Legal & Privacy

Cloud Trading is not responsible for damages and losses of any nature that may derive from, by way of example but not limitation:

• Interferences, interruptions, failures, omissions, telephone breakdowns, delays, blockages or disconnections in the operation of the electronic system, motivated by deficiencies, overloads or errors in the telecommunications lines and networks, or for any other cause beyond the control of Cloud Trading.
• Illegitimate intrusions through the use of malicious programs of any type and through any means of communication, such as computer viruses or any others.
• Unauthorized access or security errors that may occur due to the use of non-updated versions of browsers or failures in the user's system.
• Technical incidents, maintenance tasks, force majeure causes or any circumstance that may affect the availability, continuity or proper functioning of the services. In this regard, Cloud Trading does not guarantee the continuous and uninterrupted availability of services.
• Loss of data, business interruptions, loss of profits or any indirect damages that may derive from the use of the services offered. The user is responsible for making adequate backups of the hosted information.
• The results of trading operations performed using the services, given that trading with financial instruments carries inherent risks and is the exclusive responsibility of the user.

Likewise, the website may contain links to third-party web pages, regarding which Cloud Trading exercises no control whatsoever nor assumes responsibility for their content, availability or operation.

In any case, the responsibility of Cloud Trading to the user shall be limited, at most, to the amount actually paid for the contracted service during the current billing period.

Cloud Trading collects personal data that the user provides directly, as well as data necessary for the provision of contracted services.

Data provided by the user:

• Name and surnames
• Email address
• Contact information
• Information provided in inquiries or support requests

Data derived from service provision:

• IP address
• Connection and VPS usage data
• Technical logs necessary to ensure service security and operation

Payment-related data:

Payments are made through the Stripe platform. Cloud Trading does not have access to complete payment data (such as card numbers), as these are managed directly by Stripe according to its own privacy policies. However, Cloud Trading may receive information associated with the transaction:

• Payment identifier
• Transaction status
• Information necessary for billing

For the provision of certain services, Cloud Trading may use external providers that may process personal data on behalf of the controller.

In particular, payments are managed through the Stripe platform, which may involve the transfer of personal data outside the European Economic Area (EEA), especially to the United States.

These transfers are carried out with adequate guarantees in accordance with data protection regulations, through the adoption of standard contractual clauses approved by the European Commission or other valid mechanisms according to the General Data Protection Regulation (GDPR).

The user can obtain more information about the guarantees applied by requesting it through the contact email indicated in this policy.

The user's personal data will be processed by Cloudtrading SC for the following purposes:

• Service provision: manage contracting, provision, maintenance and support of contracted VPS services.
• Payment and billing management: process payments through third-party platforms such as Stripe, as well as issue invoices and manage the administrative and accounting relationship with the customer.
• Customer service: respond to inquiries, technical support requests or incidents related to services.
• Service-related communications: send relevant information about service operation, updates, technical incidents or important changes.
• Service improvement: analyze service usage in order to optimize performance, security and user experience.
• Compliance with legal obligations: attend to legal, tax or administrative requirements applicable to Cloudtrading SC's activity.
• Security: prevent misuse, fraud, unauthorized access or activities contrary to the terms of use.

The personal data may be communicated to service providers necessary for Cloud Trading's activity, such as payment providers, technological or infrastructure services, always under contract and with adequate data protection guarantees.

The processing of the user's personal data is based on the following legal bases:

• Contract execution: for the provision of VPS services, user account management, technical support and billing.
• Compliance with legal obligations: to attend to fiscal, accounting and administrative obligations applicable to Cloud Trading.
• Legitimate interest: to ensure system security, prevent fraud and improve the quality of services offered.
• User consent: in those cases where necessary, such as sending commercial communications, when the user has requested or expressly authorized them.

Regarding legitimate interest, Cloud Trading has carried out the corresponding balancing analysis, considering that said interest does not prevail over the user's rights and freedoms.

Cloudtrading SC applies the necessary technical and organizational measures to ensure an adequate level of security to the risk, in order to protect personal data against unauthorized access, loss, alteration or improper disclosure.

In particular, the following measures are adopted, among others:

• Protection of systems through authentication and access control mechanisms
• Use of encryption in communications and systems when applicable
• Monitoring and supervision of infrastructure to detect unauthorized access or security incidents
• Application of security updates and periodic system maintenance
• Restriction of access to personal data only to authorized personnel

Likewise, payments are managed through the Stripe platform, which applies its own security measures and complies with industry standards for payment data processing. Cloudtrading SC does not store or have access to complete bank card data.

However, the user must be aware that security measures on the Internet are not infallible and that absolute security cannot be guaranteed.

The website uses own and third-party cookies to ensure proper service operation and, where appropriate, improve user experience.

What are cookies?

Cookies are small text files that are stored on the user's device when visiting a website and that allow remembering information about their browsing.

Types of cookies used

• Technical or necessary cookies: are essential for the website operation and the provision of services requested by the user. These cookies do not require user consent.
• Third-party cookies: the website may use third-party services (such as payment platforms, security systems or technical tools) that may install cookies on the user's device.

Legal basis

The legal basis for the use of technical cookies is contract execution or the provision of the service requested by the user. In case of using non-necessary cookies (such as analytical or personalization cookies), these will be installed only if the user has given their prior consent through the cookie management system enabled on the website.

Cookie management

The user can configure or reject the use of non-necessary cookies at any time through the cookie banner or configuration panel available on the website. Likewise, the user can allow, block or delete cookies installed on their device through their browser configuration.

In accordance with the General Data Protection Regulation (GDPR) and the Organic Law on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), the user has the right to:

• Access their personal data
• Request the rectification of inaccurate data
• Request the deletion of their data when, among other reasons, they are no longer necessary
• Object to the processing of their data
• Request limitation of the processing of their data
• Request the portability of their data

The user may exercise these rights by sending a request to soporte@cloudtrading.es, indicating the right they wish to exercise and attaching a copy of an identification document.

Likewise, they have the right to file a complaint with the Spanish Data Protection Agency if they consider that the processing of their data does not comply with applicable regulations.

The controller will respond to requests within a maximum period of one month, extendable in complex cases.

The user may withdraw their consent at any time without this affecting the lawfulness of previous processing.

Service payments are made in advance through the Stripe payment platform. Services are contracted in subscription mode, with the frequency selected by the user (monthly, six-month or annual).

Trial period

During the initial 7-day trial period no charge will be made, although a prior authorization of €0 will be made to validate the payment method. Once this period ends, the first charge corresponding to the contracted plan will automatically be made.

Automatic renewals

Once the service is started, payments will automatically renew at the end of each billing period through the payment method provided by the user, unless they have previously canceled the subscription. The user expressly authorizes Cloud Trading to make the recurring charges corresponding to the contracted subscription.

Payment failures

In case a payment cannot be processed, Cloud Trading may suspend or cancel the service, after notifying the user.

Taxes and price changes

Published prices do not include VAT or other applicable taxes, which will be added according to current regulations. Cloud Trading reserves the right to modify prices. Any change will be communicated in advance and will not affect already contracted periods.

The user will be responsible for keeping their payment data updated. In case of inability to collect, Cloud Trading may suspend the service until payment is regularized.

The user is the sole responsible for the use they make of the contracted service, as well as any content, software or activity developed on the VPS server.

User commitments

In particular, the user commits to:

• Use the service in accordance with current legislation and these Terms and Conditions
• Not use the service for illegal, fraudulent activities or that may harm third parties
• Not perform activities that may compromise the security, stability or performance of the infrastructure

User responsibilities

The user is responsible for:

• The installation, configuration and maintenance of software on their server
• The management of access credentials and security measures
• Making backups of their data
• The content stored or transmitted through the server

Cloud Trading will not be responsible for damages or losses arising from the user's non-compliance with these obligations.

Likewise, the user will be responsible before Cloud Trading and before third parties for any damage, loss, sanction or claim that may arise from improper use of the service.

To the extent that the user stores or processes personal data on contracted VPS servers, Cloud Trading will act as data processor, limited to providing technological infrastructure without accessing hosted data, except in cases necessary for service provision, technical maintenance or compliance with legal obligations.

The user will be considered data controller of the personal data they host on the server, being the sole responsible for complying with applicable data protection regulations, including the General Data Protection Regulation (GDPR).

The user commits to using the services in accordance with current regulations and not to host personal data without having an adequate legal basis for their processing.

Cloud Trading will not be responsible for the processing of personal data performed by the user on the server, nor for the violations they may commit in data protection matters.