloud account shall automatically be used as recovery e-mail address. Alternatively, the user may provide another email address in order to be able to reset the password. Any further personal data shall only be recorded if provided voluntarily, e.g. in the scope of an inquiry or registration process.

In order to be able to use luckyTeam, the user must have registered with luckycloud and activated the team manager. It is possible to create further users in the user dashboard by indicating an existing email address, first and last name (optional) and the storage space. The new user shall receive a confirmation link to the indicated email address and then chooses a password.

If you have provided any personal data to us, we shall only use them to reply to your inquiries, to implement the contracts concluded with you, as well as for technical administration processes. Your personal data shall only be passed on or otherwise transferred to any third parties if this is required for accounting purposes, or with your prior consent. You shall have the right to revoke such consent at any time with effect for the future.

We shall be glad to provide information regarding your personal data stored by us upon your written request (enquiry to support@luckycloud.de).

To protect your data we always work as zero knowledge cloud and offer options for anonymous use. The transmission of the data entered by you – as well as your access to other areas of the website – is protected by an encrypted connection. Furthermore, we apply the principle of data minimization / data economy and only collect the necessary data Please do not use your real name or that of another person for anonymous use. After successful registration, your data are stored only until you decide to delete specific data or the entire user account. The purpose of the requested data is the creation of a user account for using advanced features on the website. Registration is voluntary and can be revoked or the user data deleted at any time. An anonymous and thus particularly privacy-friendly use is also possible – as described above. The legal basis thereof is the legitimate interest according to Art. 6 para. 1 lit. f GDPR, to be able to display the website. If you create a user account, the legal basis thereof is the user's consent in the process of registration in accordance with the European data protection requirements under Art. 6 para. 1 lit. a GDPR.


Contact form


You can contact us using our contact form. You can provide the following data:

• Email address

• User name

• Question or message

To protect your data, this communication – as well as the access to the other areas of the website – is protected by an encrypted connection. Furthermore, we apply the principle of data minimization / data economy and will only collect the necessary data with the contact form. After successful communication with you, your data are immediately deleted. The data are exclusively requested for the purpose of communicating with you and will only be used for this purpose. The legal basis thereof is the so-called legitimate interest, which was reviewed for the purpose and in the scope of the aforementioned protection measures, as well as in accordance with the European data protection requirements under Art. 6 para. 1 lit. f GDPR.

File Upload

luckycloud services offer the possibility to upload text files, documents, images, videos, and other digital content to our servers via encrypted TLS 1.2 connection and store them. Strict internal data protection processes and security standards regulate and ensure that such digital content cannot be accessed by any third parties. We will not transfer such content to any third party at any time, unless we are required to do so by a valid order issued by a German court.

Forgot your password

If you forgot your luckycloud account password and did not provide a recovery email address, or without link confirmation at the time of account creation, we shall only be able in specific individual cases and only by way of extensive manual verification of your access authorization to generate a new access to your luckycloud user account. Safety and anonymity also have their price. Therefore, please make sure to remember your password or provide a recovery email address. Should you forget the password for an encrypted library, there shall be no possibility to reset he password, as such passwords are neither stored on our servers, nor would it be technically possible to remove them.

Payment

luckycloud offers the possibility to effect payments either anonymously by way of cash payment, or " e.g. by way of bank transfer, paypal, paypal preapproved, credit card or SEPA direct debit. Payments via paypal preapproved, credit card, instant bank transfer and Sepa direct debit shall be handled by the payment service provider „Better Payment Germany GmbH“. If you choose to make a cash payment, the cash remittance shall be sent to the company address and paid into the company account by us. Please indicate the invoice number or optionally the email address or the user name in order to enable us to allocate the payment to the respective user account. If you choose paypal preapproved, SEPA direct debit, recurring payment via credit card, you authorize luckycloud GmbH to debit the fees due for the billing cycle selected by you for the chosen product from your bank account at any time. You shall be able to terminate all recurring payments on the dashboard or by deleting the luckycloud account.

Disclosure, Anonymity

If you did not provide any personal data to luckycloud, it is not possible for any third party to access such data. Conditional lifting of your anonymity shall only be possible by law or on the basis of a court order. In such a case, we shall be obliged to pass information on the payment procedure for the respective luckycloud user account on to the respective authorized agency.

Should we become aware of any misuse of the luckycloud services, we shall actively support clarification of the facts (e.g. in case of copyright protected content and thus infringement of copyright law, or storage of content infringing legal regulations).

Cookies

We use cookies on parts of our website. Cookies are small text files which are normally stored in a folder of your browser and contain information. The cookies used on our website exclusively serve the purpose to ensure a safe log-on process and to protect the services of luckycloud against improper use.

Matomo (Piwik)

We use the open source web analysis service Matomo (formerly Piwik). Matomo is offered by Innocraft Ltc., 150 Willis St., 6011 Wellington, New Zealand. Matomo is installed on our own German servers for analyzing our website with regard to your user behavior and monitoring any improper use. Your IP address is anonymized before storage and analysis. No data shall be transmitted to any third parties.

If you do not agree to the storage and use of your data, you can deactivate this storage and use here: https://monitor.luckycloud.de/index.php?module=CoreAdminHome&action=optOut&language=de. In this case, an opt-out cookie will be saved in your browser that prevents the storage of user data by Matomo. If you delete your cookies in the browser, you will have to click this link again.

To protect your data, we use Matomo on our own servers and apply an anonymizing procedure which ensures that the subsequent analysis of the data is not carried out on the basis of your personal data but solely on a statistical basis. A transfer of data to third party servers or external service providers shall not take place. In addition to this, you shall have the possibility to completely prevent this analysis by using the above link. The reason for using this software is the anonymized analysis of the user behavior on our websites. The results of this analysis help us to improve our services. The legal basis thereof is the so-called legitimate interest, which was reviewed for the purpose and in the scope of the aforementioned protection measures, as well as in accordance with the European data protection requirements under Art. 6 para. 1 lit. f GDPR.

Privacy policy last amended in May 2018