Privacy Policy – CARE

1. Controller

2. General Information

We take data protection seriously. Personal data is processed in accordance with applicable data protection laws (GDPR).

This policy explains how data is processed when using the CARE platform.

3. Data Collected

3.1 Account Data

• name
• business email
• company affiliation

3.2 Usage Data

• user-provided content (e.g. agent descriptions)
• interactions within the platform
• timestamps

3.3 Technical Data

• IP address
• browser/device
• system logs

4. Purpose of Processing

Data is processed to:

• provide and operate the platform
• ensure system security
• process and display user input
• improve functionality

5. Legal Basis

Processing is based on:

• Art. 6(1)(b) GDPR (contract performance)
• Art. 6(1)(f) GDPR (legitimate interest)

6. Responsibility for Content

(1) Users are responsible for all data they submit.

(2) The Provider processes such data on behalf of the user.

(3) Users must ensure that submitted data complies with applicable laws.

7. Storage and Deletion

Data is stored only as long as necessary for service provision.

After termination, data will be deleted unless retention is legally required.

8. Data Sharing

Data is only shared:

• where necessary for service provision
• where legally required

No data is sold or used for marketing purposes.

9. Hosting and Processors

The platform is hosted by third-party providers.

Data processing agreements (Art. 28 GDPR) are in place.

As far as the customer processes Personally Identifiable Information (PII) with CARE, the provided Data Processing Agreement (DPA) applies.

10. Security

We implement appropriate technical and organizational measures to protect data.

11. Data Subject Rights

You have the right to:

• access
• rectification
• erasure
• restriction
• portability
• objection

12. Complaints

You may lodge a complaint with a supervisory authority.

13. Changes

We may update this Privacy Policy.