{"id":426560,"date":"2026-08-11T11:00:00","date_gmt":"2026-08-11T09:00:00","guid":{"rendered":"https:\/\/nextcloud.com\/?p=426560"},"modified":"2026-08-11T12:47:25","modified_gmt":"2026-08-11T10:47:25","slug":"nextcloud-data-protection-impact-assessment-surf-privacy-company","status":"publish","type":"post","link":"https:\/\/nextcloud.com\/it\/blog\/nextcloud-data-protection-impact-assessment-surf-privacy-company\/","title":{"rendered":"Nextcloud passes Data Protection Impact Assessment (DPIA) by SURF &#038; Privacy Company"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Most software vendors describe their approach to data protection in similar terms: privacy by design, security built in from the start, data protection taken seriously. These phrases appear across nearly every vendor&#8217;s marketing material, largely because they cost nothing to state and are rarely independently verified. For buyers, it&#8217;s difficult to distinguish vendors with genuinely defensible practices from those that merely present themselves convincingly.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">With Nextcloud, that distinction was recently put to the test by an independent party.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">On July 16, 2026, the Dutch education and research IT cooperative <a href=\"https:\/\/www.surf.nl\/\" target=\"_blank\" rel=\"noreferrer noopener\">SURF<\/a> and the privacy and data-protection consultancy <a href=\"https:\/\/www.privacycompany.eu\/\" target=\"_blank\" rel=\"noreferrer noopener\">Privacy Company<\/a> published the&nbsp;<a href=\"https:\/\/vendorcompliance.surf.nl\/wp-content\/uploads\/2026\/07\/260716-Complete-DPIA-Nextcloud-public-version-clean-1.0.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">results of a joint Data Protection Impact Assessment (DPIA)<\/a> for self-hosted <a href=\"https:\/\/nextcloud.com\/enterprise\/\" target=\"_blank\" rel=\"noreferrer noopener\">Nextcloud Enterprise<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A DPIA is a formal, structured evaluation process, often required or recommended under GDPR for higher-risk data processing, carried out by an independent party rather than the vendor itself. It&#8217;s a level of scrutiny that procurement and legal teams tend to take very seriously.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The DPIA initially identified 15 data protection risks, for which Nextcloud promptly implemented mitigations. SURF then negotiated an amended Data Processing Agreement (DPA), reclassifying all 15 risks as resolved or low.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>No access to customer&#8217;s content data<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The identified risks were located in four areas: admin and commercial contact data, support data, optional diagnostic data that administrators can choose to share, and website data. Notably, no risks were found for content data (the files customers store on Nextcloud) because we have no access to this data, even when providing support.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This lack of access to content data isn&#8217;t a contractual promise but a result of how the software is built. By default, we process only minimal personal data, generally limited to contact details for administrators or procurement contacts. The company also holds CSPN certification from ANSSI, France&#8217;s national cybersecurity agency, which independently verified its secure storage, authentication, access control, and secure communications.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For users of <a href=\"https:\/\/nextcloud.com\/office\/\" target=\"_blank\" rel=\"noreferrer noopener\">Nextcloud Office<\/a>, the DPIA makes a distinction between the <a href=\"https:\/\/nextcloud.com\/blog\/nextcloud-office-powered-by-euro-office-collabora-thinkfree-office\/\" target=\"_blank\" rel=\"noreferrer noopener\">available office suites<\/a>. It points out that for customers who use Collabora Online, support tickets could be handled by staff in the UK, whereas Euro-Office can be used with fully EU-exclusive data processing.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">SURF secured an amended DPA limiting Nextcloud&#8217;s role as processor to four specific purposes, with seven additional &#8220;further processing&#8221; purposes where Nextcloud may act as controller. It also obtained a hard guarantee that Nextcloud will never disclose personal data to authorities outside the EU, along with its own audit rights to verify ongoing compliance, limited data retention periods, and minimal cookie use. SURF negotiated these terms specifically for the Dutch education and research sector.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Implications for enterprise buyers<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The responsibility to ensure data privacy doesn&#8217;t end with the vendor. Customers are expected to minimize what their administrators choose to share through diagnostic settings and implement security measures to avoid falling into a &#8220;high risk&#8221; category on their own end.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For a market where most vendors&#8217; privacy claims go untested, the DPIA gives Nextcloud a documented account from an independent party, including what it found and what changed as a result. This doesn&#8217;t replace an organization&#8217;s own due diligence, but it gives both existing and prospective customers a concrete starting point for their evaluation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The full DPIA is publicly available through SURF&#8217;s <a href=\"https:\/\/vendorcompliance.surf.nl\/en\/dpia-on-nextcloud-enterprise-software-15-low-or-solved-risks\/\" target=\"_blank\" rel=\"noreferrer noopener\">Vendor Compliance<\/a> page. If you&#8217;re assessing <a href=\"https:\/\/nextcloud.com\/enterprise\/\" target=\"_blank\" rel=\"noreferrer noopener\">Nextcloud Enterprise<\/a> for your own organization, you can <a href=\"https:\/\/nextcloud.com\/instant-trial\/\" target=\"_blank\" rel=\"noreferrer noopener\">request a free trial<\/a> or <a href=\"https:\/\/nextcloud.com\/get-a-quote\/\" target=\"_blank\" rel=\"noreferrer noopener\">contact us for a quote<\/a> tailored to your needs. We&#8217;ll talk through what a deployment would look like and which data residency and hosting configuration fits your needs.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>An independent Data Protection Impact Assessment gives existing and potential customers confidence that privacy claims are grounded in reality. For Nextcloud, this has now been confirmed.<\/p>\n","protected":false},"author":60,"featured_media":426588,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"publish_to_discourse":"","publish_post_category":"22","wpdc_auto_publish_overridden":"1","wpdc_topic_tags":"","wpdc_pin_topic":"","wpdc_pin_until":"","discourse_post_id":"730624","discourse_permalink":"https:\/\/help.nextcloud.com\/t\/nextcloud-passes-data-protection-impact-assessment-dpia-by-surf-privacy-company\/247982","wpdc_publishing_response":"success","wpdc_publishing_error":"","footnotes":""},"categories":[11,12,7,347,1],"tags":[],"class_list":["post-426560","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","category-general","category-news","category-privacy","category-uncategorized"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Nextcloud passes DPIA by SURF &amp; Privacy Company - Nextcloud<\/title>\n<meta name=\"description\" content=\"Learn more about Data Protection Impact Assessments, why they\u2019re an important signal for enterprise buyers, and what this means for Nextcloud.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nextcloud.com\/it\/blog\/nextcloud-data-protection-impact-assessment-surf-privacy-company\/\" \/>\n<meta property=\"og:locale\" content=\"it_IT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Nextcloud passes DPIA by SURF &amp; Privacy Company - Nextcloud\" \/>\n<meta property=\"og:description\" content=\"Learn more about Data Protection Impact Assessments, why they\u2019re an important signal for enterprise buyers, and what this means for Nextcloud.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nextcloud.com\/it\/blog\/nextcloud-data-protection-impact-assessment-surf-privacy-company\/\" \/>\n<meta property=\"og:site_name\" content=\"Nextcloud\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Nextclouders\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-11T09:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-11T10:47:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nextcloud.com\/c\/uploads\/2026\/08\/nextcloud-dpia-surf-privacy-company-featured-image-1024x576.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"576\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Kevin Herschbach\" \/>\n<meta name=\"twitter:label1\" content=\"Scritto da\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kevin Herschbach\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tempo di lettura stimato\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minuti\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/blog\\\/nextcloud-data-protection-impact-assessment-surf-privacy-company\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/blog\\\/nextcloud-data-protection-impact-assessment-surf-privacy-company\\\/\"},\"author\":{\"name\":\"Kevin Herschbach\",\"@id\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/#\\\/schema\\\/person\\\/f3e766d1e7048f3e434902ae8c191593\"},\"headline\":\"Nextcloud passes Data Protection Impact Assessment (DPIA) by SURF &#038; Privacy Company\",\"datePublished\":\"2026-08-11T09:00:00+00:00\",\"dateModified\":\"2026-08-11T10:47:25+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/blog\\\/nextcloud-data-protection-impact-assessment-surf-privacy-company\\\/\"},\"wordCount\":603,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/blog\\\/nextcloud-data-protection-impact-assessment-surf-privacy-company\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nextcloud.com\\\/c\\\/uploads\\\/2026\\\/08\\\/nextcloud-dpia-surf-privacy-company-featured-image.png\",\"articleSection\":[\"Blog\",\"General\",\"News\",\"Privacy\",\"Uncategorized\"],\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/nextcloud.com\\\/it\\\/blog\\\/nextcloud-data-protection-impact-assessment-surf-privacy-company\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/blog\\\/nextcloud-data-protection-impact-assessment-surf-privacy-company\\\/\",\"url\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/blog\\\/nextcloud-data-protection-impact-assessment-surf-privacy-company\\\/\",\"name\":\"Nextcloud passes DPIA by SURF & Privacy Company - Nextcloud\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/blog\\\/nextcloud-data-protection-impact-assessment-surf-privacy-company\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/blog\\\/nextcloud-data-protection-impact-assessment-surf-privacy-company\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nextcloud.com\\\/c\\\/uploads\\\/2026\\\/08\\\/nextcloud-dpia-surf-privacy-company-featured-image.png\",\"datePublished\":\"2026-08-11T09:00:00+00:00\",\"dateModified\":\"2026-08-11T10:47:25+00:00\",\"description\":\"Learn more about Data Protection Impact Assessments, why they\u2019re an important signal for enterprise buyers, and what this means for Nextcloud.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/blog\\\/nextcloud-data-protection-impact-assessment-surf-privacy-company\\\/#breadcrumb\"},\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/nextcloud.com\\\/it\\\/blog\\\/nextcloud-data-protection-impact-assessment-surf-privacy-company\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/blog\\\/nextcloud-data-protection-impact-assessment-surf-privacy-company\\\/#primaryimage\",\"url\":\"https:\\\/\\\/nextcloud.com\\\/c\\\/uploads\\\/2026\\\/08\\\/nextcloud-dpia-surf-privacy-company-featured-image.png\",\"contentUrl\":\"https:\\\/\\\/nextcloud.com\\\/c\\\/uploads\\\/2026\\\/08\\\/nextcloud-dpia-surf-privacy-company-featured-image.png\",\"width\":1920,\"height\":1080,\"caption\":\"Nextcloud passes Data Protection Impact Assessment by SURF & Privacy Company\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/blog\\\/nextcloud-data-protection-impact-assessment-surf-privacy-company\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Nextcloud passes Data Protection Impact Assessment (DPIA) by SURF &#038; Privacy Company\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/#website\",\"url\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/\",\"name\":\"Nextcloud\",\"description\":\"Regain control over your data\",\"publisher\":{\"@id\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"it-IT\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/#organization\",\"name\":\"Nextcloud\",\"url\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/nextcloud.com\\\/c\\\/uploads\\\/2022\\\/10\\\/nextcloud-logo-blue-transparent.svg\",\"contentUrl\":\"https:\\\/\\\/nextcloud.com\\\/c\\\/uploads\\\/2022\\\/10\\\/nextcloud-logo-blue-transparent.svg\",\"width\":\"1024\",\"height\":\"1024\",\"caption\":\"Nextcloud\"},\"image\":{\"@id\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/Nextclouders\\\/\",\"https:\\\/\\\/x.com\\\/nextclouders\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/10827569\\\/\",\"https:\\\/\\\/youtube.com\\\/nextcloud\",\"https:\\\/\\\/www.instagram.com\\\/nextclouders\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/nextcloud.com\\\/it\\\/#\\\/schema\\\/person\\\/f3e766d1e7048f3e434902ae8c191593\",\"name\":\"Kevin Herschbach\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0c71d87b93ea47ae85cda8c9f493bd0aa6763335537bcabe1e492aed84d31c07?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0c71d87b93ea47ae85cda8c9f493bd0aa6763335537bcabe1e492aed84d31c07?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0c71d87b93ea47ae85cda8c9f493bd0aa6763335537bcabe1e492aed84d31c07?s=96&d=mm&r=g\",\"caption\":\"Kevin Herschbach\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Nextcloud passes DPIA by SURF & Privacy Company - Nextcloud","description":"Learn more about Data Protection Impact Assessments, why they\u2019re an important signal for enterprise buyers, and what this means for Nextcloud.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nextcloud.com\/it\/blog\/nextcloud-data-protection-impact-assessment-surf-privacy-company\/","og_locale":"it_IT","og_type":"article","og_title":"Nextcloud passes DPIA by SURF & Privacy Company - Nextcloud","og_description":"Learn more about Data Protection Impact Assessments, why they\u2019re an important signal for enterprise buyers, and what this means for Nextcloud.","og_url":"https:\/\/nextcloud.com\/it\/blog\/nextcloud-data-protection-impact-assessment-surf-privacy-company\/","og_site_name":"Nextcloud","article_publisher":"https:\/\/www.facebook.com\/Nextclouders\/","article_published_time":"2026-08-11T09:00:00+00:00","article_modified_time":"2026-08-11T10:47:25+00:00","og_image":[{"width":1024,"height":576,"url":"https:\/\/nextcloud.com\/c\/uploads\/2026\/08\/nextcloud-dpia-surf-privacy-company-featured-image-1024x576.png","type":"image\/png"}],"author":"Kevin Herschbach","twitter_misc":{"Scritto da":"Kevin Herschbach","Tempo di lettura stimato":"3 minuti"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/nextcloud.com\/it\/blog\/nextcloud-data-protection-impact-assessment-surf-privacy-company\/#article","isPartOf":{"@id":"https:\/\/nextcloud.com\/it\/blog\/nextcloud-data-protection-impact-assessment-surf-privacy-company\/"},"author":{"name":"Kevin Herschbach","@id":"https:\/\/nextcloud.com\/it\/#\/schema\/person\/f3e766d1e7048f3e434902ae8c191593"},"headline":"Nextcloud passes Data Protection Impact Assessment (DPIA) by SURF &#038; Privacy Company","datePublished":"2026-08-11T09:00:00+00:00","dateModified":"2026-08-11T10:47:25+00:00","mainEntityOfPage":{"@id":"https:\/\/nextcloud.com\/it\/blog\/nextcloud-data-protection-impact-assessment-surf-privacy-company\/"},"wordCount":603,"commentCount":0,"publisher":{"@id":"https:\/\/nextcloud.com\/it\/#organization"},"image":{"@id":"https:\/\/nextcloud.com\/it\/blog\/nextcloud-data-protection-impact-assessment-surf-privacy-company\/#primaryimage"},"thumbnailUrl":"https:\/\/nextcloud.com\/c\/uploads\/2026\/08\/nextcloud-dpia-surf-privacy-company-featured-image.png","articleSection":["Blog","General","News","Privacy","Uncategorized"],"inLanguage":"it-IT","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/nextcloud.com\/it\/blog\/nextcloud-data-protection-impact-assessment-surf-privacy-company\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/nextcloud.com\/it\/blog\/nextcloud-data-protection-impact-assessment-surf-privacy-company\/","url":"https:\/\/nextcloud.com\/it\/blog\/nextcloud-data-protection-impact-assessment-surf-privacy-company\/","name":"Nextcloud passes DPIA by SURF & Privacy Company - Nextcloud","isPartOf":{"@id":"https:\/\/nextcloud.com\/it\/#website"},"primaryImageOfPage":{"@id":"https:\/\/nextcloud.com\/it\/blog\/nextcloud-data-protection-impact-assessment-surf-privacy-company\/#primaryimage"},"image":{"@id":"https:\/\/nextcloud.com\/it\/blog\/nextcloud-data-protection-impact-assessment-surf-privacy-company\/#primaryimage"},"thumbnailUrl":"https:\/\/nextcloud.com\/c\/uploads\/2026\/08\/nextcloud-dpia-surf-privacy-company-featured-image.png","datePublished":"2026-08-11T09:00:00+00:00","dateModified":"2026-08-11T10:47:25+00:00","description":"Learn more about Data Protection Impact Assessments, why they\u2019re an important signal for enterprise buyers, and what this means for Nextcloud.","breadcrumb":{"@id":"https:\/\/nextcloud.com\/it\/blog\/nextcloud-data-protection-impact-assessment-surf-privacy-company\/#breadcrumb"},"inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nextcloud.com\/it\/blog\/nextcloud-data-protection-impact-assessment-surf-privacy-company\/"]}]},{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/nextcloud.com\/it\/blog\/nextcloud-data-protection-impact-assessment-surf-privacy-company\/#primaryimage","url":"https:\/\/nextcloud.com\/c\/uploads\/2026\/08\/nextcloud-dpia-surf-privacy-company-featured-image.png","contentUrl":"https:\/\/nextcloud.com\/c\/uploads\/2026\/08\/nextcloud-dpia-surf-privacy-company-featured-image.png","width":1920,"height":1080,"caption":"Nextcloud passes Data Protection Impact Assessment by SURF & Privacy Company"},{"@type":"BreadcrumbList","@id":"https:\/\/nextcloud.com\/it\/blog\/nextcloud-data-protection-impact-assessment-surf-privacy-company\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nextcloud.com\/it\/"},{"@type":"ListItem","position":2,"name":"Nextcloud passes Data Protection Impact Assessment (DPIA) by SURF &#038; Privacy Company"}]},{"@type":"WebSite","@id":"https:\/\/nextcloud.com\/it\/#website","url":"https:\/\/nextcloud.com\/it\/","name":"Nextcloud","description":"Regain control over your data","publisher":{"@id":"https:\/\/nextcloud.com\/it\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nextcloud.com\/it\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"it-IT"},{"@type":"Organization","@id":"https:\/\/nextcloud.com\/it\/#organization","name":"Nextcloud","url":"https:\/\/nextcloud.com\/it\/","logo":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/nextcloud.com\/it\/#\/schema\/logo\/image\/","url":"https:\/\/nextcloud.com\/c\/uploads\/2022\/10\/nextcloud-logo-blue-transparent.svg","contentUrl":"https:\/\/nextcloud.com\/c\/uploads\/2022\/10\/nextcloud-logo-blue-transparent.svg","width":"1024","height":"1024","caption":"Nextcloud"},"image":{"@id":"https:\/\/nextcloud.com\/it\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Nextclouders\/","https:\/\/x.com\/nextclouders","https:\/\/www.linkedin.com\/company\/10827569\/","https:\/\/youtube.com\/nextcloud","https:\/\/www.instagram.com\/nextclouders\/"]},{"@type":"Person","@id":"https:\/\/nextcloud.com\/it\/#\/schema\/person\/f3e766d1e7048f3e434902ae8c191593","name":"Kevin Herschbach","image":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/secure.gravatar.com\/avatar\/0c71d87b93ea47ae85cda8c9f493bd0aa6763335537bcabe1e492aed84d31c07?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/0c71d87b93ea47ae85cda8c9f493bd0aa6763335537bcabe1e492aed84d31c07?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/0c71d87b93ea47ae85cda8c9f493bd0aa6763335537bcabe1e492aed84d31c07?s=96&d=mm&r=g","caption":"Kevin Herschbach"}}]}},"featured_media_url":"https:\/\/nextcloud.com\/c\/uploads\/2026\/08\/nextcloud-dpia-surf-privacy-company-featured-image.png","_links":{"self":[{"href":"https:\/\/nextcloud.com\/it\/wp-json\/wp\/v2\/posts\/426560","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nextcloud.com\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nextcloud.com\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nextcloud.com\/it\/wp-json\/wp\/v2\/users\/60"}],"replies":[{"embeddable":true,"href":"https:\/\/nextcloud.com\/it\/wp-json\/wp\/v2\/comments?post=426560"}],"version-history":[{"count":4,"href":"https:\/\/nextcloud.com\/it\/wp-json\/wp\/v2\/posts\/426560\/revisions"}],"predecessor-version":[{"id":426787,"href":"https:\/\/nextcloud.com\/it\/wp-json\/wp\/v2\/posts\/426560\/revisions\/426787"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nextcloud.com\/it\/wp-json\/wp\/v2\/media\/426588"}],"wp:attachment":[{"href":"https:\/\/nextcloud.com\/it\/wp-json\/wp\/v2\/media?parent=426560"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nextcloud.com\/it\/wp-json\/wp\/v2\/categories?post=426560"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nextcloud.com\/it\/wp-json\/wp\/v2\/tags?post=426560"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}