PRIVACY POLICY FOR THE CARBOOK.PRO WEBSITE
Last updated: 27 July 2026
This Privacy Policy (the „Policy”) explains how Carbook Soft LLC („Carbook Soft”, „we”, „us” or „our”) collects and processes the personal data of visitors to the public website carbook.pro (the „Website”).
This Policy applies exclusively to the public website carbook.pro and our related marketing activities. If you are an authorised user of the CARBOOK CRM/ERP cloud platform, the processing of your data within the Platform is governed by a separate document — the Privacy Policy for the CARBOOK CRM/ERP Platform.
1. DATA CONTROLLER AND CONTACT INFORMATION
For the processing activities described in this Policy, Carbook Soft acts as the Data Controller under the General Data Protection Regulation (GDPR) and the Law of Ukraine „On Personal Data Protection”.
- Full legal name: Carbook Soft LLC
- Registered address: 19 Kharkivske Shose, office 2005, Kyiv, 02090, Ukraine
- Company registration number (EDRPOU): 44322813
- Privacy contact email: [email protected]
2. WHAT DATA WE COLLECT ON THE WEBSITE
2.1 Data you provide voluntarily via the contact form
The Website contains a contact form which you complete at your own discretion. Through it we receive the following data:
- Name — so that our manager can address you personally;
- Phone number — the primary channel for a call back;
- Company name (auto service centre) — so that we can prepare a demonstration relevant to your type of business;
- Comment — free-form text describing your enquiry or situation.
We use this data solely so that a CARBOOK manager can contact you, deliver a product presentation, or help resolve an issue related to the use of the CARBOOK software.
Please do not include unnecessary personal data in the „Comment” field — in particular third-party data, health data, payment details or passwords. A general description of your enquiry is sufficient for us to process it.
2.2 Data collected automatically (cookies)
When you visit the Website, some data is collected automatically through cookies and similar technologies: technical device and browser information, anonymised page-view statistics, the source of your visit, and advertising campaign identifiers.
A detailed list of all cookies, their purpose and storage periods is provided in a separate document — the Cookie Policy.
3. RECORD OF PROCESSING ACTIVITIES (ROPA)
| Purpose of processing | Categories of personal data | Legal basis (GDPR) | Retention period |
|---|---|---|---|
| Handling enquiries from the contact form (call back, product presentation, consultation) | Name, phone number, company name, comment text, date and time of the enquiry. | Art. 6(1)(b) GDPR — steps taken at the request of the data subject prior to entering into a contract; Art. 6(1)(f) — legitimate interest in communicating with a prospective client. | Up to 24 months from the last communication, after which the data is deleted or anonymised. |
| Technical operation and security of the Website (protection against spam, bots and attacks, storing language preferences) | IP address, browser and device type, essential technical cookies. | Art. 6(1)(f) GDPR — legitimate interest in ensuring the uninterrupted and secure operation of the Website. | Duration of the session, or up to 30 days for security logs. |
| Traffic analytics (understanding how users interact with the Website) | Anonymised user identifiers, pages viewed, visit duration, referral source. | Art. 6(1)(a) GDPR — your consent, given via the cookie consent banner. | As stated in the Cookie Policy (up to 24 months). |
| Marketing and advertising (measuring advertising performance, remarketing) | Advertising identifiers, click and conversion data, on-site behaviour. | Art. 6(1)(a) GDPR — your consent, given via the cookie consent banner. | As stated in the Cookie Policy (up to 24 months). |
4. COOKIES AND CONSENT MANAGEMENT
Analytics and marketing cookies are set only after we obtain your consent. On your first visit to the Website you will see a consent banner where you can accept, reject, or configure individual cookie categories.
You may change or withdraw your consent at any time using the cookie settings button on the Website. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
The full list of cookies is available in the Cookie Policy.
5. DATA RECIPIENTS AND THIRD PARTIES
We do not sell your personal data. Access to data may be granted only to vetted service providers acting on our instructions:
- Hosting and infrastructure provider — storage and technical operation of the Website;
- Cloudflare — protection against attacks, faster loading, filtering of malicious traffic;
- Google (Analytics, Ads, Tag Manager) — analytics and advertising services (subject to consent);
- Meta Platforms (Facebook Pixel) — measuring advertising performance (subject to consent);
- Binotel — telephony service for handling calls from the Website;
- Carbook Soft internal staff — sales and support managers who handle your enquiry.
We may also disclose data at the request of competent public authorities where this is expressly required by law.
6. INTERNATIONAL DATA TRANSFERS
Some of our providers (in particular Google, Meta and Cloudflare) may process data outside Ukraine and the EU/EEA. In such cases, transfers are carried out on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission, or other safeguards provided for by law.
7. DATA RETENTION PERIODS
We retain personal data no longer than necessary for the purposes for which it was collected. Data from the contact form is retained for up to 24 months from the last communication with you. If an enquiry does not lead to cooperation, the data is deleted earlier — once the request has been dealt with.
8. SECURITY MEASURES
We apply technical and organisational measures to protect your data, including: encrypted connections (HTTPS/TLS), access to enquiries restricted on a least-privilege basis, protection of the Website against spam and automated attacks, regular software updates and security monitoring.
9. YOUR RIGHTS AS A DATA SUBJECT
Under the GDPR and Ukrainian law you have the right to:
- access your personal data and obtain a copy of it;
- request rectification of inaccurate or incomplete data;
- request erasure of your data (the „right to be forgotten”);
- restrict processing or object to it;
- withdraw previously given consent at any time;
- data portability to another controller;
- lodge a complaint with a supervisory authority.
To exercise any of these rights, write to us at [email protected]. We respond to requests within 30 calendar days.
10. CHANGES TO THIS POLICY
We may update this Policy from time to time. The current version is always available on this page together with the date of the last update. We will notify you on the Website of any material changes.
11. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
If you believe that the processing of your data infringes the law, you have the right to lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or with the data protection supervisory authority in your country of residence within the EU/EEA.