Privacy Policy

For visitors and registered users of the CarboHyde website (https://www.carbohyde.com)

Introduction

During the operation of the website, the service provider / data controller processes the data of persons registered on the website in order to provide appropriate services to them.

The service provider intends to fully comply with the legal requirements regarding the processing of personal data, especially the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council.

This Privacy Policy has been prepared based on Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, taking into account Act CXII of 2011 on the right to informational self-determination and freedom of information.

Name of the service provider / data controller:

Contact details of the data controller:

Definitions

• GDPR (General Data Protection Regulation) is the European Union’s new Data Protection Regulation;
• Data processing: any operation or set of operations performed on personal data or data files, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
• Data processor: a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the data controller;
• Personal data: any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, number, location data, online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
• Data controller: the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data;
• Consent of the data subject: any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she signifies agreement to the processing of personal data relating to him or her;
• Data breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed;
• Recipient: a natural or legal person, public authority, agency or another body to which the personal data are disclosed, whether a third party or not;
• Third party: a natural or legal person, public authority, agency or body other than the data subject, data controller, data processor and persons authorized to process the personal data under the direct authority of the data controller or processor.

Principles of Data Processing

The data controller declares that it processes personal data in accordance with this privacy policy and complies with the applicable legal provisions, with particular regard to the following:

Personal data must be processed lawfully, fairly and in a transparent manner in relation to the data subject.

Personal data may only be collected for specified, explicit and legitimate purposes.

The purpose of data processing must be adequate, relevant and limited to what is necessary.

Personal data must be accurate and kept up to date. Inaccurate personal data must be erased without delay.

Personal data must be stored in a form which permits identification of data subjects only for as long as necessary. Longer storage is permitted only for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.

Personal data must be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

The principles of data protection apply to all information concerning an identified or identifiable natural person.

Important Information on Data Processing

The purpose of data processing is to enable the service provider / data controller to provide additional services to persons registered on the website during the operation of the website.

The legal basis for data processing is the consent of the data subject.

The scope of persons affected by data processing includes registered users of the website.

Duration of data processing and deletion of data: the duration of data processing always depends on the specific user purpose, but data must be deleted immediately once the original purpose has been fulfilled. The data subject may withdraw consent at any time by sending an email to the contact email address. If there is no legal obstacle to deletion, the data will be deleted.

Persons entitled to access the data are the data controller and its employees.

The data subject may request access to personal data concerning him or her, rectification, erasure or restriction of processing, and may object to such processing, as well as exercise the right to data portability.

The data subject may withdraw consent to data processing at any time, but this does not affect the lawfulness of processing based on consent before its withdrawal.

The data subject has the right to lodge a complaint with the supervisory authority.

If the data subject wishes to use the benefits of registration and the related services of the website, providing the requested personal data is necessary. The data subject is not obliged to provide personal data; however, some functions of the website cannot be used without registration.

The data subject has the right to request that inaccurate personal data relating to him or her be corrected or completed without undue delay.

The data subject also has the right to request the deletion of inaccurate personal data without undue delay where there is no other legal basis for processing.

Modification or deletion of personal data may be initiated via email, phone or postal mail using the contact details provided above.

Registration on the Website

The purpose of data processing is to provide additional services and maintain contact.

The legal basis for registration-related data processing is your consent.

The scope of persons affected by data processing includes registered users of the website.

Duration of data processing: until consent is withdrawn. You may withdraw your consent at any time by sending an email to the contact email address.

Data deletion takes place upon withdrawal of consent.

Persons entitled to access the data are the data controller and its employees.

Method of data storage: electronic.

Modification or deletion of personal data may be requested via email, phone or postal mail using the contact details provided above.

Providing personal data is necessary for identification within databases and for communication. Accurate company name and address are required for invoicing, which is a legal obligation.