European Economic Area and Switzerland
For account creation, requested hosting, deployment, domains, support, and billing, the principal legal basis is performance of a contract. Security, fraud prevention, service reliability, and limited product improvement rely on legitimate interests balanced against user rights. Tax, sanctions, and binding legal process rely on legal obligations. Optional processing relies on consent where required, which may be withdrawn without affecting prior lawful processing.
Residents may request access, rectification, erasure, restriction, portability, objection, or withdrawal of consent and may complain to the supervisory authority where they live or work. Where GDPR Article 27 requires an EEA representative, Tucloud must appoint and publish that representative before materially targeting users in the EEA; the current operator information does not establish an exemption or appointment.
Restricted transfers may use the European Commission Standard Contractual Clauses, an adequacy decision, or another lawful mechanism, together with supplementary measures and a transfer assessment where required.