Privacy policy

This Privacy Policy describes how Caledis processes the personal data you provide through this website and our Instagram (@caledis.ai) and Facebook accounts, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

You can reach us on data protection matters at the email above.

2. What data we process

We process the data you voluntarily provide:

• Contact form: name, email address and the content of your message.
• Savings (ROI) calculator: email address and the parameters you enter (number of people, weekly hours and cost per hour) in order to send you the detailed calculation.
• Booking the 30-minute call: if you use the booking button you leave this site for Cal.com, where you provide your name, email address, time zone and whatever you write as the reason for the meeting. That form is served by Cal.com, not by us; what reaches us is the booking and those details, which Cal.com adds to our Google calendar.
• Email to info@caledis.com: your address and whatever you include in the message.
• Instagram and Facebook: when you ask us for something on our accounts —by commenting on a post with the word it mentions (for example, “CUENTA”), replying to a story or sending us a direct message— we process your username, the identifier the platform assigns to your account, your public name and profile picture, your comment or reply and the messages we exchange. Some of those replies are automatic and are sent through ManyChat (see section 6): whatever you asked for, which may be a link to this site, a document or a guide, and sometimes a question to understand your case. If during the conversation you choose to give us more details (your email, your company or details of the process you want to review), we process them too, only to reply to you.

Fields marked as required in the forms are needed to reply to you: without them we cannot handle the request.

In addition, without you providing anything, our infrastructure provider (Cloudflare) infers from your IP address the country you are connecting from, and we use that country to decide which language the page opens in and which currency the savings calculator uses when you arrive at the main address (www.caledis.com); the site does not publish prices. Caledis keeps neither the country nor your IP address, stores nothing on your device, and the decision is not remembered between visits: it is made again on every request. Cloudflare, as a data processor, does process your IP address and the technical data of each request as part of the normal operation of its network (see section 6). You can change the language with the ES/EN links without changing the calculator's currency. Each version of the site also has its own address (for example, /us/ for the United States), which always shows its own language and currency without checking your country.

We do not collect special categories of data and do not carry out profiling: the country you connect from is not combined with any other data and is not used to build a profile of you. We do not use analytics or advertising cookies (see Cookie Policy).

3. Purpose

To serve the website and protect it against abuse (technical data). To handle your contact or free call request, answer your enquiries, prepare and send the requested savings calculation, send you by direct message what you ask us for on Instagram or Facebook and, where applicable, manage the pre-contractual commercial relationship, including recording the conversation in our internal contact-tracking tool.

4. Legal basis

Your consent, given by ticking the box and submitting the form (Art. 6.1.a GDPR), and the performance of pre-contractual measures taken at your request (Art. 6.1.b GDPR). You may withdraw consent at any time.

Replies on Instagram and Facebook rely on your own request: commenting the keyword, replying to a story or writing to us is asking us for that information, and sending it to you is a pre-contractual measure taken at your request (Art. 6.1.b GDPR). We do not message you unless you have asked. Beyond answering what you ask for, we will only send you other commercial messages or emails if you give us your express consent to do so (Art. 6.1.a GDPR and Art. 21 of the Spanish LSSICE), which you may withdraw at any time.

The country detection described in section 2 relies on our legitimate interest (Art. 6.1.f GDPR) in showing you the site in a language that is useful to you and the savings calculator in your currency. It is minimal processing — a single data point, which Caledis does not keep — that does not affect your rights. You may object by writing to info@caledis.com.

The processing of your IP address and the technical data of each request that Cloudflare carries out on our behalf also relies on our legitimate interest (Art. 6.1.f GDPR): without it the site could not be served or protected against abuse.

5. Retention period

We keep your data for as long as necessary to handle your request and, if no commercial relationship begins, we delete it within a maximum of 12 months, including from ManyChat and our tracking tool. Your public comment stays on the platform until you or we delete it. If we do work together, data is kept for the duration of the relationship and any applicable legal (tax and commercial) periods.

6. Recipients and processors

We do not sell your data or share it with third parties for commercial purposes. To provide the service we rely on the following providers, acting as data processors on our behalf:

Instagram and Facebook are services of Meta Platforms Ireland Ltd., which does not act as our processor: it is the controller of the processing it carries out on its platform under its own privacy policy. For the insights of our Facebook Page, Meta and Caledis are joint controllers (Art. 26 GDPR) under Meta's Page Insights addendum, in which Meta takes primary responsibility for that data and for handling your rights over it.

International data transfers

All six providers are established in the United States, so your data leaves the European Economic Area. The transfers do not all rely on the same safeguard, which is why we set them out individually:

• Adequacy decision (Art. 45 GDPR). Cloudflare, Inc., Google LLC, ManyChat, Inc. and Notion Labs, Inc. are certified under the EU-U.S. Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023. No additional safeguards are required for as long as that certification remains in force.
• Standard contractual clauses (Art. 46(2)(c) GDPR). Formspree, Inc. and Cal.com, Inc. do not rely on the adequacy decision for these transfers, but on the standard contractual clauses approved by the European Commission, which both state that they apply as data processors.

You may request a copy of the safeguards applied, or details of where to consult them, by writing to info@caledis.com.

If we add a new provider that processes personal data, we will update this table before we start using it.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to info@caledis.com, stating the right you wish to exercise. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) if you believe the processing does not comply with the law.

8. Security

We apply reasonable technical and organisational measures to protect your data, including encryption in transit (HTTPS) and restricted access. No system is infallible, but we work to minimise risks.

9. Changes

We may update this policy to reflect legal or service changes. The version in force will always be published on this page.