Controller
[COMPANY LEGAL NAME], [REGISTERED ADDRESS] (the “controller”). Contact for privacy matters: support@carelabel.eu [OR DEDICATED PRIVACY CONTACT].
What this service does with your data
Carelabel checks care label images you upload against textile labeling rules. We designed the service to be as data-light as possible: no user accounts, no advertising trackers, no third-party analytics cookies. Visits are counted through cookieless, anonymous event counters that store no IP addresses and no user identifiers.
Data we process, and why
- Uploaded label images and extracted label data — processed to run the check you requested (performance of a contract or pre-contractual steps, Art. 6(1)(b) GDPR). Check results are stored for 30 days so that your result link works; results connected to a paid order are stored for [RETENTION PERIOD, E.G. 1 YEAR]; certificate records are stored permanently to keep certificates verifiable.
- Email address — used to deliver your result link, order confirmations, and delivery messages (Art. 6(1)(b) GDPR). Not used for marketing without separate consent.
- Order and payment data — payments are processed by our payment provider; we do not receive or store full card details.
- Technical logs — our infrastructure provider processes connection data (such as IP addresses) to deliver the site securely (legitimate interest, Art. 6(1)(f) GDPR).
Processors and recipients
We use the following processors under data processing agreements:
- Cloudflare — hosting, content delivery, and security. [CLOUDFLARE ENTITY AND SAFEGUARDS]
- Anthropic — AI analysis of uploaded label images to extract the label content. Images are transmitted for analysis and are not used to train models. [CONFIRM CONTRACTUAL TERMS]
- Stripe — payment processing. Stripe acts as [PROCESSOR/CONTROLLER PER STRIPE TERMS] for payment data.
- Postmark (ActiveCampaign) — transactional email delivery.
- Formspree — form message delivery for support and order requests.
Some providers process data outside the EU/EEA. Where that is the case, transfers are safeguarded by adequacy decisions or EU standard contractual clauses. [LIST TRANSFER MECHANISMS PER PROVIDER]
Storage periods
- Free check results: 30 days, then deleted automatically.
- Paid order records: [RETENTION PERIOD] for delivery, warranty, and statutory retention duties.
- Certificate records: stored permanently so issued certificates remain verifiable; they contain the certified label content, not your uploaded photo.
- Emails and support correspondence: [RETENTION PERIOD].
Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing based on legitimate interests (Art. 21). You also have the right to lodge a complaint with a supervisory authority, in particular [COMPETENT SUPERVISORY AUTHORITY]. To exercise your rights, email support@carelabel.eu.
No obligation to provide data
Providing data is neither legally nor contractually required; however, without an uploaded image and an email address we cannot deliver a check result.
Changes to this policy
We will update this policy when the service or the legal situation changes. The current version is always available on this page.