Privacy policy — Nextcloud Files (Nextcloud Hub)

Cited by

Facts read from this source

• Controller Report an error

  “Nextcloud GmbH (hereinafter collectively referred to as “the controller” or “Nextcloud” or “we” or “us”) as the operator of this website: www.Nextcloud.com”

• Controller address Report an error

  “Nextcloud GmbH Hauptmannsreute 44a 70192 Stuttgart Germany”

• No telemetry by default Report an error

  “Our software, be it the Nextcloud server or the Android or iOS apps, is designed from the ground up to ensure that no user data, especially personal data, is transferred to us.”

• Usage survey opt in Report an error

  “The optional Usage Survey app (usage report) can send us statistical data about the use of the instance, such as installed apps.”

• Push proxy no storage Report an error

  “We operate a push proxy service for mobile applications for private users. Notifications are encrypted and signed by the server, checked and re-signed by the push proxy and then forwarded to the mobile device. This ensures minimal data transmission and protects user privacy throughout the process. Details of the transferred data can be found here. We do not store any personal data.”

• Webpush alternative Report an error

  “Nextcloud server can additionally be configured to use webpush to send notifications to browsers and allow Android mobile apps to use unified-push instead of relying on our push proxy server.”

• Appstore policy Report an error

  “In our app store we have a policy against the misuse of private data. Any app found to be in breach of this policy will be removed from our app store and its author blocked.”

• Third party apps no warranty Report an error

  “With regard to third-party apps for the Nextcloud software: We cannot accept any responsibility for these apps and the user data stored or used by them.”

• Abuse contact Report an error

  “Please report problems and infringements related to our products to abuse@nextcloud.com.”

• Third country transfer safeguards Report an error

  “This is possible through binding corporate rules, standard contractual clauses of the European Commission for the protection of personal data pursuant to Art. 46 para. 1, 2 lit. c GDPR (the standard contractual clauses of 2021 are available at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32021D0915&locale-en), certificates or recognised codes of conduct”

• Tco regulation processing Report an error

  “Within the scope of our obligations under the TCO Regulation (EU) 2021/784 and the Digital Services Act (EU) 2022/2065, we process personal data that is necessary for the identification, removal, or blocking of terrorist and illegal content.”

• Log retention Report an error

  “If the data was stored in log files, it is deleted after 7 days at the latest.”

• Log not merged Report an error

  “The data listed above cannot be assigned to specific persons. We do not merge this data with other data sources, i.e. this data is not stored together with other personal data such as your name, address, telephone number or email address.”

• Log no marketing use Report an error

  “The data is not analysed for marketing purposes.”

• Consent withdrawal deletion days Report an error

  “After an objection or cancellation declared by you [see below under (5)], your personal data will be deleted within 7 days.”

• Newsletter double optin Report an error

  “Insofar as data is collected as part of the double opt-in described, Art. 6 para. 1 lit. f) GDPR is the legal basis.”

• Newsletter data minimisation Report an error

  “If you register for a newsletter, we will only collect your email address in order to provide this service.”

• Newsletter retention Report an error

  “Thereafter, we will retain the data for a further period of 3 years after cancellation in order to be able to prove the existence of consent to receive the newsletter.”

• Own consent manager Report an error

  “We use our own consent manager to obtain the legally required consent from you for the use of cookies and similar technologies.”

• Consent cookie retention Report an error

  “The encrypted key and the cookie status are stored on your end device using a cookie to establish the corresponding cookie status on future page views. This cookie is automatically deleted after 30 days.”

• Videos click through Report an error

  “We occasionally embed content on our website, including YouTube videos and Vimeo videos behind a click-through wall. Connections to external services to retrieve this data are only made when such external content is activated; no cookies are stored in the user’s browser.”

• Youtube dpf Report an error

  “The provider of the video portal YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. Further information on the handling of user data can be found in YouTube’s privacy policy at https://policies.google.com/privacy?hl=de The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF).”

• Vimeo scc Report an error

  “The provider is Vimeo Inc. (555 West 18th Street, New York, New York 10011, USA. The data transfer to the USA is based on the standard contractual clauses of the EU Commission.”

• Analytics matomo Report an error

  “Our website uses the web analysis service Matomo, which uses the the cookies specified in “Cookies preferences” accessible via the footer of our website. Collection and analysis only occurs if you have authorised this by setting the cookie banner accordingly and thereby declaring your consent.”

• Matomo anonymise ip Report an error

  “Our website uses Matomo with the “AnonymiseIP” extension. This ensures that IP addresses are processed in abbreviated form, i.e. anonymised, maintaining user anonymity during web analysis.”

• Matomo retention Report an error

  “The data is deleted as soon as it is no longer required for our recording purposes. In our case, this is the case after 365 days. Cookies are deleted after a maximum of 30 days.”

• Matomo DPA Report an error

  “We store the information collected in this way in the Matomo cloud. We have concluded an order processing agreement for this purpose.”

• Forum discourse Report an error

  “Our forum, accessible at help.nextcloud.com, is based on the open source software Discourse. This instance is operated by us. We do not publish, share or otherwise distribute data from this instance.”

• Forum email not public Report an error

  “This requires an email address, which is never displayed publicly.”

• Forum pseudonym allowed Report an error

  “There is no obligation to use your real name; it is possible to use a pseudonym.”

• Forum read without registration Report an error

  “Our forum can be read without the need to register.”

• Forum for private users Report an error

  “Please note that this forum is intended for private users and for answering questions in the private user area. Enterprise customers should use our support portal.”

• Appstore github login Report an error

  “Alternatively, you can log in using an existing Github account.”

• Appstore registration fields Report an error

  “Email User name First name Surname Password Security code (SSH/GPG code)”

• Social media accounts Report an error

  “Facebook: https://www.facebook.com/Nextclouders/ Instagram: https://www.instagram.com/nextclouders/ Linkedin: https://www.linkedin.com/company/nextcloud-gmbh Youtube: https://www.youtube.com/nextcloud Mastodon: https://mastodon.xyz/@nextcloud Bluesky: https://bsky.app/profile/nextcloud.bsky.social Vimeo: https://vimeo.com/nextclouders”

Scores citing this record

• The Agency Producer European sovereignty
• The Architecture Practice Partner European sovereignty
• The IT Lead European sovereignty