OVH

OVH is a French cloud computing company that offers VPS, dedicated servers and other web services.

This page is not published. While you can access it via its direct link, it is not yet displayed on the website.

Transparency

Does the policy require users to be notified in case of a data breach? No

0/7

Decided May 18, 2020 (revision history). This question accounts for 8% of the final score.

Note that all companies operating in the EU are subject to Art. 33 of the GDPR, which requires companies to notify their data protection authority of a data breach within 72 hours of discovering it.

Possible Options

No0/7
Yes, eventually5/7
Yes, within 72 hours7/7
N/A (the service collects so little personal data that notification would not be possible)7/7

Note

This policy doesn't enforce the service to disclose data breaches

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


Will affected users be notified when the policy is meaningfully changed? Yes

5/5

Decided May 18, 2020 (revision history). This question accounts for 6% of the final score.

Possible Options

No0/5
Yes5/5
N/A (no personal data—or contact information—collected)5/5

Citation

We reserve the right to amend this Privacy Notice at our discretion and at any time. When we make changes to this privacy notice, we will notify you by email, through a notice on our Site, or any other method required by applicable law.

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


Is the policy's history made available? Only the date it was last modified

3/5

Decided May 18, 2020 (revision history). This question accounts for 6% of the final score.

Possible Options

No0/5
Only the date it was last modified3/5
Yes, with revisions or a change-log5/5

Citation

Last Updated: May 15, 2020

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


Does the policy outline the service's general security practices? Somewhat

1/3

Decided May 18, 2020 (revision history). This question accounts for 4% of the final score.

The policy provides only a very vague overview of its security practices.

Possible Options

No0/3
Somewhat1/3
Yes2/3
Yes, including audits2.5/3
N/A (no personal data collected)3/3
Yes, including independent audits3/3

Citation

We maintain reasonable and appropriate security measures to protect Personal Data from loss, misuse, unauthorized access, disclosure, alteration, or destruction in light of the risks inherent in processing this information. However, the Internet cannot be guaranteed to be fully secure and we cannot ensure or warrant the security of any information you provide to us. Please keep this in mind when providing us with your Personal Data.

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


Collection

Is it clear why the service collects the personal data that it does? Yes

10/10

Decided May 18, 2020 (revision history). This question accounts for 12% of the final score.

This question deals with transparency. Even if the service uses data for reasons that aren't ideal for privacy, provided they list all of those uses, the service can still receive full credit for this question. However, if they are not explicit about their uses (by employing language like "such as"), a lower score is assigned.

Possible Options

No0/10
Somewhat4/10
Mostly7/10
Yes10/10
No personal data is collected10/10

Citation

We use account-related data provided by Customers to us in connection with the purchase, sign-up, use or support of Customer account (such as usernames, email address and billing information) to provide you with access to the OVHcloud Services and/or the Site, contact you regarding your use of the OVHcloud Services and/or the Site or to notify you of important changes to the OVHcloud Services and/or the Site. For EU data subjects, such use is necessary for the performance of the contract between you and us.

When you ask for information about the OVHcloud Services (for example, when you ask us to send you offers or price information), we will use your contact information to respond to your requests. For EU data subjects, such use is necessary to respond to or implement your request prior to entering into a contract with us.

We process Service Data on behalf of Customers for the purpose of providing the OVHcloud Services to Customers in accordance with our Terms of Service or other applicable contract.

We will use your Personal Data to send you information by email on our new products or services or other promotions. Where required by the applicable law (for example, if you are an EU data subject), we will send you such information only with your consent, which was given at the time you provided us with the Personal Data. In such case, if you do not provide us with your consent to the processing of your Personal Data for this purpose, we will not send you this information.

You have the right to withdraw your consent at any time, including by following the instructions contained in each promotional communication we send you permitting you to "opt-out" of receiving future promotional information. In addition, if at any time you wish not to receive any future communications or you wish to have your name deleted from our mailing lists, please contact us

We use data relating to your use of the Site and/or the OVHcloud Services to analyze, administer, support and improve your access to and use of the Site and the OVHcloud Services, including fraud prevention. We may also compile, anonymize and/or aggregate your Personal Data and other data and use such anonymized and/or aggregated data for our business purposes, including sharing such data with affiliates and business partners. This aggregate information does not identify you. For EU data subjects, this use of your Personal Data is necessary for our legitimate interests in understanding how the Site and the OVHcloud Services are being used by you and to improve your experience on it.

When you apply for employment through our Site, your contact details and data about your employment history and education may be collected by our provider of recruiting services and we will use such data to evaluate your job application, to conduct job interviews, and as is otherwise needed for recruitment. For EU data subjects, processing of this data is necessary to respond to your request to process your application for employment. If you do not provide this data, we will not be able to process the application that you send through our Site.

We also may use your Personal Data in other ways for which we provide specific notice at the time of collection and obtain your consent if required by applicable law. Additionally, we may de-identify or aggregate your information and use it for other purposes as permitted by applicable law.

If you are an EU data subject, please see the "EU Data Subjects" section below for information on your rights in relation to your Personal Data.

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


Does the policy list the personal data it collects? Yes, generally

7/10

Decided May 18, 2020 (revision history). This question accounts for 12% of the final score.

All general categories of collected personal data are listed, though not all types of personal data are explicitly mentioned (for example, the list might use a phrase like 'such as' when listing types of personal data).

Possible Options

No0/10
Only summarily3/10
Yes, generally7/10
Yes, exhaustively10/10
N/A (no personal information is collected)10/10

Citation

We obtain information about you that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you or, if you reside in California, your household ("Personal Data"). We obtain Personal Data directly from you, by way of automatic collection, or from third parties.

When you interact with OVHcloud, the Site, or the OVHcloud Services, we may obtain Personal Data when you create an account using the OVHcloud Manager Portal, order the OVHcloud Services, communicate with us, subscribe to our email lists, or apply for employment. In providing the OVHcloud Services to Customers, we process on behalf of Customers such Personal Data that they upload or otherwise submit to our OVHcloud Services ("Service Data"). While our Customers decide what data to submit, Service Data typically includes information about their customers, prospects, employees, consultants or independent contractors, suppliers and other individuals or third parties ("End Users").

We may obtain the following categories of Personal Data directly from you: Identifiers, such as name, physical address, email address, account username and password, phone number, fax number, social media handle, government-issued identification information, and date of birth; Sensory data, such as an image on an identity document or a photo; Commercial information, such as information about the OVHcloud Services you subscribe to and payment information you provide in connection with these transactions (including billing address and payment card data); Professional information, such as your current or former employer and job title and other historical employment data; Education information, as provided in connection with your application for employment; Protected characteristics, such as military service, gender, age, marital status, ethnicity, disability or medical condition, race, and other demographic information you share with us; and, Preferences, such as how you prefer to communicate with us, OVHcloud Service that you are interested in, or other preferences you communicate to us.

When you visit the Site, we may automatically collect information about you through cookies and similar technologies. This may include: Identifiers, such as your browser or operating system, IP address and other identifiers associated with your applications and devices; Geolocation data; and, Internet or other electronic network activity information, such as clickstream data, interactions with the Site content and features, and data and times that you visit the Site.

We also collect Personal Data from third parties, such as social media platforms, marketing vendors, data analytics companies, data suppliers, or our affiliates or partners. The categories of Personal Data that we obtain from such sources may include: Identifiers, such as name, physical address, email address, and phone number; Internet or other electronic network activity information; Geolocation data; Education information; and Inferences regarding preferences or other characteristics.

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


Does the service collect personal data from third parties? Yes

0/10

Decided May 18, 2020 (revision history). This question accounts for 12% of the final score.

This includes the use of data brokers and independent verification authorities (such as background check providers).

Possible Options

Yes0/10
Only for critical data7/10
No10/10

Citation

We also collect Personal Data from third parties, such as social media platforms, marketing vendors, data analytics companies, data suppliers, or our affiliates or partners. The categories of Personal Data that we obtain from such sources may include: Identifiers, such as name, physical address, email address, and phone number; Internet or other electronic network activity information; Geolocation data; Education information; and Inferences regarding preferences or other characteristics.

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


Does the service allow the user to control whether personal data is used or collected for non-critical purposes? On an opt-out basis, for all non-critical data/uses

3/5

Decided May 18, 2020 (revision history). This question accounts for 6% of the final score.

Some services allow users to opt-out or opt-in to of non-critical collection or use of personal data, such as collecting data for personalized advertisements.

Possible Options

No0/5
On an opt-out basis, but only for some non-critical data/uses1.5/5
On an opt-out basis, for all non-critical data/uses3/5
N/A (no data used for non-critical purposes)5/5
On an opt-in basis5/5

Citation

You have the right to withdraw your consent at any time, including by following the instructions contained in each promotional communication we send you permitting you to "opt-out" of receiving future promotional information. In addition, if at any time you wish not to receive any future communications or you wish to have your name deleted from our mailing lists, please contact us at: [email protected] [or write to OVH US LLC dba Ovhcloud \n Attention: Opt-Out \n 11480 Commerce Park Drive \n Suite 500 \n Reston, VA 20191]

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


Handling

Does the policy allow personally-targeted or behavioral marketing? No

10/10

Decided May 18, 2020 (revision history). This question accounts for 12% of the final score.

Possible Options

Yes0/10
Yes, but you can opt-out3.5/10
Yes, but you must opt-in7/10
No10/10

Note

Your data is used for targeted marketing

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


Does the service allow third-party access to private personal data? Yes, all parties specified (only to critical service providers)

8/10

Decided May 18, 2020 (revision history). This question accounts for 12% of the final score.

This may come in the form of outright data sharing or by using local third-party analytics software (such as Google Analytics, which collects a plethora of user information).

Note that whether the policy allows sharing aggregated user data does not affect this question.

If the personal data is encrypted when it passes through the third-party, it does not count as third-party access (as the data is inaccessible to that party).

If personal data has been made public by, for example, posting it to a blog, it does not count as private personal information (and is therefore not considered by this question).

Possible Options

Yes, not all parties specified0/10
Yes, all parties specified (including non-critical service providers such as advertisers)3/10
Yes, not all parties specified (but only to critical service providers)7/10
Yes, all parties specified (only to critical service providers)8/10
No10/10

Citation

We may share your Personal Data with certain third parties to the extent permitted by applicable law:

  • Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions on our behalf: providers of payment processing and fraud prevention, marketing, web analytics, hosting, email communication and customer support services, and recruiting services. Pursuant to our instructions, these parties may access, process or store Personal Data in the course of performing their duties to us.
  • OVH SAS and its affiliate companies: In order to provide the OVHcloud Services you request from us, our parent company, OVH SAS, may provide us with technical support which may entail processing of Personal Data to the extent necessary to provide you with the OVHcloud Services. For EU data subjects, such processing is in our legitimate interest in ensuring that you may receive the OVHcloud Services you request from us.
  • Business Transfers: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your Personal Data and other information may be transferred to a successor or affiliate as part of that transaction along with other assets.
  • Legal Requirements: If required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation or lawful requests by public authorities, including meeting national security or law enforcement requirements and applicable law, rule, order, or regulation, (ii) protect and defend the rights or property of OVHcloud, (iii) act in urgent circumstances to protect the personal safety of users of the Site or the public, or (iv) protect against legal liability.

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


Does the service allow you to permanently delete your personal data? Yes, by contacting someone

3/5

Decided May 18, 2020 (revision history). This question accounts for 6% of the final score.

Even if there is a reasonable delay before the data is fully deleted (as is common), the data still counts as "permanently deleted" and satisfies the parameters for this question.

Possible Options

No0/5
Yes, by contacting someone3/5
Yes, using an automated mechanism5/5
N/A (no personal information collected)5/5

Citation

You may ask us to delete or remove your Personal Data and we will do so in some circumstances, such as where we no longer need it (we may not delete your data when other interests outweigh your right to deletion). If we have shared your data with others, we will tell them about the erasure where possible. If you ask us, where possible and lawful to do so, we will also tell you with whom we shared your Personal Data so that you can contact them directly.

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


When does the policy allow law enforcement access to personal data? When reasonably requested

3/5

Decided May 18, 2020 (revision history). This question accounts for 6% of the final score.

Possible Options

Always0/5
Not specified0/5
When reasonably requested3/5
Only when required by a court order or subpoena4/5
N/A (no personal data to share)5/5
Never (special legal jurisdiction)5/5

Citation

If required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation or lawful requests by public authorities, including meeting national security or law enforcement requirements and applicable law, rule, order, or regulation, (ii) protect and defend the rights or property of OVHcloud, (iii) act in urgent circumstances to protect the personal safety of users of the Site or the public, or (iv) protect against legal liability.

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.



Warnings

OVH has no warnings published on PrivacySpy. PrivacySpy publishes warnings when it learns a service has announced a data breach or is found misusing user data. If you believe a warning should be published for OVH, submit one here.


Highlighted Policy Snapshot ALPHA

No highlighted policy snapshot has been created for this privacy policy. To view the policy at its original location, click here.

6.2/10

How we calculate ratings →


Version Added

May 18, 2020

Ratings Updated

May 18, 2020

Warnings

0

Maintained by

doamatto

Original Location
Open in New Tab
Other Versions