This English version is provided for information. In case of discrepancy, the Spanish version prevails.
1. Data controller
- Identity:Kalkar, S.L. (in formation)
- Tax ID (NIF):[pending assignment]
- Email:contacto@kalkar.es
2. What data we process and why
| Processing | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact and demo request form | Name, email and optionally company, type of organisation, job title and phone; interest and message | To handle your request, arrange the demo and send you the information or proposal requested | Consent (art. 6.1.a GDPR) and pre-contractual steps at your request (art. 6.1.b GDPR) |
| Direct email | Whatever you include in your message | To answer your enquiry | Consent and, where applicable, pre-contractual steps |
| Site security | A hashed fingerprint of the IP address to limit abusive form submissions, and technical error logs | To keep the site secure and prevent abuse and spam | Legitimate interest (art. 6.1.f GDPR) |
We do not build profiles, make automated decisions with legal effects or use your data for advertising. We will not send you marketing communications unless you expressly ask us to.
3. Retention
Contact data is kept for as long as needed to handle your request and, if no contractual relationship begins, deleted at the latest two years after the last contact. If a contractual relationship begins, data is kept for its duration and the applicable statutory limitation periods. The IP fingerprint used for rate limiting is deleted automatically within 24 hours. Technical logs are kept for at most 30 days for security purposes.
4. Recipients
We do not share your data with third parties unless legally required. We use the following data processors, under contracts compliant with article 28 GDPR:
- Amazon Web Services EMEA SARL (Luxembourg): website hosting, form processing and email transit, on servers in the European Union (Ireland). The content delivery network serves the site from the location closest to the visitor.
- Google: the email service where we receive and manage messages.
Some of these providers belong to groups headquartered in the United States, so an international data transfer may take place. Such transfers are covered by the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.
5. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, by writing to contacto@kalkar.es stating the right you wish to exercise. If you believe the processing does not comply with the law, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Security
We apply appropriate technical and organisational measures: encrypted communications (HTTPS with HSTS), a strict content security policy, no third-party scripts or services, validation of form data and restricted access to the information received.
7. Children
This site is not intended for children under 14. If you are under that age, please do not provide personal data.
8. Cookies
This site uses no cookies. See our cookie policy.