Do I need to disclose Arduino IoT Cloud in my privacy policy?

Yes. Arduino IoT Cloud processes personal data including device telemetry, sensor readings, and user interactions with IoT devices. Because it involves data collection and transfer to a third-party processor (Arduino S.r.l.), you must disclose it in your privacy policy under the categories of data collection, third-party sharing, and data processing practices, particularly if your IoT devices collect environmental, health, or location information.

What specific data does Arduino IoT Cloud collect?

Arduino IoT Cloud collects device telemetry data, Thing properties and their real-time state, sensor readings from connected devices, and dashboard interaction logs. If your devices include environmental sensors, health monitors, or location services, that data is also collected. All collected data is synchronized to Arduino's cloud servers for storage and processing.

Does Arduino IoT Cloud require a cookie consent banner?

No. Arduino IoT Cloud itself does not use cookies. However, if your website or application uses other tools that set cookies alongside Arduino IoT Cloud integration, those require separate consent management. Always audit your full tech stack for cookie usage.

Who processes my data in Arduino IoT Cloud and where?

Arduino S.r.l., an EU-based company located in Italy, serves as the data processor. Data collected from your IoT devices is transferred to and processed on Arduino's cloud infrastructure within the EU. Arduino's privacy practices are detailed at https://www.arduino.cc/en/privacy-policy. As the service operator, you remain the data controller and are responsible for ensuring lawful processing under GDPR.

IoT & Wearables

Privacy policy clauses for Arduino IoT Cloud

Arduino IoT Cloud is a cloud platform that enables remote management, monitoring, and control of Arduino-based IoT devices. Websites and applications use it to collect device telemetry, sensor readings, and property states, allowing users to interact with connected devices through dashboards and mobile interfaces.

Scan my site free →Copy sample clause ↓

Free scan · No signup · Results in 60 seconds

What data Arduino IoT Cloud collects

Your privacy policy must disclose each of the following data types when you use Arduino IoT Cloud.

Device telemetry and sensor data

Thing properties and state

Dashboard interaction data

When does Arduino IoT Cloud trigger privacy obligations?

Installation & Data Flow Start

Adding Arduino IoT Cloud to your product immediately triggers personal data processing obligations the moment you:

–Connect a device and begin syncing telemetry to Arduino's servers (Italy, EU)
–Collect sensor readings—which may include environmental data, location signals, or health metrics depending on sensor type
–Log dashboard interaction data tied to user accounts

Regulatory Triggers

GDPR (if users are EU residents):

Privacy policy clauses for Arduino IoT Cloud

What data Arduino IoT Cloud collects

When does Arduino IoT Cloud trigger privacy obligations?

Installation & Data Flow Start

Regulatory Triggers

First Concrete Step

Where data goes

Common compliance pitfalls

Pitfall 1: Missing or Unsigned DPA with Arduino S.r.l.

Pitfall 2: Failing to Disclose Sensor Data Types in Privacy Notices

Pitfall 3: Not Updating Consent Mechanisms After Adding Arduino

Legal note

Sample privacy policy clause

What regulators look for

Enforcement Priorities

First Audit Red Flags

Frequently asked questions

Do I need to disclose Arduino IoT Cloud in my privacy policy?

What specific data does Arduino IoT Cloud collect?

Does Arduino IoT Cloud require a cookie consent banner?

Who processes my data in Arduino IoT Cloud and where?

Don't ship without Bandit.