1. Introduction

This Privacy Policy explains how we collect, process, and protect personal data when you visit or interact with our website at https://carboncaas.com. We comply with the General Data Protection Regulation (GDPR) and all applicable EU and Luxembourg data‑protection laws.

2. Data Controller

CarbonCaaS SARL‑S
44, Rue de la Libération
L‑5969 Itzig
Email: info@carboncaas.com
Phone: +41 79 676 35 78

3. Personal Data We Collect

3.1 Comments

When visitors leave comments on our website, we collect the data entered in the comment form, the visitor’s IP address, and the browser user‑agent string to support spam detection.

No data is transmitted to external avatar or profile‑image services.

3.2 Media Uploads

Registered users who upload images should avoid uploading photos containing EXIF GPS location data. Visitors may download images and extract embedded location information.

3.3 Cookies

We use cookies to improve usability and functionality:

• Comment cookies: If you leave a comment, your name, email address, and website may be stored in cookies for one year.

• Login cookies: When you log in, temporary cookies check whether your browser accepts cookies. Additional cookies store login details and display preferences.

  • Login cookies expire after two days.

  • Display‑option cookies expire after one year.

  • Selecting “Remember me” keeps your login active for two weeks.

• Editing cookies: When editing or publishing an article, a cookie storing the post ID is saved for one day.

3.4 Embedded Content

Articles may contain embedded content (e.g., videos, images, articles). Embedded content behaves as if you visited the external website directly. These websites may collect data, use cookies, embed third‑party tracking, and monitor your interaction with the embedded content.

4. Purpose and Legal Basis of Processing

We process personal data for the following purposes:

• Providing website functionality

• Detecting and preventing spam

• Managing user accounts

• Ensuring security and integrity of the website

Legal bases include Art. 6(1)(a) (consent), Art. 6(1)(b) (performance of a contract), and Art. 6(1)(f) (legitimate interests such as security and fraud prevention).

5. Data Sharing

If you request a password reset, your IP address will be included in the reset email. Visitor comments may be checked by automated spam‑detection services.

We do not sell or share personal data with third parties unless required by law.

6. Data Retention

• Comments and associated metadata are stored indefinitely to recognize and approve follow‑up comments automatically.

• For registered users, we store the personal information provided in their profiles. Users may view, edit, or delete their personal data at any time (except the username). Website administrators may also access and edit this information.

7. Your Rights Under GDPR

You have the following rights:

• Right of access to your personal data

• Right to rectification of inaccurate data

• Right to erasure (“right to be forgotten”)

• Right to data portability

• Right to restrict processing

• Right to object to processing

• Right to withdraw consent at any time

To exercise these rights, contact us at info@carboncaas.com.

Please note: We may retain certain data where required for administrative, legal, or security purposes.

8. International Data Transfers

If data is processed by external services outside the EU/EEA, we ensure appropriate safeguards such as Standard Contractual Clauses or equivalent protection mechanisms.

9. Security Measures

We implement technical and organizational measures to protect personal data from unauthorized access, loss, misuse, or alteration.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. The latest version will always be available on our website.