CARTO
by CartoDB
On CARTO's Privacy Page you can request and collect all the privacy and GDPR related information that CARTO is providing.
Privacy policy
The privacy policy by is a legal document or statement that discloses how CARTO gathers, uses, discloses, and manges their customers' data.
Get the contact information for CARTO privacy team or DPO.
Data transfers
The basis for CartoDB sharing, adding, uploading, hosting, accessing or sending personal data out of Europe. Vendors can also add a description of their own impact assessment for data transfers.
Security information & certifications
Documentation of the security measures and practices CartoDB has in place when handling personal data.
Personal data
A description of the personal data that CartoDB is handling.
Data processing agreements
A DPA is a contract that defines clear roles and obligations for the sharing of personal data.
Data retention & deletion
Information about how long the data is kept for and when it's deleted.
Subprocessors
Subprocessors are companies that provide a service for CartoDB and who has or potentially will get access to personal data of their customers.
Processing locations
Where personal data is processed by CartoDB
Processing locations of CartoDB's subprocessors
Where personal data is processed by the subprocessors of CartoDB