Privacy

Privacy contact

Calicata is the project's public name. You can send privacy enquiries and rights requests to contacto@calicata.dev. The website owner personally handles this inbox.

This policy covers browsing and communications addressed to Calicata. Access to data on a client's behalf within a project will require its own agreement where applicable; this text does not authorise it.

Contact details and purpose of enquiries

When writing to us, you may provide your name, email address, organisation and enquiry. The form may request minimal information about a project or security request according to the reason selected; it does not accept attachments. We will use the information needed to understand the request, respond and, if you ask, prepare a proposal.

For a request to engage services made by the individual concerned, the basis is taking pre-contractual steps at their request. For communications on behalf of an organisation and other enquiries, the basis is the legitimate interest in maintaining that communication.

Providing information is voluntary, but without sufficient contact details or context it may not be possible to address the request. We do not need special categories of data, criminal information or documentation about minors in a commercial enquiry. Avoid sending unnecessary third-party data or confidential information without agreeing on how to share it.

Limits on use and human handling

Enquiries will be answered manually from contacto@calicata.dev, without a published commercial response time. Currently, only the owner handles the inbox. Before access is extended or the form's internal inbox is activated, authorised people and their roles must be determined. The enquiry will not automatically be added to an advertising list, model training or an analytics tool. The requested response does not constitute authorisation for marketing campaigns.

No decisions based solely on automated processing that produce legal or similar effects on people who contact us are envisaged. Any change of purpose or introduction of tools must be assessed and communicated before implementation.

Qualified contacts will be measured through counts of enquiries actually received, excluding spam, duplicates and automated email security reports. Email text will not be transferred to web analytics; a click on the email link will be distinguished from an enquiry received.

Retention and closure of enquiries

Active use of correspondence is limited to the time needed to address and close the request. Unnecessary information will then be deleted; only the minimum documentation required by applicable obligations or justified liabilities will be retained, with restricted access.

If a contract is concluded, the corresponding processing and retention will be explained. A tax retention period will not be applied indiscriminately to all commercial enquiries.

Browsing, security and tracking

The public website is hosted on a Contabo server. Connecting may involve processing technical data such as an IP address, date, requested resource or browser information.

The domain requests aggregate DMARC reports to check email authentication and detect unauthorised use. Reports received will be used for security, without counting them as commercial enquiries or transferring them to analytics. They may contain sending servers' IP addresses, domains, counts and authentication results.

Optional tracking is disabled. Future measurement of visits, interactions and heatmaps requires an assessment and, where applicable, prior consent.

• Read about cookies and similar technologies

Providers, recipients and transfers

The contact email uses DonDominio's email hosting service, and the public website is served from Contabo. Disclosures to authorities or advisers will be limited to justified circumstances and necessary data. No claim is made that all data remains in Spain or the European Union.

How to exercise your rights

You can write to contacto@calicata.dev to request access, rectification, erasure, objection, restriction or portability where applicable. If processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing.

Rights requests are generally handled free of charge. The ordinary response period is one month; if an extension is appropriate due to complexity or the number of requests, you will be informed within that month of the extension and its reasons. A complete copy of an identity document will not be required by default; proportionate additional information will be requested if there are reasonable doubts.

You can also complain to the Spanish Data Protection Agency. Contacting Calicata first is not established as a general requirement for submitting any complaint to the authority.

• Spanish Data Protection Agency

Changes to this policy

Before new processing is introduced, this information will be updated and consent obtained if necessary. Publishing a change will not replace that consent.