Privacy notice

Who processes your data

The controller is Carbon free s.r.o., registered office Tulipánova 1, 903 01 Senec, company ID (IČO): 55 262 741, registered in the Commercial Register of the Municipal Court Bratislava III, Section Sro, Insert No. 181235/B.

For anything about personal data, write to info@carbonfree.sk.

What data we hold and why

We get data from you when you fill in one of the forms on this website and, with your consent, when we measure visits.

• Contact form. Name, company, email, phone, the service you are interested in and your message. We need them to reply to you and prepare an offer. The legal basis is steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• ESG questionnaire. Name, email, company size, your answers and the resulting score. We use them only to evaluate the questionnaire and to email you the result with a certificate. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Registration for the ESG-LIVE conference. Name, email, company, job title, ticket type and an optional note. We need them to process the registration and organise the event. The legal basis is performance of a contract and steps before entering into it (Art. 6(1)(b) GDPR).
• Technical data. When you submit a form we also store your IP address and, for the contact form and the questionnaire, your browser type. They protect the forms against spam and abuse, which is our legitimate interest (Art. 6(1)(f) GDPR).
• Measuring visits. If you allow it in the cookie bar, Google Analytics records which pages you view, where you came from and which device and browser you use. It helps us improve the website. The legal basis is your consent (Art. 6(1)(a) GDPR).

You give us the data voluntarily. Without it we cannot reply to you, send you the result or register you.

We do not make automated decisions about you that would have legal effects.

Who we share data with

We do not sell data. It only reaches the suppliers without whom the website and our emails would not work:

• Brevo (France) sends our emails, for example the certificate from the ESG questionnaire.
• DigitalOcean runs the server the website is hosted on. The server is in Frankfurt am Main, Germany.
• The supplier who maintains the website for us.
• Google Analytics (Google Ireland Limited) measures visits if you have agreed to it. Google may also process this data in the USA.
• Google Fonts and jsDelivr. Fonts and one script are loaded from their servers, so they see your IP address when a page loads. Google is based in the USA.

How long we keep data

• We keep contact form enquiries and event registrations for no longer than 3 years after our last communication.
• We keep ESG questionnaire data until you withdraw your consent, and no longer than 3 years after you filled it in.
• Google Analytics keeps visit data for no longer than 14 months after your last visit.

After that we delete the data.

Cookies

We always use these cookies, because the website cannot work without them:

• carbon-free-session keeps your session so that the forms work. It expires after 2 hours.
• XSRF-TOKEN protects the forms against abuse. It expires after 2 hours.
• locale remembers the language you chose. It lasts 400 days.

If you choose “I agree” in the cookie bar, Google Analytics stores the cookies _ga and _ga_2P39PY1GD6. They tell visitors and their visits apart and last 2 years. If you choose “Only necessary”, they are not stored.

We remember your choice in your browser so that we do not ask again. You can change it at any time:

Change cookie settings

Your rights

You can ask us to:

• show you what data we hold about you and give you a copy,
• correct data that is wrong,
• delete the data or restrict its processing,
• hand the data over to you or to another controller in a common format.

You can also object to processing we do on the basis of legitimate interest, and withdraw your consent at any time if you gave it. Just write to info@carbonfree.sk. We reply within one month.

If you think we are not handling your data properly, you can lodge a complaint with the Slovak supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky, Galvaniho 7/B, 821 04 Bratislava, dataprotection.gov.sk.

Changes

If the way we work with data changes, we will update this page.

Effective from 11 October 2026.