Privacy Policy
Last updated: 9 Oct 2026
1. Data Controller
The data controller for personal data collected via the carpecarbon.com website is CarpeCarbon S.r.l., VAT No. 12733480011, registered office at Via Oropa 137 10153 Torino.
For any privacy-related enquiries, please write to info@carpecarbon.com.
2. Personal Data Collected
The website collects personal data only in the following cases.
- Data provided voluntarily. When you complete the contact form, you provide us with your name, email address, and the content of your message, plus any other fields you choose to fill in.
- Browsing data. The systems managing the website automatically acquire certain data, such as IP address, browser type, operating system, pages visited, and time of request. These are necessary for the website’s operation and security.
- Cookies. See section 7.
We do not request data belonging to special categories (e.g., health, political opinions) and we ask you not to include them in the form.
3. Purposes and Legal Bases
| Purpose | Legal Basis (GDPR) |
|---|---|
| To respond to requests sent via the contact form | Performance of pre-contractual measures requested by the data subject and legitimate interest in providing a response (Art. 6.1 lit. b and f) |
| Website operation and security, abuse prevention | Legitimate interest of the controller (Art. 6.1 lit. f) |
| Fulfilment of legal obligations | Legal obligation (Art. 6.1 lit. c) |
| Cookies and non-technical tools, if present | Consent (Art. 6.1 lit. a), revocable at any time |
Contact form data is not used to send newsletters or promotional communications, unless you provide separate consent.
4. Processing Methods and Retention
Data is processed using IT tools and with appropriate security measures to protect it from unauthorised access, loss, or unlawful use. Only persons authorised by the controller may access it.
- Contact form messages: retained for the time necessary to respond and for 12 months after the last contact, unless a contractual relationship is initiated or there is a need to assert a right.
- Browsing data and logs: retained for 12 months.
- Cookies: according to the duration indicated in section 7.
At the end of these periods, data is deleted or anonymised.
5. Recipients of Data
Data is not sold or disseminated. It may be communicated to entities that provide us with services necessary for the website’s operation, acting as data processors:
- the website hosting provider: register.it;
- the email service provider that receives messages from the form: register.it.
Data may also be communicated to public authorities, when required by law.
6. Transfer of Data Outside the EU
Data is processed within the European Economic Area and is not transferred to third countries.
7. Cookies and Tracking Technologies
The website uses only technical cookies and does not use analytics or advertising tools.
- Only technical cookies: the website exclusively uses technical cookies, which are necessary for its operation (e.g., for security or to remember session preferences). They do not require consent and are not used to profile visitors.
- No tracking: the website does not use profiling, analytics, or behavioural advertising cookies. If we introduce different tools in the future, we will update this policy and ask for your consent before activating them.
You can also block or delete cookies from your browser settings; in this case, some parts of the website may not function correctly.
8. Data Subject Rights
Under the GDPR, you have the right to:
- access your data and obtain a copy;
- request the rectification of inaccurate data or the integration of incomplete data;
- request the erasure of data, in the cases provided for;
- request restriction of processing;
- object to processing based on legitimate interest;
- receive data in a structured, commonly used format (portability), where applicable;
- withdraw consent at any time, without affecting the lawfulness of processing already carried out.
To exercise these rights, please write to info@carpecarbon.com. We usually respond within one month of the request. We may ask you to verify your identity before proceeding with the request.
9. Complaints, California Residents, and Amendments
Complaints. If you believe that the processing violates the GDPR, you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or the authority in your country of residence.
California Residents. We do not sell or share personal data for behavioural advertising. If you are a California resident, you can still write to us at the contact details in section 1 to request access to or deletion of your data.
Amendments. We may update this policy. The current version is always the one published on this page, with the last updated date at the top.