Privacy policy

1. General provisions

This Privacy Policy sets out how the personal data of users of cbam.com.ua, operated by EEM (Eco Energo Management) (the "Company"), is collected, used, stored and protected. We strictly comply with the Law of Ukraine "On Personal Data Protection" and the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

2. Data owner and controller

3. What data we collect

3.1. Data you provide voluntarily

When you fill in the contact forms or the reporting calculator form, we may collect: your name, phone number, e-mail address, company name, industry and the list of product codes (CN/UKTZED).

3.2. Technical data collected automatically (web analytics)

When you visit the site, Google Tag Manager and Google Analytics 4 collect anonymised data: IP address (with anonymisation enabled), device and browser type, operating system, session duration, pages viewed and referral sources.

3.3. Messengers

Enquiries via Telegram, WhatsApp or Viber are governed by the privacy policies of the respective services. We use the information you provide only to advise you.

4. Purposes and legal bases of processing

• Providing a free consultation and preparing an estimate: taking steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR).
• Preparing CBAM reports and supporting verification: concluding and performing a service contract.
• Improving the website and analysing demand: the legitimate interests of the controller (Art. 6(1)(f) GDPR).
• Compliance with legal obligations: accounting and tax obligations (Art. 6(1)(c) GDPR).

5. Data retention period

• Contact data from requests: kept for the period of active cooperation or up to 2 years from the last contact if no contract was concluded.
• Primary documents: kept in accordance with applicable tax legislation (at least 3–7 years).

6. Disclosure of data to third parties

We do not sell or transfer your personal data to third parties for marketing purposes. Only the following may have access to the data:

• Technical providers: cloud hosting and analytics services (Google LLC) that meet ISO 27001 and GDPR security standards.
• Authorised specialists: EEM consultants bound by a confidentiality agreement (NDA).
• Public authorities: only in cases expressly provided for by the applicable legislation of Ukraine.

7. Use of cookies

Our website uses technical and analytics cookies. You can change your cookie settings in your browser at any time or use the consent banner on the site.

8. Your rights

Under the law, you have the right to: access your data, rectify it, have it erased (the "right to be forgotten"), restrict processing, object to processing and withdraw your consent.

To exercise any of these rights, contact us at: office@eurocbam.com. Requests are processed within 30 calendar days.

9. Changes to this Policy

We reserve the right to update this Policy from time to time. The updated version takes effect from the moment it is published on this website.