Privacy policy

Who is responsible

SaiNova Solution, CVR 45565092, Esbjerg, Denmark ("we") runs CBAM Wise and this website, and is the controller for the personal data described here. Contact: [email protected], +45 24 34 52 42.

What we process, why, and on what legal basis

Contact and demo requests

When you use the contact or demo form, we receive your name, work email, company, phone number and company size if you give them, and your message. We use them to answer you and, for a demo, to agree a time. The legal basis is our legitimate interest in answering enquiries, or steps you asked for before a contract (GDPR Art. 6(1)(f) and (b)). The form sends the request by email to our inbox; it is not stored in a database. We delete correspondence that did not lead to a customer relationship after 24 months.

CBAM deadline alerts

If you sign up, we store your email address, your language, the consent text you agreed to, and when you signed up and confirmed. We use them only to send the alerts. The legal basis is your consent (Art. 6(1)(a)), given with double opt-in. You can withdraw it at any time with the link in every email. A sign-up that is not confirmed within 7 days is deleted; after you unsubscribe, we keep only the record that you did, so we do not write to you again.

The cost estimator

The CN code, country, tonnes and emissions you type into the estimator are sent to our server to calculate the estimate and are not stored. They are not personal data.

Statistics

When switched on, we count page views with Plausible Analytics (EU): it sets no cookies, stores nothing on your device and keeps no IP addresses or personal profiles, only totals such as how many people viewed a page. The legal basis is our legitimate interest in knowing which pages are useful.

Server logs

The web server keeps no access log. To protect the forms against abuse, our server holds your IP address in memory for at most one hour to limit the number of requests.

Who helps us (processors)

• DigitalOcean, data centre in Frankfurt, Germany: hosting of the website and the forms.
• Cloudflare, Inc. (USA), DigitalOcean's sub-processor: network delivery and protection against attacks and bots.
• Brevo (France): sending the emails of the forms and the deadline alerts.
• Microsoft 365: our email inbox, [email protected].
• Plausible Analytics (EU), when statistics are switched on.

Each works under a data processing agreement. Your data is stored in the EU. Where a provider's parent company is outside the EU/EEA, its agreement covers any access from there with the safeguards GDPR requires.

Your IP address and your requests pass through Cloudflare's network for security and delivery, which may handle them outside the EU while in transit (EU-US Data Privacy Framework, through DigitalOcean's data processing agreement), and it sets the strictly necessary __cf_bm cookie for 30 minutes.

Your rights

You can ask for access to your data, correction, deletion, restriction, a copy in a common format, and object to its use. Write to [email protected]. You can also complain to the Danish Data Protection Agency (Datatilsynet), www.datatilsynet.dk.

Cookies

We set no cookies and store nothing in your browser; our hosting network sets one strictly necessary security cookie. See cookies.