Privacy Policy

Last update: July 28, 2023

Carbogatto, (“Carbogatto,” “we,” “our,” or “us,” as used here, will refer to Carbogatto and its parents, subsidiaries, and affiliates) is committed to respecting your privacy (“you”). We understand the importance of your personally identifiable information and any other information that could reasonably relate to you (“Personal Information”).

This Privacy Policy explains how we collect, use, maintain, protect and disclose your Personal Information when you visit our website, use our services, or contact us directly by email, phone, or other methods. We also discuss your rights and choices with respect to your Personal Information, how it is stored and used, and how you can contact us if you have any questions or concerns.

Please read this Privacy Policy carefully. If you do not agree with this Privacy Policy or any part thereof, you should not access or use any part of our websites, or otherwise provide us with your Personal Information. If you change your mind in the future, you should stop using our websites and provide us with no further Personal Information.

This Privacy Policy includes the following sections: 

1. Information We Collect

2. Unsubscribing from Email

3. How We Use Personal Information

4.         How We Disclose Personal Information

5.         Your Access to and Control Over Information

6.         Data Retention

7.         Data Transfers

8.         Security

9.         Other Disclosures

10.       Contact Us

Information We Collect

We collect Personal Information directly from you and from third parties. We indicate whether and why you must provide us with your Personal Information and the consequences of failing to do so. If you do not provide Personal Information when requested, you may not be able to benefit from our services if that information is necessary to provide you with the service or if we are legally required to collect it.

Information We Collect Directly

We collect Personal Information that you voluntarily enter via our websites, provide when using the Carbogatto mobile application, email directly to us, or provide to us in person.

For product inquiries, this information includes some or all of the following:

•           name

•           mailing address

•           email

•           telephone

•           country

•           product preferences

•           message content

If you make a purchase on our site, we receive confirmation that you have made a payment, which includes your name, email, last-4 digits of payment card for identification and payment transaction identification number.

If you contact us directly via email, we collect any Personal Information you provide to us in the email, and any such information will be kept in our email system or moved elsewhere within our company as described below.

If you use our mobile application, the app will collect and send to Carbogatto certain device information to authenticate your profile and perform your requested service, including device geolocation and usage activity.

Information We Collect From Third Parties

We, and third parties, automatically collect information about your visit to and use of our websites via various technologies (see our Cookie Policy for more information). The information they collect includes Personal Information such as your IP address and advertising identifiers.

We obtain information, including Personal Information, from third parties and sources other than our websites. If we combine or associate information from other sources with Personal Information that we collect through our websites, we will treat the combined information as Personal Information in accordance with this Privacy Policy.

Unsubscribing From Email

If you no longer wish to receive promotional emails from Carbogatto, you can easily unsubscribe by clicking on the "unsubscribe," "manage your preferences," or similar links provided at the bottom of our emails. We will remove you from the relevant mailing list(s) or campaign(s) as soon as reasonably possible. However, please note that even if you opt out of receiving promotional emails from us, you will continue to receive administrative emails from us. We will only send you marketing communications with your consent, where required under applicable law.

How We Use Personal Information

We use the Personal Information we collect for a variety of purposes, including:

•           Providing, maintaining, improving, and enhancing our website, sales, and service operations (our "Services").

•           Personalizing your experience with us by providing tailored content and recommendations on our website as well as other locations across the Internet that are relevant to your interests.

•           Understanding and analyzing how you use our Services and developing new products, services, features, and functionality.

•           Communicating with you, providing you with updates and other information relating to our Services, responding to comments and questions, and otherwise providing customer support.

•           Developing and providing you with promotional and advertising materials that we consider relevant, valuable, or otherwise of interest to you.

•           Completing your purchase and facilitating transactions and payments, including allowing you to make a deposit toward a future purchase.

•           Evaluating and undertaking certain business transactions that may result in the transfer of all or some of our, or another business', assets.

•           Responding to trust and safety issues.

•           Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.

•           For compliance purposes, including enforcing our Terms and Conditions or other legal rights, or as required by applicable laws and regulations or requested by any judicial process or governmental agency.

•           De-identifying and aggregating information to monitor and analyze the effectiveness of our websites and third-party marketing activities and to monitor aggregate site usage metrics such as total number of visitors and pages viewed.

•           We may process your personal data where necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.

•           We may also process your personal data where such processing is necessary for compliance with a legal obligation to which we are subject or in order to protect your vital interests or the vital interests of another natural person.

•           For other purposes for which we provide specific notice at the time the information is collected.

If you are located in the European Economic Area or the United Kingdom, we only process your Personal Information based on a valid legal ground, including when:

•           You have consented to the use of your Personal Information.

•           We need your Personal Information to provide you with our service, including to respond to your inquiries.

•           We have a legal obligation to use your Personal Information.

•           We or a third party have a legitimate interest in using your Personal Information. In particular, we have a legitimate interest in using your Personal Information to conduct business analytics and otherwise improve the safety, security, and performance of our Services. We rely on our or a third party's legitimate interests to process your Personal Information only when these interests are not overridden by your rights and interests.

How We Disclose Personal Information

We may share your Personal Information with third parties in the following circumstances:
Service Providers: We share your Personal Information with service providers who help us provide our Services. These third parties may process your Personal Information on our behalf or for their own purposes.

They include:
Payment processors Email service providers Cloud storage providers Marketing and advertising service providers Website analytics providers IT service providers Other third-party service providers

Business Transactions: We may disclose or transfer your Personal Information in connection with a merger, acquisition, or sale of all or a portion of our assets, or other similar transactions, including due diligence conducted prior to such a transaction.

Legal Obligations

We may disclose your Personal Information to a third party if we believe that disclosure is necessary:

To comply with any applicable law, regulation, legal process or governmental request; To enforce our agreements, policies and terms of service; To protect the security or integrity of our Services; To protect our customers, or the public from harm or illegal activities; To respond to an emergency, prevent or stop illegal or unethical activities; or To establish, exercise or defend legal rights.

Aggregate Information

We may disclose aggregated, de-identified information about our users without restriction.

Third-Party Links: Our website may contain links to third-party websites, applications, and services not operated by us. We are not responsible for the privacy practices of these third-party websites, applications, and services, and we recommend that you review their privacy policies.

Your Access to and Control Over Information

Your principal rights under data protection law are:

(a)       the right to access - you can ask for copies of your personal data;

(b)       the right to rectification - you can ask us to rectify inaccurate personal data and to complete incomplete personal data;

(c)       the right to erasure - you can ask us to erase your personal data;

(d)       the right to restrict processing - you can ask us to restrict the processing of your personal data;

(e)       the right to object to processing - you can object to the processing of your personal data;

(f)        the right to data portability - you can ask that we transfer your personal data to another organisation or to you;

(g)       the right to complain to a supervisory authority - you can complain about our processing of your personal data; and

(h)       the right to withdraw consent - to the extent that the legal basis of our processing of your personal data is consent, you can withdraw that consent.

You may exercise these rights by contacting us as provided in Section 10 below. We will respond to your request in accordance with applicable law.

Data Retention

We will retain your Personal Information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information, and whether we can achieve those purposes through other means.

Your personal data held in our website database will be stored on the servers of our hosting services providers https://www.hetzner.com
We may disclose personal data to our suppliers or subcontractors identified at https://www.hetzner.com insofar as reasonably necessary to fulfill the purposes for which we collected it.

The hosting facilities for our website are situated in Germany. Transfers to Germany will be protected by appropriate safeguards.

You acknowledge that personal data that you submit for publication through our website or services may be available, via the internet, around the world. We cannot prevent the use (or misuse) of such personal data by others.

Data Transfers

We may transfer your Personal Information to countries other than the one in which you live, which may have different data protection laws than those in the country in which you reside. When we transfer your Personal Information to other countries, we will protect that information as described in this Privacy Policy.

Security

We take reasonable and appropriate measures to protect your Personal Information from loss, misuse, unauthorized access, disclosure, alteration, and destruction, taking into account the risks involved in the processing and the nature of the Personal Information.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security. We implement and maintain reasonable technical and organizational measures designed to protect Personal Information that we process from accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access, or other forms of unauthorized processing. These measures may include, as appropriate, the use of firewalls, encryption, access controls, and other physical and electronic security measures.

We also limit access to your Personal Information to employees, contractors, and agents who have a need to know the information in order to perform their job functions and provide our Services to you. We ensure that these individuals are bound by confidentiality obligations and may be subject to disciplinary action, including termination and criminal prosecution, if they fail to meet these obligations.

If we become aware of a security breach that affects your Personal Information, we will notify you and take reasonable steps to mitigate the effects of the breach in accordance with applicable laws and regulations.

However, it is important for you to also take appropriate steps to protect your Personal Information. For example, you should never share your account password or credit card information with anyone and should use a unique and strong password for your Carbogatto account. Additionally, you should be cautious when providing Personal Information in public or unsecured locations, such as on social media or in public forums. If you believe that your account has been compromised, please contact us immediately.

Other Disclosures

We may also disclose your Personal Information:

• To respond to subpoenas, court orders, legal process, law enforcement requests, legal claims, or government inquiries;

• To investigate, prevent, or take action regarding suspected or actual illegal activities, fraud, threats to our property or safety, or violations of our Terms of Use or this Privacy Policy;

• To protect our rights, reputation, property, or that of our users, affiliates, or the public;

• To comply with applicable laws and regulations, or as otherwise required by law;

• In connection with a corporate transaction, such as a merger, sale, acquisition, divestiture, or consolidation, or if we go through a reorganization, bankruptcy, or liquidation; or

• With your consent or at your direction.

We may also share information that has been aggregated or de-identified so that it no longer identifies you for any lawful purpose, including for research and analytics, and to provide services to our partners.

Contact Us

If you have any questions or concerns regarding this Privacy Policy, please contact us

at privacy@carbogatto.com