Privacy policy

1. Data controller

The controller of your personal data is Dotsphere s.r.o., Czech company ID (IČO) 19632983, with its registered office at Korunní 2569/108, Vinohrady, 101 00 Praha 10, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague (Městský soud v Praze), file no. C 388942 (“Carnado”, “we” or “us”). Contact e-mail: ahoj@carnado.eu. Full company details are available in our Legal notice.

2. What personal data we process

Carnado processes personal data only to the extent necessary to run the service:

• Contact form: name, e-mail address, phone number (if provided) and the content of your message — solely to reply to your enquiry.
• Technical data (logs): IP address, time of the request, browser type — for security and troubleshooting. Logs are deleted automatically after 30 days.
• Cookies: see section 4 below.

Simply searching on Carnado requires neither registration nor any personal data.

3. Legal basis for processing

• Performance of a contract / pre-contractual steps (Art. 6(1)(b) GDPR) — handling enquiries sent via the contact form.
• Legitimate interest (Art. 6(1)(f) GDPR) — keeping operational logs for security and troubleshooting.
• Consent (Art. 6(1)(a) GDPR) — analytics and marketing cookies, if you agree to them via the consent banner.

4. Cookies

Carnado uses strictly necessary technical cookies to make the website work (e.g. a form security token). We only use analytics cookies (traffic measurement) and marketing cookies (personalised advertising) with your explicit consent. You can withdraw your consent at any time in your browser settings or via the consent banner.

5. How long we keep data

Contact form submissions and e-mail correspondence are kept for as long as needed to deal with your enquiry, but no longer than 2 years after our last communication. Operational logs are deleted automatically after 30 days. On request, we will delete your data sooner (see section 7).

6. Sharing data with third parties

We do not sell or rent out personal data. Data may only be shared with trusted processors that run technical operations for us (hosting, e-mail infrastructure), exclusively under a data processing agreement and only to the extent needed to provide the service. All our processors comply with the GDPR.

7. Your rights

Under the GDPR you have the following rights:

• Right of access — you can ask for a copy of your data at any time.
• Right to rectification — we will correct inaccurate data.
• Right to erasure — the “right to be forgotten”; we will delete your data unless we are legally required to keep it.
• Right to restriction of processing — in certain cases you can ask us to suspend processing.
• Right to data portability — you will receive your data in a machine-readable format.
• Right to object — in particular to processing based on legitimate interest.
• Right to lodge a complaint — with the Czech data protection authority, the Office for Personal Data Protection (ÚOOÚ), www.uoou.cz.

Please send requests to ahoj@carnado.eu. We respond to requests within 30 days.

8. Changes to this policy

We may update this policy. We will inform you about material changes through a notice on the website or by e-mail if we are in contact. The date of the last update is always shown at the top of this document.