> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.carbone.io/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# What's CarboneIO EU GDPR compliance status ?


## GDPR (General Data Protection Regulation)

Carbone is GDPR-compliant, and strictly enforces the regulation as to protect the user data we store. According to GDPR, you, as the data subject, have the right to access, modify and delete your personal data, as well as the right to ask for the portability of your data and the right to object to the processing of your personal data.

### Types of Data Collected

In order to provide the Services, Carbone is collecting the below data from their users. This section is also listing the security measures used to protect the data as well as the purpose of the collection.

* **Email address**: Used only for authentication
* **Password**: Encrypted and used only for authentication
* **First name** and **last name**
* **Usage Data**: Carbone Render API usage
* **IP address**: for metrics purpose, it is deleted automatically after 7 days
* **Payment details** and **invoicing information**: Address, ZIP/Postal code, City, Country and Payment methods are stored and managed exclusively by **Stripe**. Carbone does not store any bank details.

### Use of Your Personal Data

* To identify users and provide support
* To provide our Service
* To notify users about new product or service updates
* To provide analysis to improve the service
* To monitor, prevent and detect technical issues

### Individuals rights

* **The right to be informed**: we informe our customers of what we do with their data
* **The right of data access**: from Carbone Account our customers can access to their data
* **The right to rectification**: from Carbone Account our customers can update their data
* **The right to erasure**: from Carbone Account our customers can delete their account and data
* **The right to restrict processing**: we don't process the data of our customers.
* **The right of data portability**: our customers can contact us (privacy@carbone.io) anytime they wish to get an export of their data
* **The right to object**: our customers can contact us (privacy@carbone.io) and we will handle their request.
* **The right not to be subject to automated decision-making and profiling**: We don't do that.

Carbone replies to all request under 1 week (3 weeks maximum).

### Privacy

Read our [Privacy Policy](https://carbone.io/company/privacy-policy.html) for more details.

### Cookies

Read our [Cookies Policy](https://carbone.io/company/cookies-policy.html) for more details.

### Children's Privacy

Our Service does not address anyone under the age of 18, due to the nature of the service provided (business-to-business). We do not knowingly collect personally identifiable information from anyone under the age of 18.

## Data Processing Agreement

If your company needs to ensure it is GDPR-compliant, it also needs to ensure its providers (ie. Carbone) are also GDPR compliant. The list of our providers (ie. Data Processors) is available, and kept up to date, in our Data Processing Agreement (DPA). Contact us (privacy@carbone.io) to get the DPA.

## Data protection Officers

**David Grelaud**
Mail: privacy@carbone.io
Address: 130 la Sauvagère, 85170, Bellevigny, France