1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
|
<head>
<link href="<?php echo get_template_directory_uri(); ?>/assets/css/pages/generic.css?v=1" rel="stylesheet">
<div class="background generic-background">
<div class="container">
<div class="row">
<div class="col-md-6 topheader">
<h1>Privacy and Legal Policy</h1>
</div>
</div>
</div>
</div>
<section class="content">
<div class="container">
<div class="row">
<div class="col-md-8 col-md-offset-2">
<h2><?php echo $l->t('Introduction and summary');?></h2>
<p><small><a href="<?php echo home_url('privacyde') ?>" class="hyperlink">Deutsche Datenschutzerklärung hier</a></small></p>
<p><small><?php echo $l->t('These Terms of Service were originally written in English (US). We may translate these terms into other languages. In the event of a conflict between a translated version of these Terms of Service and the English version, the English version will control.');?></p></small></p>
<p><?php echo $l->t('We recognize that privacy is extremely important to all visitors to our website. We do not share any individual information with anybody without your permission.');?></p>
<p><?php echo $l->t('<strong>To download a whitepaper</strong>, you have to enter your email address. Unless you <strong>opt in</strong> for more information, we <em>immediately delete your mail address</em> from our database after sending the whitepaper.');?></p>
<p><?php echo $l->t('<strong>Our website</strong> ocasionally embeds content, like YouTube videos (behind a click-through wall) and others. We do not share any of your data with the parties behind them, however, they can gather some information when you watch a video or click the captcha. We are always looking for ways to decrease data sharing here and input is welcome.');?></p>
<p><?php echo $l->t('We have been working on moving away from YouTube and towards videos hosted on Cloudlare. They keep very minimal logs and do not put tracking cookies or other stuff on your computer. They store a log of each http request with <a href="https://developers.cloudflare.com/logs/log-fields">this data</a>. It can be summarized as IP address and client device and a whole bunch of data on how their infrastructure is doing.');?></p>
<p><?php echo $l->t('<strong>For tracking and marketing automation</strong> we use the open source <a class="hyperlink" href="http://matomo.org/">Matomo (the former Piwik)</a> tool to get information on how our website is used and use <a class="hyperlink" href="https://www.phplist.com/">phpList</a> to handle our newsletters. From neither will we hand over individual data to anybody else and any privacy breaches we will disclose as soon as possible. We also delete, anonymize and remove data regularly.');?></p>
<p><?php echo $l->t('<strong>Our <a class="hyperlink" href="https://scan.nextcloud.com">security scanner</a></strong> is strictly based on publicly available information, that is the list of known vulnerabilities relevant for ownCloud/Nextcloud releases as well as any applied hardenings/settings we can scan without having access to the server. We only scan on-demand and store the results, but do not update them automatically.');?></p>
<p><?php echo $l->t('<strong>Our forums</strong> on <a class="hyperlink" href="https://help.nextcloud.com">help.nextcloud.com</a> runs the open source <a class="hyperlink" href="https://discourse.org">discourse</a> software. This is self-hosted and we do not share, disclose or otherwise distribute any data from it. You can disable your own account there if you need to. Note that this platform is meant for home users and home user questions! As enterprise visitor, please use <a class="hyperlink" href="https://portal.nextcloud.com">our support portal</a>. If you still use the forums, expect that we reach out to you at some point.');?><?php echo $l->t('To use our forums you must agree with our Terms of Service. See below for the complete TOS for the use of our forums.');?><a class="hyperlink" href="#TOS"><?php echo $l->t('Terms of Service');?></a></p>
<p><?php echo $l->t('As we <strong>do not host Nextcloud</strong> for anyone else, this privacy policy can not cover what a Nextcloud installation does. In general, we can say the following:');?></p>
<p><?php echo $l->t('<strong>Our software</strong>, be it the Nextcloud server or the Android or iOS apps, are designed to not sent any user data to us. The optional Usage Survey app can sent usage statistics like installed apps to us to help us improve our service. You can review and approve the data before it is sent. We store the data aggregated and not per user, so a theft of our data can not be used to get any information about any specific installation. The Updater app, if enabled, sends Nextcloud version, PHP version, install time and the channel it wants to the Nextcloud updater server to receive update information. We store the install time and version on the instance to track statistics, all other data is discarded right away.');?></p>
<p><?php echo $l->t('<strong>With regards to third party apps:</strong> we can not take any responsibility for third-party apps and the data they store or sent about users. We do have a policy in our app store against abusing private data and any app that is found to be in violation is removed and its author banned. However, we do not have the ability to check all code of all third party applications and thus we recommend you are careful when installing third party apps.');?></p>
<p><?php echo $l->t('If you see any problems, please report it to <a class="hyperlink" href="mailto:abuse@nextcloud.com">abuse@nextcloud.com</a>.');?></p>
<p><?php echo $l->t('You can find details in our complete privacy policy below.');?></p>
</div>
</div>
<div class="row">
<div class="col-md-10 col-md-offset-1">
<h2><?php echo $l->t('Nextcloud Privacy Policy');?></h2>
<p><?php echo $l->t('Our privacy policy is written to help you find out how Nextcloud handles "Personally identifiable information ("PII). PII is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. Please read our privacy policy carefully to get a clear understanding of how we collect, use, protect or otherwise handle your Personally Identifiable Information in accordance with our website.');?></p>
<h3><?php echo $l->t('What personal information do we collect from the people that visit our blog, website or app?');?></h3>
<p><?php echo $l->t('Like most websites, nextcloud.com collects non-personally-identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. nextcloud.com’s purpose in collecting non-personally identifying information is to better understand how nextcloud.com’s visitors use its website. From time to time, nextcloud.com may release non-personally-identifying information in the aggregate, e.g., by publishing a report on trends in the usage of its website.');?></p>
<p><?php echo $l->t('nextcloud.com also collects potentially personally-identifying information like Internet Protocol (IP) addresses. nextcloud.com does not use such information to identify its visitors, however, and does not disclose such information to third parties unless legally obliged to do so.');?></p>
<p><?php echo $l->t('We honour the do-not-track directive. nextcloud.com will not track anything if this is enabled.');?></p>
<p><?php echo $l->t('Furthermore, our website visit statistics tool Mamoto is configured to anonymize visitor IP addresses data by not storing the last digits of all IP addresses. ');?></p>
<p><?php echo $l->t('When registering or submitting a form on our site, as appropriate, you may be asked to enter your name, email address, phone number or other details. See below on what happens with that data.');?></p>
<h3><?php echo $l->t('When do we collect information?');?></h3>
<h4>On our websites:</h4>
<p><?php echo $l->t('We collect information from you when you subscribe to a newsletter, fill out a form or enter information on our site.');?></p>
<h4>Nextcloud Files</h4>
<p><?php echo $l->t('Our apps only communicate with your own Nextcloud server and do not sent any data to us. The Play Store version equal to or newer than 1.5.0 for Nextcloud supports push notifications which use the Google servers. However Google does not have access to the actual notification data. Only a header with a subject is sent via Google, but in encrypted form, and the rest of the content is retrieved directly from your Nextcloud server and <strong>not</strong> sent through Google. The iOS client works in a similar way.');?></p>
<h3><?php echo $l->t('How do we use your information?');?></h3>
<p><?php echo $l->t('We may use the information we collect from you when you register, sign up for our newsletter, respond to a survey or marketing communication, surf the website, or use certain other site features in the following ways:');?></p>
<ul>
<li><?php echo $l->t('To improve our website in order to better serve you.');?></li>
<li><?php echo $l->t('To send periodic emails regarding your order or other products and services.');?></li>
<li><?php echo $l->t('To follow up with them after correspondence (live chat, email or phone inquiries)');?></li>
</ul>
<h3>Podlove</h3>
<p><?php echo $l->t('We use the Podlove player to serve podcast on');?> <a href="https://nextcloud.com/podcasts">nextcloud.com/podcasts.</a></p>
<p><?php echo $l->t('The <strong>Podlove Web Player</strong> is served by');?> <a href="https://www.keycdn.com">keycdn.com</a> (<a href="https://www.keycdn.com/gdpr">keycdn GDPR statement</a>).</p>
<h3>Videos</h3>
<p><?php echo $l->t('Videos on our website are served by');?> <a href="https://www.cloudflare.com">cloudflare</a> (<a href="https://www.cloudflare.com/de-de/gdpr/introduction/">cloudflare GDPR statement</a>).</p>
<h3><?php echo $l->t('How do we protect visitor information?');?></h3>
<p><?php echo $l->t('We only provide articles, white papers and other information. We never ask for credit card numbers or other financial data.');?></p>
<p><?php echo $l->t('We use regular Malware Scanning.');?></p>
<p><?php echo $l->t('Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. In addition, all sensitive information you supply is encrypted via Secure Socket Layer (SSL) technology.');?></p>
<p><?php echo $l->t('We implement a variety of security measures when a user places an order and enters, submits, or accesses their information to maintain the safety of your personal information.');?></p>
<h3><?php echo $l->t('Do we use "cookies"?');?></h3>
<p><?php echo $l->t('Yes. Cookies are small files that a site or its service provider transfers to your computer hard drive through your Web browser (if you allow) that enables the site or service provider systems to recognize your browser and capture and remember certain information. Cookies are used to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.');?></p>
<p><?php echo $l->t('We use cookies to:');?></p>
<ul>
<li><?php echo $l->t('Understand and save user preferences for future visits.');?></li>
<li><?php echo $l->t('Compile aggregate data about site traffic and site interactions in order to offer better site experiences and tools in the future. We do not use third-party services (like Google Analytics) that track this information on our behalf.');?></li>
</ul>
<p><?php echo $l->t('You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser (like Internet Explorer or firefox) settings. Each browser is a little different, so look at your browser Help menu to learn the correct way to modify your cookies settings.');?></p>
<p><?php echo $l->t('If you disable cookies, some minor features might be disabled.');?></p>
<h3><?php echo $l->t('Third-party disclosure');?></h3>
<p><?php echo $l->t('We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information unless we provide users with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential. We may also release information when its release is appropriate to comply with the law, enforce our site policies, or protect ours or others rights, property or safety.<br />
However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses. Think aggregated statistics (number of website visitors in a particular month) or trends ("we see an increase in the number of visitors from Asia").');?></p>
<h3><?php echo $l->t('Third-party links');?></h3>
<p><?php echo $l->t('We do not include or offer third-party products or services on our website.');?></p>
<h3><?php echo $l->t('According to the California Online Privacy Protection Act (CalOPPA) we agree to the following:');?></h3>
<p><?php echo $l->t('Users can visit our site anonymously.');?></p>
<p><?php echo $l->t('Once this privacy policy is created, we will add a link to it on our home page or as a minimum on the first significant page after entering our website.');?></p>
<p><?php echo $l->t('Our Privacy Policy link includes the word "Privacy" and can be easily be found on the page specified above.');?></p>
<p><?php echo $l->t('Users will be notified of any privacy policy changes on our Privacy Policy Page.');?></p>
<p><?php echo $l->t('Users are able to change their personal information:');?></p>
<ul>
<li><?php echo $l->t('By emailing us');?></li>
<li><?php echo $l->t('By calling us');?></li>
</ul>
<h3><?php echo $l->t('How does our site handle do not track signals?');?></h3>
<p><?php echo $l->t('We honor do not track signals and do not track, plant cookies, or use advertising when a Do Not Track (DNT) browser mechanism is in place.');?></p>
<h3><?php echo $l->t('Does our site allow third-party behavioral tracking?');?></h3>
<p><?php echo $l->t('We do not allow or employ third-party behavioral tracking. Our website features no third party ads or tracking tools.');?></p>
<h3><?php echo $l->t('Fair Information Practices');?></h3>
<p><?php echo $l->t('The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.');?></p>
<p><?php echo $l->t('In order to be in line with Fair Information Practices, should a data breach occur we will notify the users via email within 7 business days');?></p>
<p><?php echo $l->t('We also agree to the Individual Redress Principle, which requires that individuals have a right to pursue legally enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.');?></p>
<h3><?php echo $l->t('CAN SPAM Act');?></h3>
<p><?php echo $l->t('The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.');?></p>
<h3><?php echo $l->t('We collect your email address in order to:');?></h3>
<ul>
<li><?php echo $l->t('Send information, respond to inquiries, and/or other requests or questions.');?></li>
<li><?php echo $l->t('Market to our mailing list or continue to send emails to our clients after the original transaction has occurred.');?></li>
</ul>
<h3><?php echo $l->t('To be in accordance with CANSPAM we agree to the following:');?></h3>
<ul>
<li><?php echo $l->t('NOT use false or misleading subjects or email addresses.');?></li>
<li><?php echo $l->t('Identify the message as an advertisement in some reasonable way.');?></li>
<li><?php echo $l->t('Include the physical address of our business or site headquarters.');?></li>
<li><?php echo $l->t('Monitor third-party email marketing services for compliance, if one is used.');?></li>
<li><?php echo $l->t('Honor opt-out/unsubscribe requests quickly.');?></li>
<li><?php echo $l->t('Allow users to unsubscribe by using the link at the bottom of each email.');?></li>
</ul>
<h3><?php echo $l->t('Unsubscribing');?></h3>
<p><?php echo $l->t('If at any time you would like to unsubscribe from receiving future emails follow the instructions at the bottom of each email and we will promptly remove you from correspondence by that tool. Note that you have to unsubscribe separately from our newsletter and our marketing automation tool.');?></p>
<a id="TOS"></a>
<h3><?php echo $l->t('Discourse forums ToS');?></h3>
<p><?php echo $l->t('If you wish to use our forums, you have to agree to the stipulations below.');?></p>
<ul>
<li><a class="hyperlink" href="https://nextcloud.com/contribute/code-of-conduct/"><?php echo $l->t('You follow our Nextcloud community code of conduct');?></a></li>
<li><?php echo $l->t('You must at least be 10 years old');?></li>
<li><?php echo $l->t('You may no longer use the forum if Nextcloud GmbH or any of the admins contact you directly to say that you may not.');?></li>
<li><?php echo $l->t('Keep in mind our forum is to discuss Nextcloud and related, technical issues. Political debates, complaints or such about things not directly related, or purely relevant for yourself, do not belong on the forums. Respect the decisions of administrators - when asked to not discuss things, do not discuss them on the forums.');?></li>
<li><?php echo $l->t('To contribute to our forums, you need an account. For that we need a real email address. You can ask us to close your account and delete all private data (but not the posts, see below) any time. Use the contact form on the bottom of this page. Note that YOU are responsible for all actions taken with your account, whether authorized or not, unless you ask us to close your account or notify us it is compromised. You agree to pick a secure password and keep it safe!');?></li>
<li><?php echo $l->t('You agree all content posted on the forums is owned by you and by posting on our forums is shared and licensed under the Attribution-ShareAlike 4.0 International license.');?> <a class="hyperlink" href="http://creativecommons.org/licenses/by-sa/4.0/">Attribution-ShareAlike 4.0 International</a></li>
<li><?php echo $l->t('You may not break the law using the forum, use other users accounts, trade, buy or sell user names, advertise any products or use the forums to gather information for advertisement purposes. Also, you may not imply you are affiliated with or endorsed by Nextcloud GmbH or impersonate others.');?></li>
<li><?php echo $l->t('You may not automate access to the forum or monitor it with tools like browser plug-ins, web crawlers and the like, unless it is for the purposes of a search engine. You may not circumvent security or access restrictions or try to work around our moderation efforts. Do not strain the forum with technical requests or requests designed to impose an unreasonable load on the forum infrastructure.');?></li>
<li><?php echo $l->t('Respect copyright and privacy of others: do not remove any copyright marks, do not post copyrighted images and do not share personal details of other people or yourself.');?></li>
</ul>
<p><?php echo $l->t('Note that our forums contain content from our community. While we and our volunteer moderators do our best to keep dangerous or objectionable content off our forums, it is possible users break our rules. This also has privacy implications - if someone hotlinks an image, then the browser of the visitor will fetch the image and transfer the IP adresse (and some other data) to this server. You can configure your browser to not fetch any data from outside the forum, however.');?></p>
<p><?php echo $l->t('If you do not wish to follow those rules or accept the above, please do not use our forums. We reserve the right to change, redact, and delete content on the forum for any reason.');?></p>
<h3><?php echo $l->t('Website source');?></h3>
<p><?php echo $l->t('The source code of the website can be found in <a class="hyperlink" href="https://github.com/nextcloud/nextcloud.com">our GitHub repository</a>. It is licensed under the <a class="hyperlink" href="https://en.wikipedia.org/wiki/GNU_Affero_General_Public_License">AGPLv3 license</a>. Note that graphics and trademarks are of course not licensed freely, nor is text content. The license covers the code of the site.');?></p>
<h2><?php echo $l->t('Contact');?></h2>
<p><?php echo $l->t('If there are any questions regarding this privacy policy you may contact us using the information below.');?></p>
<h2><?php echo $l->t('Privacy Policy Changes');?></h2>
<p><?php echo $l->t('Although most changes are likely to be minor, Nextcloud may change its Privacy Policy from time to time and at our sole discretion. We encourage visitors to frequently check this page for any changes to our Privacy Policy. Your continued use of this site after any change in this Privacy Policy will constitute your acceptance of such change.');?></p>
<h2><?php echo $l->t('Legal Notice');?></h2>
<address><p><?php echo $l->t('Nextcloud GmbH<br/>
Hirschstrasse 26<br/>
70173 Stuttgart Germany<br/></address>
HRB 227086 (AG München)<br/>
T +49 711 25 24 28 90<br/>') ?>
<a class="hyperlink" href="<?php echo home_url('contact') ?>"><?php echo $l->t('contact form') ?></a><br/>
</p>
<p><?php echo $l->t('Managing Director:<br/>
Frank Karlitschek<br/>');?></p>
<p><?php echo $l->t('<small>All product names and trademarks are the property of their respective owners, which might in no way be associated or affiliated with Nextcloud.</small>');?></p>
<p><?php echo $l->t('Last Edited on 2020-07-23');?></p>
</div>
</div>
</div>
</section>
|