Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Cloudamize is a SAAS platform that companies use to collect metrics on Windows and Linux servers they are looking to migrate to the cloud.

Cloudamize does not collect any personal data within the metrics, rather it takes measurements of servers, such as what is the CPU in the server and how much of the CPU it is it using. Cloudamize then uses these measurements and metrics to make recommendations on migration.

...

This is data relating to a person that which means they can be identified from the information. This is usually referred to as personal data or personally identifiable information (PII). Herein, this will be referred to as personal data. .
This may be one individual source of data (e.g. an email address) , or multiple sources of data combined (e.g. an email address with a company identifier and location)

...

Confidential data may contain personal data, however, it can also be data that does
not lead to the identification of a person.

E.g. Business confidential information such as system identification and performance information, MAC addresses, etc.

What personal data does Cloudamize collect?

Cloudamize collects only the personal data about its customers necessary to provide its services. Any personal data collected will be given to Cloudamize directly by the customer , and will only be requested for the relevant personnel accessing the services.

...

Under the GDPR, a Third country is that which is based outside of the European Economic Area (EEA), and has not been granted adequacy status by the EU Commission. Adequacy status is where the EU Commission has deemed that the country provides data protection practices equivalent to those in the EU. A list of adequate countries can be found here.

...

The data that Cloudamize collects will be accessible but the individuals the customer authorizes within their organization. Additionally, only Cloudamize staff with a business need and who are in an approved group can access the data.

...

Cloudamize offboarding processes ensure the following:
● All Customer information and data collected for Cloudamize processes will be
stored for 30 days after the completion of your project.
● After the 30 days day hold the data will be deleted
● Upon request, Cloudamize can confirm to the Customer that it has requested for
AWS to delete all Customer Data.
● For accounting and tax compliance purposes, Cloudreach will retain the customer name and some details of the engagement for up to a maximum of 10 years, as required by relevant legislation. The exact time frame will be dependent on the geographically applicable legislation. In most cases, this will be up to 6 years.
o Access will be allocated on a need to know basis only, and the principle of least privilege” is

...

● Processor, e.g., "Intel(R) Xeon(R) CPU X5482 @ 3.20GHz"
● Other details about the processor, such as processor clock rate, processor
family and processor number of cores, memory
● System board vendor and model, e.g., system vendor="Acer" system
model="Aspire S7-392"
● Operating system, e.g., Microsoft Windows [Version 6.2.9200]
● System identification information
> DNS host namehostname, e.g., WIN-C3N2VD185F8
> System domain, e.g., WORKGROUP
> System name, e.g., WIN-C3N2VD185F8
> System workgroup, e.g., WORKGROUP
> System part of the domain, e.g., False
> VM Name
> MAC address(es)
> IP address(es)
> NIC type, e.g., Ethernet, Intel(R) 82574L Gigabit Network Connection
> System status
▪ Last shutdown time
▪ Last boot-up time
▪ Disk drives
▪ Interface type
▪ Manufacturer
▪ Serial number
▪ Description
▪ Disk name

...