Privacy Policy – Carrivo
Understanding the Privacy Policy
Privacy Policy – Carrivo
Effective Date: November 3, 2025
Carrivo (“we”, “our”, “us”) is committed to protecting the privacy of visitors (“you”, “your”) to our website www.carrivo.com (“Website”) and any related services. This Privacy Policy explains how we may collect, use, store, and protect personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable German data protection laws.
By using our Website, you agree to the practices described in this Privacy Policy.
Identity and Contact of the Controller
Controller: Carrivo
Contact Email: info@carrivo.com
Registered Office: Carrivo GmbH, Legienstr. 12, 28207 Bremen, Deutschland.
Commercial Register: HRB 41855, Local Court of Bremen
Registered Office: Bremen, Germany
You can exercise your rights under the GDPR, make inquiries, or report data protection concerns via the email address provided above.
Information We Collect
- Personal Data
Carrivo only collects the following personal information when you voluntarily provide it through our website forms or when subscribing to updates:
- Name
- Surname
- Email address
We do not collect any financial, sensitive, or technical data beyond what is necessary for communication purposes.
Depending on how you interact with our Website and services, we may also collect:
- Phone number
- Payment details (if collected for paid services)
- Technical data (such as IP address, browser type, device information and usage data) collected through cookies and analytics tools.
Any such data will be collected only with your explicit consent and used solely to:
- Respond to your requests or inquiries
- Provide information about our services
- Send marketing communications or updates (only when you opt in)
How We Use Personal Data
Carrivo uses the personal data collected through its website solely for legitimate business and communication purposes.
Your information may be used for the following purposes:
- Marketing Communications:
- Sending updates, newsletters and promotional material to users who opt-in.
- Tracking engagement to optimize communication effectiveness.
- Customer and Service Communication:
- Responding to inquiries or requests about Carrivo’s car subscription services.
- Providing information regarding vehicle plans, subscription options and related offerings.
- Internal Analytics:
- Monitoring Website performance and improving user experience.
- Evaluating the effectiveness of our communication channels, using analytics tools implemented with user consent.
- Compliance & Legal Obligations:
- Maintaining records as required by law or contractual obligations.
Purpose and Legal Bases for Processing
Carrivo processes personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable German data protection laws.
The legal bases for processing your personal data are as follows:
User Consent and Opt-In
- Marketing Opt-In
Users providing personal information through lead capture forms will be presented with a clear opt-in checkbox:
“I consent to receive marketing communications, updates, and newsletters from Carrivo. I understand that I can withdraw my consent at any time.”
- Consent will always be freely given, specific, informed, and unambiguous.
- Consent will be recorded securely with timestamp and method, in line with GDPR.
- Users may withdraw consent at any time by contacting info@carrivo.com, after which all related communications will cease.
Cookie Consent
Carrivo’s website may use cookies to enhance functionality and user experience.
- Essential cookies (necessary for the site to function) are always active.
- Non-essential cookies (such as analytics or marketing cookies) will only be used after obtaining explicit consent via the cookie banner or settings panel.
- Users can opt-in or withdraw cookie consent at any time through the Website’s cookie manager.
For more details, please refer to Carrivo’s Cookie Policy.
Data Retention
Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations.
- Marketing Contacts: Until consent is withdrawn or up to 3 years from the date of collection.
- Service Inquiry Data: Until the inquiry is resolved, plus 5 years for audit compliance purposes.
- Analytics Data: Aggregated or anonymized data may be retained indefinitely for performance monitoring, reporting and business improvement.
- Payment and Transactional Data: Retained for the period required under applicable tax, accounting or financial regulations, generally up to 7 years.
Upon expiration of the applicable retention period, all personal data will be securely deleted or anonymized in accordance with Carrivo’s data management and disposal protocols.
Data Security
We implement technical and organizational measures to ensure the confidentiality, integrity and availability of personal data. These measures include:
- Encrypted data storage and SSL/TLS protected communications.
- Role-based access management ensures that only authorised personnel can access personal data strictly on a need-to-know basis.
- Periodic monitoring, audits and breach detection protocols.
Breach Notification: Any personal data breach will be reported to supervisory authorities within 72 hours and affected users will be notified where a high risk exists, in line with GDPR Article 33 and 34 obligations.
Users’ GDPR Rights
If personal data is collected, users have the following rights under GDPR:
- Access their personal data
- Rectify inaccuracies
- Request deletion (“Right to be Forgotten”)
- Restrict processing
- Withdraw consent
- Object to marketing communications
- Request data portability (receive your personal data in a machine-readable format and transfer it to another controller)
- Lodge a complaint with your local data protection authority.
If you are based in Germany, you can contact the Berliner Beauftragte für Datenschutz und Informationsfreiheit at https://www.datenschutz-berlin.de/.
Requests can be submitted to info@carrivo.com and will be handled within 30 days.
Cookies and Third-Party Tools
- The Website uses a cookie consent manager to handle cookies and tracking.
- Users can manage preferences and opt-in/opt-out of analytics, marketing and functional cookies at any time.
- We may share personal data with trusted third-party service providers who act as data processors on our behalf. These may include:
- Website hosting and infrastructure providers
- Analytics providers (e.g. Webflow analytics or similar tools)
- Email marketing platforms (e.g. Mailchimp)
These third parties are contractually bound to process personal data only as instructed by us and to maintain appropriate technical and organisational safeguards in compliance with the EU General Data Protection Regulation (GDPR)
- For detailed information on cookies, please see our Cookie Policy.
International Data Transfers
Personal data collected by Carrivo is primarily processed and stored within the European Economic Area (EEA).
Where it becomes necessary to transfer personal data outside the EEA, to trusted third-party service providers, Carrivo will ensure that such transfers comply with the requirements of EU General Data Protection Regulation (GDPR).
Minors
The Website is not directed at individuals under 16 and Carrivo does not knowingly collect personal data from minors.
Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in services, technology or legal obligations. Updates will be communicated via:
- Banner on the Website
- Email notification to registered users
- Version history table on the Website
Note: As Carrivo expands its services, this policy may be updated to reflect additional data collection practices, integrations or communication methods. Users will be notified of significant changes and renewed consent will be requested where required under the EU General Data Protection Regulation (GDPR).