Privacy Policy

REDIGO CARBON sp. z o.o. is the controller of personal data of individuals using the redigocarbon.com website (the „Website”) and the Redigo Carbon platform (the „Platform”). Data is processed in accordance with the GDPR and the Polish Personal Data Protection Act of 10 May 2018.

REDIGO CARBON sp. z o.o., registered office: ul. Marszałkowska 58, 00-545 Warsaw, Poland. KRS 0000990700, NIP 7011104497, REGON 523043480.

Contact: contact@redigocarbon.com or by mail to the registered office.

Personal data is processed for the following purposes:

• conclusion and performance of service agreements (Art. 6(1)(b) GDPR);
• fulfilment of legal obligations (Art. 6(1)(c) GDPR);
• establishing and defending legal claims (Art. 6(1)(f) GDPR);
• marketing of REDIGO CARBON services, based on consent (Art. 6(1)(a) GDPR);
• notifying users of changes in the Website or Platform (Art. 6(1)(f) GDPR);
• communication with users (Art. 6(1)(f) GDPR);
• usage statistics (Art. 6(1)(a) and (f) GDPR).

Providing personal data is voluntary but necessary to achieve the purposes above. Consent may be withdrawn at any time without affecting prior processing.

REDIGO CARBON does not transfer personal data to third parties for their own commercial purposes, including marketing of their products or services.

We rely on sub-processors (hosting, computing, auditing, accounting, HR, legal and advisory providers) who process data solely under written data processing agreements and in line with REDIGO CARBON security standards.

Under Polish law, in specific cases (e.g. a court order), REDIGO CARBON may be required to disclose personal data to competent authorities. Any such disclosure is limited to the scope of the order and — where legally possible — preceded by notice to the data subject.

Detailed rules on cookies are set out in our Cookie Policy. Cookies are classified as strictly necessary, analytical, functional, or advertising.

We apply appropriate technical and organisational safeguards: secure authentication, hashed credentials, regular backups and software updates. We recommend enabling two-factor authentication.

REDIGO CARBON does not profile personal data or use automated decision-making. Where the Platform uses AI, personal data is removed or anonymised beforehand.

Data is processed for the duration of the customer agreement plus 3 full calendar years, unless otherwise agreed. Cookies are processed until consent is withdrawn. The period may be extended until claims become time-barred.

Data is processed within the European Economic Area. Any transfer outside the EEA takes place only under Standard Contractual Clauses or an adequacy decision of the European Commission.

The services are intended for corporate customers and individuals aged 16 and above. We do not collect sensitive personal data or data of children under 16.

Every data subject has the right to:

• access their personal data;
• rectify or erase their data;
• restrict or object to processing;
• withdraw consent;
• data portability;
• lodge a complaint with the President of the Polish DPA (UODO).

Requests can be sent to contact@redigocarbon.com or by mail to REDIGO CARBON's registered office.

REDIGO CARBON reserves the right to update this Privacy Policy to reflect changes in our services, industry practice or applicable law. Users will be notified of material changes. This Privacy Policy has been in effect since 25 November 2022.