Pursuant to art. 13 of EU Regulation 2016/679 (GDPR) and Legislative Decree 196/03, CALTEC Srl wishes to inform you about the methods and purposes of the processing of personal data collected through the website caltecai.it.
Data Controller
CALTEC Srl
Registered Office: Via Dante Alighieri, 42 - 88044 Marcellinara (CZ), Italy
VAT Number & Fiscal Code: 04083400798
Data Protection Contact Email: info@caltecai.it
Types of Personal Data Processed
Through the Website, the Data Controller exclusively collects and processes the following categories of data voluntarily provided by the user via the contact or demo request form:
- Identifying and personal details: First and Last Name.
- Contact details: Email address and Telephone number.
- Professional and enterprise details: Name of the Enterprise or Professional Practice.
- Request details: Type of interest or requested service (e.g. Custom Software Development, AI Consulting, SecurAI Demo) and any other information spontaneously entered in the message field.
Important note regarding special category data: Users are explicitly requested not to include sensitive or special category personal data (such as health status, political views, religious beliefs) in the message field. If received, such data will be immediately deleted.
Purposes of Processing and Legal Bases
Personal data is processed lawfully, fairly, and transparently for the following specific purposes:
A. Customer Support and Inquiry Handling
Purpose: Responding to contact requests, providing technical or commercial information, and scheduling demonstrations of our AI solutions (including the SecurAI platform).
Legal Basis: Performance of pre-contractual measures taken at the data subject's request (Art. 6(1)(b) GDPR) and explicit consent given via the contact checkbox (Art. 6(1)(a) GDPR).
B. Pre-contractual Management and Quotes
Purpose: Preparation and formulation of personalized commercial proposals and quotes based on requirements submitted by the enterprise or professional.
Legal Basis: Performance of pre-contractual measures (Art. 6(1)(b) GDPR).
Processing Methods and Security
Data is processed in compliance with the principles of legality, fairness, transparency, and data minimization, implementing appropriate technical and organizational security measures to prevent unauthorized access, disclosure, alteration, or loss. Processing is conducted through electronic and computerized tools using advanced security and encryption protocols.
Data Communication and Recipients
Personal data is handled exclusively by authorized and trained personnel of CALTEC Srl, as well as by formally appointed external data processors (e.g. hosting providers and GDPR-compliant cloud infrastructure). Personal data is strictly never sold, rented, or transferred to third parties for commercial or marketing purposes.
International Data Transfers
Personal data is processed and stored on secure servers located within the European Economic Area (EEA). The Data Controller does not transfer personal data to non-EU third countries or international organizations lacking an adequacy decision or appropriate safeguards.
Data Retention Period
Personal data collected for handling contact inquiries is retained for the time strictly necessary to fulfill the request. If a commercial or contractual relationship is established, data is retained for the duration of the relationship and up to 10 years after its conclusion, in compliance with applicable statutory, civil, and tax obligations.
Rights of the Data Subject (GDPR)
Pursuant to Articles 15 to 22 of EU Regulation 2016/679, users may at any time exercise the following rights:
- Right of Access (Art. 15): Obtain confirmation as to whether personal data concerning them is being processed, and request a copy.
- Right to Rectification (Art. 16): Request the correction or updating of inaccurate or incomplete data.
- Right to Erasure / Right to be Forgotten (Art. 17): Request data erasure when grounds provided by law apply.
- Right to Restriction of Processing (Art. 18): Request temporary limitation of processing under specific circumstances.
- Right to Data Portability (Art. 20): Receive personal data in a structured, commonly used, machine-readable format.
- Right to Object (Art. 21): Object at any time, on grounds relating to their particular situation, to data processing.
- Right to Withdraw Consent: Withdraw previously given consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
- Right to Lodge a Complaint: Lodge a complaint with a competent supervisory data protection authority (in Italy, the Garante per la Protezione dei Dati Personali - www.garanteprivacy.it).
To exercise any of these rights, please send a written request to the Data Controller at: info@caltecai.it. We will respond promptly within the deadlines established by the GDPR.