CBAM FilePrivacy Policy — CBAM File
1. Who we are
Operated by CBAM File, the trading brand of an individual sole proprietor, contact: contact@cbamfile.com.
2. Your production data
All emissions calculations and file generation run locally in your browser. Your production, fuel, energy and precursor data is never transmitted to or stored on our servers. We operate no database of user production data.
3. What we collect
- Your email address — together with a timestamp and the version identifier of the consent wording you saw — only if you ticked the optional box asking for regulatory updates. Ticking it is never required to use the calculator or to download any file.
- Anonymous usage events — sector, country, product-group prefix and simple counts (for example, how many people reached the results screen, and how many downloaded a file). These cannot be linked to a person or a company, are never joined to an email address, and are stored separately from the subscriber list.
- Technical connection data — our hosting provider processes connection data such as IP addresses as needed to serve the site, under its own terms. We do not store your IP address with your email address.
- Installation fingerprint — only when you download files on a paid plan: a one-way hash of the installation name and country, mixed with your access code, used to count the installations your plan covers. We never receive the installation name, address or any production figure, and the same installation produces a different fingerprint under a different code. Kept with the purchase record until it expires.
- Purchase records — only if you buy a paid plan: your access code, the plan purchased, its validity dates and the email address you gave at checkout. We use them to restore a lost code and to provide support. They are stored separately from both the update list and the anonymous usage events, and contain none of your production data.
4. What we use it for
Your email address is used for one purpose: to tell you when the European Commission changes the CBAM default values, the mark-up rate, or the official Communication Template. Nothing else. We do not sell or rent your address for unrelated marketing. The legal basis is your consent.
5. Payments
Payments are processed by Paddle.com, acting as Merchant of Record. You enter your card and billing details directly with Paddle; they never pass through or get stored on our servers. Paddle's handling of that data is governed by its own privacy policy.
6. Transfer of the service
If the service or its assets are sold, merged or transferred, the subscriber list and associated consent records may be transferred to the acquirer as part of that transaction, under this same policy and for the same purpose. You will be notified by email of any such transfer and may unsubscribe at any time.
7. Your rights
- Unsubscribe at any time — through the link in any email we send, or by writing to the contact address above. Unsubscribing deletes your record; we do not keep a suppression copy.
- Access, correction and deletion — write to the contact address and we will respond within 30 days.
- Where the GDPR applies to you, you also have the right to withdraw consent at any time (without affecting processing already carried out), to data portability, and to lodge a complaint with your national supervisory authority.
- Retention — your address is kept until you unsubscribe or until the service closes, whichever comes first.
8. Changes to this policy
The "Last updated" date above reflects the current version. If we change how we use your email address, we will tell you by email before the change takes effect.
Independent service — not affiliated with the European Union or the European Commission. Contact: contact@cbamfile.com