This policy explains what personal data CarlHost collects when you use our website and services, why we collect it and what rights you have. We process personal data in line with the EU General Data Protection Regulation (GDPR).
1. Data controller
The data controller is CarlHost. For any privacy question or request you can write to privacy@carlhost.com.
2. Data we collect
- Account and contact data: name, email address and any information you send us when you request or buy a service.
- Billing data: the information needed to issue invoices and process payments. Card data is handled directly by our payment providers and never stored on our servers.
- Technical data: IP addresses, access logs and usage data generated when you use our website and services.
- Support data: the content of the messages you send to our support team.
3. Why we use your data
- To provide, manage and bill the services you order (performance of a contract).
- To meet our legal obligations, such as tax and accounting rules (legal obligation).
- To protect our network, prevent abuse and fraud, and keep our services secure (legitimate interest).
- To answer your requests and provide support (performance of a contract or pre-contractual steps).
4. Who we share data with
We share personal data only with providers who help us run the service, such as our datacenter partner in the Netherlands, payment providers, email providers and accounting services. Each of them processes data only on our instructions or under their own legal obligations. We do not sell personal data.
We may disclose data to public authorities when required by law.
5. Where your data is stored
Our infrastructure is located in the European Union, in the SkyLink datacenter in the Netherlands. If a provider transfers data outside the European Economic Area, we make sure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses.
6. How long we keep data
- Account and service data: for as long as you are a customer, and afterwards for the time needed to handle any open matters.
- Billing data: for the period required by tax and accounting law.
- Technical logs: for a limited period needed for security and abuse prevention.
7. Your rights
You have the right to access your data, correct it, delete it, restrict or object to its processing, and receive it in a portable format. Where processing is based on consent, you can withdraw it at any time. To exercise your rights, write to privacy@carlhost.com.
You also have the right to lodge a complaint with the data protection authority of the EU country where you live or work.
8. Security
We use technical and organisational measures to protect personal data against loss, misuse and unauthorised access.
9. Changes to this policy
We may update this policy from time to time. The date at the top of the page shows when it was last changed.