Caroline — GDPR

Last updated: 2026

This policy describes how we handle the personal data you provide through the “Request access” form on the Caroline website.

Data controller

The data controller is Gettogether s.r.o., Company ID 17773393, registered office at Bělehradská 858/23, Vinohrady, 120 00 Prague 2, Czechia, registered at the Municipal Court in Prague. Contact: [email protected].

What data we process

When you request access we process only the data you fill in:

first and last name,
e-mail address,
reason for your interest (the text you write to us).

Purpose and legal basis

We process this data solely to handle your access request and to communicate with you about Caroline. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by submitting the form. You may withdraw your consent at any time by e-mailing [email protected].

Recipients and processors

To deliver e-mail notifications about your request we use Brevo (Sendinblue), which acts as our processor. We do not pass your data to any other third parties and we do not sell it.

Retention

We keep the data for as long as necessary to handle your request, and no longer than 24 months from submission — or until you withdraw your consent, whichever comes first.

Your rights

You have the right to access your data, to its rectification, erasure, restriction of processing, portability, and the right to object. You also have the right to lodge a complaint with the supervisory authority — in the Czech Republic the Office for Personal Data Protection (www.uoou.cz).

Contact

For any question about the processing of personal data, contact us at [email protected].