Privacy Policy

Carbon & Cost Consulting GmbH

Hoffmannstr. 18
32105 Bad Salzuflen
Deutschland

Geschäftsführer: Mehmet Ali Öztopcu

Telefon: +49 170 146 3311
E-Mail: contact@carbon-cost.com
Website: carbon-cost.com

Personal data is processed only to the extent necessary for the operation of this website, for communication with visitors and for processing business inquiries.

Processing takes place in accordance with the General Data Protection Regulation (GDPR) and supplementary national provisions. Data is transferred to third parties only where this is necessary for the purposes stated, where consent has been given or where a legal obligation exists.

When this website is accessed, technical data automatically transmitted by the browser may be processed. This may include:

• IP address
• date and time of access
• page accessed or resource requested
• browser information
• operating system and device information
• referrer information
• technical request and status information

This processing serves the secure, stable and functional operation of the website. The legal basis is Art. 6(1)(f) GDPR. The data is retained only as long as necessary for the respective purpose or as required by statutory provisions.

This website is provided on the infrastructure of an external provider. The provider processes the technical log data arising when the site is accessed exclusively for the purpose of providing and securing the website and acts in this respect as a processor on behalf of Carbon & Cost Consulting GmbH. The legal basis is Art. 6(1)(f) GDPR.

When contacting us by email at contact@carbon-cost.com, the information transmitted is processed. This may include name, company, email address, telephone number where provided, message content, project information and any other information provided voluntarily.

Processing takes place in order to handle and respond to the inquiry, for business communication and, where applicable, for the initiation of a business relationship. The legal basis is Art. 6(1)(b) GDPR where the inquiry relates to a contractual relationship or its initiation, and otherwise Art. 6(1)(f) GDPR.

The contact form on this website collects the following information:

• first name
• last name
• company
• business email address
• telephone — optional
• country — optional
• selected topic
• project or challenge description

This information is used exclusively to process and respond to the business inquiry submitted. The fields marked as mandatory are required because an inquiry cannot reasonably be processed without the necessary contact and project information. The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. The data is retained only as long as necessary for processing the inquiry and for any statutory retention obligations.

On submission, the information is transmitted to the backend infrastructure of this website, stored there in a database that is not publicly accessible, and forwarded as a notification to contact@carbon-cost.com. To protect against automated misuse, the IP address of the submitting device is stored and the number of submissions per IP address is limited. The legal basis for this is Art. 6(1)(f) GDPR.

One or more files (PDF, Excel, Word or PowerPoint document, CSV, JPG or PNG, up to 10 MB in total) may optionally be attached to the contact form. On submission, these files are transmitted to the backend infrastructure of this website and stored there in a storage area that is not publicly accessible. The notification to Carbon & Cost Consulting contains, for each file, a time-limited access link that is not publicly discoverable and is valid for 14 days.

The contents of transmitted files are used exclusively to process the inquiry and are retained only as long as necessary for this purpose or on the basis of statutory retention obligations. The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

This website contains links to external websites, including LinkedIn and costixx.com. Clicking such a link takes visitors to the respective external website, where the privacy rules of that provider apply. Carbon & Cost Consulting GmbH has no influence over their data processing.

This website does not use any analytics, advertising or tracking technologies and does not set any consent-requiring cookies. No profiling and no automated decision-making takes place.

Personal data may be processed by technical service providers where this is necessary for the operation of the website or the communications infrastructure. Such service providers are selected carefully and, where required, contractually engaged as processors. This applies in particular to the provider of the website and backend infrastructure through which the contact form, the database, the file storage and the sending of the notification email are provided.

Personal data is stored only as long as necessary for the respective processing purpose. Beyond that, data is stored where statutory retention obligations exist; in such cases processing is restricted accordingly.

Data subjects have, in particular, the following rights:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability, where applicable (Art. 20 GDPR)
• right to object, where applicable (Art. 21 GDPR)
• right to withdraw consent where processing is based on consent (Art. 7(3) GDPR)

The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent up to the point of withdrawal. Requests concerning these rights can be addressed to contact@carbon-cost.com.

Without prejudice to any other legal remedy, there is a right to lodge a complaint with a competent data protection supervisory authority, in particular in the Member State of residence, place of work or place of the alleged infringement.

Appropriate technical and organizational measures are taken to protect personal data against unintended or unlawful processing, loss or unauthorized access. These measures are adapted on an ongoing basis in line with technical developments.

This Privacy Policy describes the current functionality of the website. If further services are used in future, this Privacy Policy — and, where required, an appropriate consent mechanism — will be adapted before activation.