Data controller
Decarb Ventures LLC
Contact: [email protected]
As a US-based company serving EU users, Decarb is subject to GDPR where EU personal data is processed.
Legal basis for processing
- Legitimate interests — processing calculator responses to generate your report and improve the service
- Consent — sending marketing emails. You can withdraw consent at any time by unsubscribing
- Contract performance — processing payment data to complete offset purchases
What data we process
- Calculator responses (energy, transport, food, consumption habits)
- Email address, if provided voluntarily
- Anonymised usage data via Google Analytics
- Payment data processed by Stripe (not stored by Decarb)
We do not process special category data (health data, biometric data, political opinions, etc.).
International data transfers
Decarb is operated from the United States. Transfers of EU personal data to the US are covered by the following safeguards:
- Typeform — EU Standard Contractual Clauses apply
- Google Analytics — anonymisation applied before transfer; Google’s EU data processing terms apply
- Google Forms — Google’s EU data processing terms apply
- Stripe — covered by Stripe’s EU data processing addendum
Your rights under GDPR
- Right of access — request a copy of personal data we hold about you
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your personal data
- Right to restriction — request that we limit processing of your data
- Right to data portability — request your data in a machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — withdraw consent for marketing at any time
To exercise any right, contact [email protected]. We will respond within 30 days.
Data retention
Calculator response data is retained to provide the service and improve methodology. Email addresses are retained until you unsubscribe or request deletion. Anonymised analytics data may be retained indefinitely. We review retained data annually.
Complaints
You have the right to lodge a complaint with your national data protection authority. A list of EU authorities is available at edpb.europa.eu. We would prefer to resolve concerns directly — please contact us first.
Contact
[email protected]