Privacy notice
What we collect when you use this site, why we collect it, and your rights.
Who is responsible for your data?
Blue Coral Labs B.V., trading as Karum, Amsterdam, the Netherlands (Chamber of Commerce number 42102590), is the controller. You can reach us at hello@karumdesk.com.
What do we collect?
When you request a scope we collect what you enter in the form: the service you need, your timing, country of incorporation, sector, your description of the case, company name, work email and mobile phone number.
This site does not use advertising or tracking cookies. The cost calculator remembers your chosen currency in your own browser. Our hosting provider keeps standard server logs, such as IP address and browser type, to keep the site secure.
Why do we use it, and on what legal basis?
We use your details to prepare your written scope and to answer your questions. These are steps taken at your request before entering into a contract (Article 6(1)(b) GDPR). Server logs are processed for our legitimate interest in a secure site (Article 6(1)(f) GDPR). We do not sell your data and we do not use it for advertising.
Who receives it?
Our hosting and form provider (Cloudflare) and our email provider (Google Workspace) process the data on our behalf. Where your case requires it, we share the necessary details with the licensed lawyers and accountants in Turkey who would carry out the work. Turkey is outside the European Economic Area. That transfer is necessary to take steps at your request (Article 49(1)(b) GDPR).
How long do we keep it?
If your request does not lead to an engagement, we delete it within 12 months. If you become a client, we keep the file for as long as the law requires, which for accounting records in the Netherlands is seven years.
What are your rights?
You can ask us for access to your data, for correction or deletion, for restriction of processing and for a copy in a portable format, and you can object to processing. Write to hello@karumdesk.com. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your own country.