top of page

Privacy Policy

Carvalho Engineering Consulting
Last Updated: 14.08.2025
​
1. DATA CONTROLLER
Data Controller according to GDPR: Carvalho Engineering Consulting
Benedito Carvalho
Sachsenstrasse 43
40883 Ratingen, Germany
Phone: +49 0176-32467790
Email: benedito.carvalho@gmx.de
Website: www.careng-consulting.com
​
2. GENERAL INFORMATION
This Privacy Policy explains the nature, scope and purpose of processing personal data (hereinafter referred to as "Data") in the context of providing our services as well as within our online services and associated websites, functions and content (hereinafter collectively referred to as "Online Services").
The terminology used is not gender-specific.
​
3. LEGAL BASIS
Under the General Data Protection Regulation (GDPR), we only process your data if there is a legal basis for doing so. The relevant legal bases are:
  • Art. 6 para. 1 lit. a GDPR - Consent
  • Art. 6 para. 1 lit. b GDPR - Contract performance
  • Art. 6 para. 1 lit. c GDPR - Legal obligation
  • Art. 6 para. 1 lit. f GDPR - Legitimate interests
  • ​
4. DATA PROCESSING FOR BUSINESS CONTACTS
4.1 Purpose of Processing We process personal data for the handling of business relationships, quotation preparation, contract fulfillment and customer service.
4.2 Categories of Data Processed
  • Contact data (name, address, phone, email)
  • Company data
  • Project-related information
  • Communication content
  • Billing and payment data
4.3 Legal Basis Art. 6 para. 1 lit. b GDPR (contract performance) and Art. 6 para. 1 lit. f GDPR (legitimate interests)
4.4 Storage Period Business data is retained for 10 years after contract termination (according to § 257 HGB, § 147 AO German commercial law).
​
5. WEBSITE USAGE
5.1 Server Log Files Each time our website is accessed, information is automatically stored in server log files:
  • IP address
  • Date and time of access
  • Name of the accessed file
  • Website from which access occurred
  • Browser and operating system used
5.2 Legal Basis Art. 6 para. 1 lit. f GDPR (legitimate interests in system security)
5.3 Storage Period Log files are automatically deleted after 7 days.
​
6. CONTACT
6.1 Email and Contact Forms When you contact us, we store your information to process your inquiry and for follow-up questions.
6.2 Legal Basis Art. 6 para. 1 lit. f GDPR (legitimate interests in processing inquiries)
6.3 Storage Period Contact inquiries are deleted 3 years after completion of processing.
​
7. COOKIES AND TRACKING
7.1 Cookies Our website only uses technically necessary cookies. These are required for the basic functions of the website.
7.2 Legal Basis Art. 6 para. 1 lit. f GDPR (legitimate interests in website functionality)
​
8. DATA SHARING
8.1 General Principle Your data is only shared with third parties in the following cases:
  • You have expressly consented
  • The sharing is necessary for contract performance
  • There is a legal obligation
8.2 Data Processors We may use external service providers (IT services, hosting). These are contractually obligated to comply with GDPR.
​
9. INTERNATIONAL DATA TRANSFERS
Data transfers to third countries only occur with EU Commission adequacy decisions or with appropriate safeguards (e.g., standard contractual clauses).
​
10. YOUR RIGHTS
You have the following rights regarding your personal data:
10.1 Right of Access (Art. 15 GDPR) You can request information about the data we store about you.
10.2 Right to Rectification (Art. 16 GDPR) You can request correction of incorrect data.
10.3 Right to Erasure (Art. 17 GDPR) You can request deletion of your data, provided there are no legal retention obligations.
10.4 Right to Restriction of Processing (Art. 18 GDPR) You can request restriction of processing.
10.5 Right to Data Portability (Art. 20 GDPR) You can receive your data in a structured format.
10.6 Right to Object (Art. 21 GDPR) You can object to processing based on legitimate interests.
10.7 Withdrawal of Consent You can withdraw any consent given at any time.
​
11. RIGHT TO COMPLAIN
You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.
Competent Supervisory Authority: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Postfach 20 04 44
40102 Düsseldorf, Germany
Phone: +49 211/38424-0
Email: poststelle@ldi.nrw.de
​
12. DATA SECURITY
We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties.
​
13. UPDATES TO THIS PRIVACY POLICY
This Privacy Policy is currently valid and was last updated on 14.08.2025. Due to the development of our website and services or due to changed legal or regulatory requirements, it may become necessary to change this Privacy Policy.
The current version is always available on our website.
​
14. CONTACT FOR DATA PROTECTION MATTERS
For questions regarding data protection, please contact:
Data Protection Contact: Carvalho Engineering Consulting
Benedito Carvalho
Sachsenstrasse 43, 40883 Ratingen, Germany
Email: benedito.carvalho@gmx.de
Phone: +49 0176-32467790
​
15. SPECIAL PROVISIONS FOR ENGINEERING SERVICES
15.1 Project Data For engineering projects, we may process technical drawings, specifications, and project-related data. This processing is based on Art. 6 para. 1 lit. b GDPR (contract performance).
15.2 Site Visits During site visits, we may collect photos and technical measurements. Written consent will be obtained when required.
15.3 Confidentiality All technical and business information is treated as strictly confidential and is not shared with third parties without explicit consent.
​
Note: This Privacy Policy complies with GDPR requirements. It is recommended to have it reviewed by a data protection attorney to ensure it is fully tailored to your specific business model and operations.
bottom of page