DATA PROTECTION NOTICE
Last updated: October 2022
1. Overview
This document outlines the data protection principles applied by Carivus AI (“we,” “us,” or “our”) in connection with our products, services, and related solutions (the “Solutions”) and our platform (the “Platform”). Protecting your privacy and safeguarding personal information is a core priority when delivering our Solutions and operating the Platform.
Our Solutions and Platform may contain links to third-party websites or external services. Carivus AI does not control and is not responsible for the privacy practices of those third parties. We recommend reviewing their privacy policies before engaging with any external services.
All information collected in connection with our Solutions is treated as confidential. We apply appropriate technical, organizational, and security measures to protect Personal Data (as defined below) against unauthorized access, accidental loss, misuse, destruction, alteration, or disclosure.
When interacting with our Platform, you may be asked to provide personal details such as your name, email address, telephone number, date of birth, or other identifying information. This information may be used to verify identity, manage user accounts, provide technical support, and comply with contractual or legal obligations. With your consent, we may also send important service updates or promotional communications via email, SMS, or similar channels. You can manage communication preferences or opt out at any time.
2. Platform Use; Visitors and Users
2.1 General Information
This section explains how personal data is collected from different groups, including Platform visitors (“Visitors”), registered users (“Users”), and business partners (collectively, “Partners”). Personal Data may include IP addresses, names, contact details, and information relating to your relationship with Carivus AI, as defined under applicable data protection laws.
2.2 Data Collection and Use
By accessing the Platform, you consent to the collection and processing of your Personal Data as described in this notice. If you do not agree, you should discontinue use of the Platform. We may collect information through page interactions, IP addresses, cookies, and data submitted through forms or registration processes.
2.3 Purpose of Processing Personal Data
Personal Data is processed to operate, analyze, improve, and personalize the Platform and our Solutions. This includes service delivery, communication, customer support, contractual obligations, and collaboration with partners. All processing activities are carried out based on appropriate legal grounds or user consent where required.
The following table outlines the purposes and legal bases for processing Personal Data:
| Account registration and setup | Your consent; performance of the Solutions or contractual necessity |
| Providing and operating the Solutions | Performance of the Solutions or contractual necessity |
| Service updates and system notifications | Performance of the Solutions or contractual necessity |
| Responding to inquiries and providing support | Legitimate interests or performance of the Solutions |
| Personalized Solutions, advertising, and marketing | Legitimate interests or your consent |
| Improving existing services and developing new Solutions | Consent and legitimate interests |
| Distributing promotional and marketing materials | Your consent |
| Measuring and analyzing marketing campaign performance | Legitimate interests or consent |
| Carrying out operational and support activities | Legitimate interests or performance of the Solutions |
| Analytics, including statistical evaluation | Legitimate interests |
| Protecting rights, interests, and assets | Legitimate interests or legal obligations |
2.4. Sharing of Personal Data
We may share information with service providers, Partners, and contractors where necessary. For Visitors and Users located within the European Data Region, all processing activities comply with the GDPR and applicable European data protection regulations.
3. Partners
3.1. Overview
In order to deliver our Solutions and collaborate with Partners, Carivus AI may collect and process specific categories of data. Partners remain responsible for their own data, and access may be granted through secure systems where required.
3.2. Processing of Personal Data
Processing is based on Partner consent or legitimate business interests. Aggregated and anonymized data sets may be created for quality improvement and development purposes.
3.3. Data Controller / Data Processor
Depending on the nature of the data involved, Carivus AI may act as:
- Visitor/User Data: Data Controller
- Partner Data: Data Processor
- All data is securely hosted in accordance with industry-leading security standards. Physical, technical, and organizational safeguards are implemented to protect information.
3.4. External Data Protection
If the Solutions involve processing Personal Data on an external platform:
- We act as a Data Processor
- Processing follows documented instructions from the external party
- Appropriate security measures are applied
- Data breaches are reported where required
- No subcontracting occurs without prior authorization
- Personal Data is not processed outside the European Economic Area without approval
- Electronic marketing communications include consent and opt-out mechanisms
4. Security
Carivus AI applies administrative, organizational, and technical safeguards to protect Personal Data against unauthorized access, disclosure, alteration, loss, misuse, or damage. When data is shared with third parties, contractual obligations ensure equivalent levels of data protection in accordance with this Notice.
If any interaction with the Platform is suspected to be compromised, Visitors, Users, or Partners should notify us immediately. While robust safeguards are in place, absolute security cannot be guaranteed, and users acknowledge inherent cybersecurity risks.
5. Cookies
Please refer to our Cookie Policy for detailed information regarding the types of cookies and tracking technologies used, their purpose, and how to manage preferences.
6. External Website Links
The Platform may contain links to third-party websites beyond our control. Carivus AI is not responsible for the content or privacy practices of external sites. Users are encouraged to review applicable privacy policies before sharing Personal Data.
7. Data Retention and Deletion
Personal Data is retained only for as long as necessary to fulfill its intended purpose. Visitors and Users with active accounts are responsible for maintaining up-to-date data. Upon termination of an account or partnership, related Personal Data is deleted in accordance with applicable laws and internal retention policies.
Withdrawal of consent may limit access to certain Solutions without giving rise to claims or liabilities.
8. Your Rights
Users have specific rights regarding their Personal Data:
8.1. Right of Access
- Confirm whether Personal Data is being processed
- Access Personal Data and related information
- Obtain details about processing purposes, categories, recipients, retention periods, rights, and profiling activities
8.2. Right to Rectification
- Correct inaccurate Personal Data
- Complete incomplete Personal Data
8.3. Right to Erasure
- Request deletion of Personal Data under applicable legal grounds
8.4. Right to Restrict Processing
- Request limitation of processing in specific circumstances
8.5. Right to Data Portability
- Receive Personal Data in a structured, machine-readable format
- Transmit Personal Data to another controller
8.6. Right to Object
- Object to processing based on legitimate interests or direct marketing
- Processing will cease unless overriding legal grounds apply
8.7. Right to Withdraw Consent
- Withdraw consent for Personal Data processing at any time
9. Advertising and Marketing Materials
Consent is obtained before using Personal Data for advertising and marketing communications. Consent may be withdrawn at any time by submitting a written request to the email address provided.
10. Acceptance of this Notice
By using the Platform and/or Solutions, Visitors, Users, and Partners acknowledge that they have read and accepted this Notice. If you disagree, you should discontinue use of the Platform. Carivus AI reserves the right to update this Notice, and continued use following changes constitutes acceptance.
11. Legal Requirement to Disclose Personal Data
Personal Data may be disclosed without prior consent where reasonably necessary to establish identity, contact individuals, or initiate legal proceedings in cases involving suspected violations of rights or property, or where required by law.
12. Data Protection Officer
For privacy-related questions, a designated Data Protection Officer may be contacted at