Privacy Policy -
CS Technologies Website
Effective Date: 07.04.2026
Latest Update: 07.04.2026
1. Introduction
This privacy policy explains how CS Technologies ("we," "us," or "our") collects, uses, and protects personal data when you visit our website at www.carrotsauce.com (the “Website”). This policy applies to the Website only. Our mobile applications (Rosea, MindCore) have their own privacy policies, which you can find on their respective pages.
2. Who We Are
CS Technologies is the data controller for the personal data collected through this Website.
Contact for privacy inquiries: Email: legal@carrotsauce.com
We have not appointed a Data Protection Officer (DPO), as we are a small business that does not engage in large-scale processing of personal data or special categories of data. For any privacy-related questions, please contact us at the email address above.
3. What Data We Collect
We collect personal data through the following means:
3.1 Contact Form
When you submit our contact form, we collect:
First name and last name
Email address
Message content
We collect this data only when you voluntarily provide it by submitting the form. A link to this privacy policy is provided near the contact form.
3.2 Cookies and Similar Technologies
Our Website uses cookies. When you first visit, a cookie consent banner allows you to accept, decline, or manage cookie preferences.
Necessary cookies are set automatically and are required for the Website to function properly. These include security cookies (such as Squarespace's CSRF protection token) and cookies that store your consent preferences.
Performance and Analytics cookies are only set if you give your consent. We use Squarespace Analytics to understand how visitors use our Website, such as which pages are visited and how long visitors spend on the site. Squarespace processes this data primarily in aggregated form on our behalf.
Advertising cookies are only set if you give your consent. These cookies may be used by third-party advertising services to show relevant advertisements.
You can change your cookie preferences at any time by clicking "Manage cookies" in the cookie banner at the bottom of the Website.
3.3 Server Logs
When you visit the Website, Squarespace (our hosting provider) automatically collects certain technical information, including your IP address, browser type, operating system, referring URL, and pages visited. This is standard for all web servers and is used to maintain the security and performance of the Website.
4. How We Use Your Data
We use your personal data for the following purposes:
Contact form data (name, email, message): We use this information solely to respond to your inquiry. The legal basis for this processing is your consent (Art. 6(1)(a) GDPR), as you voluntarily submit the form with the expectation of receiving a reply.
Necessary cookies: These are used to operate the Website securely and ensure its core functionality. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in maintaining a functional and secure website.
Performance and Analytics cookies: These help us understand how visitors use the Website so we can improve it. The legal basis is your consent (Art. 6(1)(a) GDPR) — these cookies are only set after you opt in through the cookie banner.
Advertising cookies: These may be used to deliver advertisements relevant to your interests. The legal basis is your consent (Art. 6(1)(a) GDPR) — these cookies are only set after you opt in through the cookie banner.
Server logs: Technical data collected automatically by our hosting provider is used to maintain Website security and performance. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).
We do not sell your personal data. We do not use your data for automated decision-making or profiling. Third-party services used on this Website (such as advertising cookie providers, if you consent to advertising cookies) may use their own profiling techniques; such processing is governed by those providers' own privacy policies.
4.1 Voluntary Data Provision
Providing your personal data through the contact form is entirely voluntary. If you choose not to provide your name or email address, we will be unable to respond to your inquiry. There is no statutory or contractual obligation to provide this data.
5. Who We Share Your Data With
We share personal data only with the following service providers, who process data on our behalf:
Squarespace, Inc. — hosts our Website, processes contact form submissions, provides analytics, and delivers form data to our email. Squarespace is based in the United States and acts as a data processor on our behalf under a Data Processing Addendum. See Section 6 for information on international transfers.
We do not share your personal data with any other third parties, except where required by law.
6. How Long We Keep Your Data
Contact form submissions: We retain your name, email, and message for as long as necessary to resolve your inquiry, and then delete them. We do not use contact form data for marketing or any other purpose.
Cookies: Cookie lifetimes vary. Necessary cookies expire at the end of your browser session or within a short period. Analytics and advertising cookies, if consented to, have lifetimes set by the respective cookie provider. You can clear cookies at any time through your browser settings.
Server logs: Retained by Squarespace in accordance with their data retention policies.
7. International Data Transfers
Our Website is hosted by Squarespace, Inc., which processes and stores data on servers in the United States. This means that personal data collected from visitors in the European Economic Area (EEA), the United Kingdom, and Switzerland is transferred to the United States.
Squarespace provides appropriate safeguards for these transfers through:
Certification under the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework
European Commission Standard Contractual Clauses (SCCs)
The UK International Data Transfer Addendum
More information is available in Squarespace's Data Processing Addendum.
8. Your Rights
If you are located in the EEA, the United Kingdom, or Switzerland, you have the following rights under the GDPR (or equivalent local legislation):
Right of access — You can request a copy of the personal data we hold about you.
Right to rectification — You can ask us to correct inaccurate or incomplete data.
Right to erasure ("right to be forgotten") — You can ask us to delete your personal data where there is no compelling reason for us to continue processing it.
Right to restrict processing — You can ask us to temporarily stop processing your data in certain circumstances.
Right to data portability — You can request your data in a structured, commonly used, machine-readable format.
Right to object — You can object to processing based on legitimate interest. We will stop processing unless we have compelling grounds that override your interests.
Right to withdraw consent — Where we process data based on your consent (e.g., analytics cookies), you can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
To exercise any of these rights, contact us at: legal@carrotsauce.com
We will respond to your request within 30 days. If we need more time, we will inform you of the reason and the expected timeframe.
If you believe that we have not handled your data correctly, you have the right to lodge a complaint with a supervisory authority. In particular, you can lodge a complaint in the EU member state where you reside, where you work, or where the alleged infringement took place.
9. Children's Privacy
This Website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted personal data through our contact form, please contact us at legal@carrotsauce.com and we will delete it promptly.
10. Third-Party Links
This Website may contain links to our mobile applications, app stores, or other third-party websites. This privacy policy applies only to this Website. We encourage you to review the privacy policies of any third-party sites you visit.
11. Changes to This Policy
We may update this privacy policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.
12. App-Specific Privacy Policies
This policy covers only the CS Technologies Website at www.carrotsauce.com. Our mobile applications have separate privacy policies:
13. Contact Us
For any questions or concerns about this privacy policy or our data practices, please contact us at: CS Technologies Email: legal@carrotsauce.com