Privacy policy

This Privacy Policy describes how Caelion processes the personal data you provide through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

You can reach us on data protection matters at the email above.

2. What data we process

We only process the data you voluntarily provide:

• Contact form: name, email address and the content of your message.
• Savings (ROI) calculator: email address and the parameters you enter (number of people, weekly hours and cost per hour) in order to send you the detailed calculation.
• Booking the 30-minute call: if you use the booking button you leave this site for Cal.com, where you provide your name, email address, time zone and whatever you write as the reason for the meeting. That form is served by Cal.com, not by us; what reaches us is the booking and those details.

We do not collect special categories of data and do not carry out profiling. We do not use analytics or advertising cookies (see Cookie Policy).

3. Purpose

To handle your contact or audit request, answer your enquiries, prepare and send the requested savings calculation and, where applicable, manage the pre-contractual commercial relationship.

4. Legal basis

Your consent, given by ticking the box and submitting the form (Art. 6.1.a GDPR), and the performance of pre-contractual measures taken at your request (Art. 6.1.b GDPR). You may withdraw consent at any time.

5. Retention period

We keep your data for as long as necessary to handle your request and, if no commercial relationship begins, we delete it within a maximum of 12 months. If we do work together, data is kept for the duration of the relationship and any applicable legal (tax and commercial) periods.

6. Recipients and processors

We do not sell your data or share it with third parties for commercial purposes. To provide the service we rely on the following providers, acting as data processors on our behalf:

International data transfers

All four providers are established in the United States, so your data leaves the European Economic Area. The transfers do not all rely on the same safeguard, which is why we set them out individually:

• Adequacy decision (Art. 45 GDPR). Cloudflare, Inc. and Google LLC are certified under the EU-U.S. Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023. No additional safeguards are required for as long as that certification remains in force.
• Standard contractual clauses (Art. 46(2)(c) GDPR). Formspree, Inc. and Cal.com, Inc. do not rely on the adequacy decision for these transfers, but on the standard contractual clauses approved by the European Commission, which both state that they apply as data processors.

You may request a copy of the safeguards applied, or details of where to consult them, by writing to info@aicaelion.com.

If we add a new provider that processes personal data, we will update this table before we start using it.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to info@aicaelion.com, stating the right you wish to exercise. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) if you believe the processing does not comply with the law.

8. Security

We apply reasonable technical and organisational measures to protect your data, including encryption in transit (HTTPS) and restricted access. No system is infallible, but we work to minimise risks.

9. Changes

We may update this policy to reflect legal or service changes. The version in force will always be published on this page.