Legal

Privacy Policy

Last updated · 17 May 2026

Who we are

CarbonMap is operated by Aurora Energy Consulting, a company registered in the Netherlands with its principal office in Rotterdam. We are the data controller responsible for any personal data processed through carbonmap.nl. You can contact us at info@carbonmap.nl.

What data we collect

  • Contact data you provide voluntarily — name, business email, company, role — when you book a demo, subscribe to our newsletter, or contact us.
  • Usage data collected automatically — IP address, device and browser type, pages visited, referring URL, and approximate location derived from IP.
  • Cookies and similar technologies as described in our Cookie Policy.

Legal basis for processing

We process your personal data on the following legal bases under the GDPR:

  • Consent — for non-essential cookies, marketing newsletters and analytics.
  • Legitimate interest — to operate, secure, and improve our service; to respond to business enquiries.
  • Contract performance — to deliver the service to customers and prospects who have requested it.
  • Legal obligation — to comply with applicable laws and respond to regulatory requests.

How we use your data

  • Respond to demo requests and business enquiries.
  • Send the monthly newsletter you subscribed to (with one-click unsubscribe in every email).
  • Analyse aggregate usage to improve product and content.
  • Protect the service from abuse and security threats.

Sharing

We do not sell personal data. We share data only with vetted processors that help us run the service — hosting (Cloudflare, Lovable Cloud), analytics, email delivery, and calendar scheduling. Each processor is bound by a Data Processing Agreement and operates under GDPR-compliant safeguards.

International transfers

Where data leaves the European Economic Area, we rely on Standard Contractual Clauses and additional safeguards required by EU law.

Data retention

  • Newsletter subscriptions — until you unsubscribe, plus 30 days for log clean-up.
  • Business enquiries — up to 24 months after last interaction.
  • Server logs — up to 30 days, then aggregated.
  • Customer contract data — for the duration of the contract plus statutory retention periods.

Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you.
  • Request correction or deletion of your data.
  • Restrict or object to processing.
  • Receive your data in a portable format.
  • Withdraw consent at any time.
  • Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

To exercise any of these rights, email info@carbonmap.nl.

Security

We apply industry-standard technical and organisational measures — encryption in transit, access controls, principle of least privilege, and routine security review — to protect your data.

Changes

We may update this policy from time to time. Material changes will be flagged on the site and, where appropriate, communicated by email.

Contact

Aurora Energy Consulting · Rotterdam, Netherlands · info@carbonmap.nl