Privacy Policy

Cartivly GmbH respects and protects your privacy. Below is detailed information on how we process your personal data.

This Privacy Policy describes the methods of processing data provided or collected through our digital platforms, which give visitors access to our website and allow them to use our services. This Privacy Policy is prepared in accordance with the EU General Data Protection Regulation (GDPR) and the provisions of local legislation.

Cartivly GmbH is the owner of the website and the controller of personal data. This Privacy Policy applies to the following categories of individuals:

buyers,
potential buyers,
users of our website,
our suppliers and business partners.

I. General Information About Personal Data Processing

We process personal data only for predefined and lawful purposes, using appropriate legal bases. The purposes and legal bases for each group of individuals are described below.

We store personal data only for the period necessary to fulfill the purpose for which the data was collected. If processing is based on your consent, we continue processing until the consent is withdrawn. Storage periods for specific purposes are described below.

How do we collect your personal data?

We collect the data you provide when you contact us to receive products, services, or information; when you visit our website; participate in public forums or other activities on our digital tools; respond to surveys; or otherwise communicate with us. We also collect data using technologies such as cookies. For more information about cookies, please read our Cookie Policy.

II. Purposes of Processing Your Personal Data

We process your personal data for different purposes depending on your relationship with us. The purposes and storage periods are described in detail in the tables below.

When acting as a buyer:

We process your name, delivery address, company details (if applicable), VAT number (if applicable), email address, encrypted password, phone number, and country of residence for the purpose of completing purchases and communicating with you. Legal basis: Contract. Storage: 5 years after order completion.

We process your email and name for sending newsletters and personalized emails based on profiling, depending on your consent. Storage: Until consent is withdrawn.

We process aggregated non-identifiable data for statistical analysis to optimize operations. Legal basis: Legitimate interest. Storage: 1 year.

When acting as a website visitor or potential buyer:

We process your email, name, and profile information for newsletters, personalized emails, and marketing communications (based on consent). We process your contact information for communication based on your inquiry (legitimate interest). Storage: 3 months after communication ends.

We process aggregated non-identifiable data for analytics (legitimate interest). Storage: 1 year.

We process your IP address to ensure website security (legitimate interest). Storage: 1 year.

III. Transfer of Personal Data

We do not transfer your personal data to third parties except in the following cases:

Service providers acting on our behalf, such as customer support, order delivery, and email services. These companies are prohibited from using your data for any purpose other than those required by us or by law.
Sharing data within our company or with third parties when necessary to protect our rights, ensure customer safety, or comply with legal requirements. This includes IT and financial consultants, external legal advisors, etc.

All third parties receiving your data must protect it under a binding contract, and they are not allowed to use it for any purpose outside the agreed scope.

IV. Security, Integrity and Storage of Data

Protecting the security, integrity, and confidentiality of your data is extremely important to us. We implement technical, organizational, and physical security measures to protect your data from unauthorized access, disclosure, use, or alteration.

These measures include:

regular updates of software, hardware, and applications;
employee training;
monitoring and controlling third-party processors;
appropriate protection of business premises.

While we strive to use industry-standard protections, no security measure is perfect or impenetrable. We appreciate your understanding.

V. Your Rights

You have several rights regarding your personal data. To exercise them, contact us in writing.

Please note that we may not be able to provide certain products or services if you do not allow us to collect your personal data. For example, we cannot fulfill an order without a delivery address.

You can exercise your rights by writing to: Cartivly GmbH, Kronstadter Str. 4, 81677 München, Germany (marked “personal data protection”), or email support@cartivly.com with the subject “personal data protection”. We will respond within one month.

Your rights include:
- Access to data
- Correction of data
- Restriction of processing
- Deletion of data
- Data extraction (portability)
- Withdrawal of consent
- Objection to processing (especially for marketing or profiling)

We may request additional data to verify your identity before fulfilling your request.

VI. Changes to the Privacy Policy

We may update this Privacy Policy from time to time to reflect new technologies, industry practices, or legal requirements. The latest version will always be published on our website. If legally required, we will obtain your consent before applying changes.

VII. Comments and Questions

If you have any comments or questions regarding this Privacy Policy, please contact us at:

Cartivly GmbH, Kronstadter Str. 4, 81677 München, Germany
support@cartivly.com

Registration authority: District Court – München
Share capital: EUR 7500
IBAN: DE56 2900 0005 2694 428
VAT ID: DE447504293
Company registration number: DE447504293