Privacy policy

Data controller

The controller of personal data is the owner of the CaroIT website.

For data protection matters, contact us through the form on this website.

What data we collect

From the contact form: full name, work email, company name and the selected enquiry topic.

From correspondence: data you share in replies after submitting the form.

Technical data: IP address and browser data that hosting servers receive on every page view.

Purposes and legal bases

• Answering your enquiry and pre-contract steps – Art. 6(1)(b) GDPR.
• Contacting a company representative, preventing abuse and pursuing claims – our legitimate interest, Art. 6(1)(f) GDPR.

Retention

We keep enquiry data until talks end. If no contract is signed, we delete it 12 months after the last contact. Longer only when the law or the protection of claims requires it.

Recipients

• Website hosting provider.
• Email provider.
• Companies providing IT services to us under data processing agreements.

We do not sell personal data.

Transfers outside the EEA

We do not transfer data outside the European Economic Area. If a hosting or email provider processes data outside the EEA, such transfers will rely on a European Commission adequacy decision or standard contractual clauses.

Your rights

• access to your data and a copy of it,
• rectification,
• erasure,
• restriction of processing,
• data portability,
• objection to processing based on legitimate interest,
• a complaint to the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

Cookies

The site stores only essential data in your browser. Analytics and marketing cookies run only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time under “Cookie settings”. See the cookie notice for details.

Voluntary data and automated decisions

Providing data is voluntary. Without your name, email and company name we cannot answer the enquiry.

We do not make decisions based solely on automated processing, including profiling.