Privacy Policy

In accordance with Articles 12, 13 and 14 of Regulation (EU) 2016/679 on the protection of individuals in the processing of personal data and on the free flow of such data and on the repeal of Directive 95/46/EC (hereinafter: "General Regulation on the Protection data"), as controllers of personal data, on this site we provide you with information about the identity of the controller, the purposes of processing personal data and legal bases for processing, categories of users of personal data, retention periods and your rights under the General Data Protection Regulation.

Who is the controller of the personal data?
The controller of personal data in the sense of the provisions of the General Regulation on Data Protection is Calda d.o.o., Gospodinjska ulica 8, 1000 Ljubljana, Slovenia, phone: 00386 40 851 088, registered at the District Court in Ljubljana under registration number 9247688000, with tax number SI 21100489 (hereinafter: "Calda"), and as such determines the purposes and means of processing your personal data.

If you have any questions regarding the processing of personal data, you can contact us at any time via e-mail (dev@thecalda.com).

What personal data do we collect?
Personal data is any information relating to a specific or identifiable individual. Calda collects your personal data in particular in the following cases:


• when you visit our website;

• when you submit an inquiry via the contact form on our website or when you contact us via e-mail or phone;

• when we perform app development services for you;

• when we process your application for employment or for the performance of an employment contract;

• when you purchase our support package;

• when we have to fulfil various obligations imposed on us by law.
‍


‍

Calda only processes personal data that you provide to us, except in cases where, we obtain personal data from public authorities and holders of public authority, as well as in the case of data obtained from information systems and central registers available to us.

Cookies
In order to ensure the functioning of the website of Calda, we may store small files, also known as cookies, on your devices (computer, mobile device or other device) during your visit to our website. On our website, we use strictly necessary cookies, which are essential for the operation of the website and for which, in accordance with the Electronic Communications Act, we do not need your consent. In order to provide you with the best possible user experience, we also want to set analytical cookies on your devices that help us collect information about how you use our website. We will set analytical cookies only if you allow us to do so by clicking on the "Accept" button in the cookie notification. If you do not click on the "Accept" button and simply continue using the website, or if you click on the "Close" button, then we will install only strictly necessary cookies on your device.You can change the cookie settings at any time via the mechanism accessed on the website.

‍

Contact Form
We also collect and process personal data (e-mail, telephone number and company name) that you provide to us when you ask a question via the contact form available on the website of Calda. Only authorized persons within Calda have access to this personal data, who deal with your question and are bound by confidentiality.

‍

How do we process your personal data?
We collect your personal data only when it is absolutely necessary and in accordance with the purpose for which it was provided. We will not use personal data for any other purpose.



If you are our client or job candidate, the legal basis for processing your personal data is the performance of a contract or the performance of measures at your request prior to the conclusion of a contract (e.g. answering your questions and comments, meeting your requests, submitting and accepting offers, communicating with you, processing your application or applying for a vacancy).



We also process your personal data when it is necessary to fulfil legal obligations (e.g. reporting to tax and other competent authorities and other disclosures of personal data prescribed by law, implementation of measures to know the customer and other tasks and measures in accordance with legislation with areas of prevention of money laundering and financing of terrorism).In certain cases, we may also process your personal data on the basis of legitimate interests pursued by us or a third party, except when your interests or fundamental rights and freedoms prevail over such interests (e.g. prevention of fraud and misuse of services, maintenance of physical and information technology security and enforcement of legal claims).



You are obliged to provide us with your personal data only in cases where this represents a contractual obligation, or a request to conclude a contract. If you do not provide us with the required information, then we cannot provide our services, accept or process your applications or inquiries or fully fulfil our legal obligations.



Calda will, in certain cases and when appropriate, ask you for your consent to process your personal data. In such cases, you have the right to refuse consent without adverse consequences or to revoke it at any time, and the revocation of consent will not affect the legality of the processing of personal data that was carried out on the basis of consent before its revocation. The transmission of your personal data is voluntary, and the provision of our services is not conditional on consent to the processing of personal data, which is not necessary for the provision of services.


Who do we share your data with?
Only employees of Calda and its permanent associates, who are bound by confidentiality, have access to your personal data. We also disclose your personal data to carefully selected service providers, i.e. processors and other users of personal data. Processors are our business partners who provide certain services for us and process your personal data according to our instructions and on our behalf. In such cases, we always conclude appropriate processing contracts with them, in which we commit them to the same level of personal data protection as if they were processing the data themselves.


Where do we process your data?
As a rule, we process your personal data only in the area of the European Union and the European Economic Area. In certain cases, we may also forward your personal data to users from third countries, whereby we guarantee that in these cases adequate data protection will be ensured and that all conditions relating to the export of personal data to third countries will be met.



We can only transfer personal data if:


• the transfer is made to one of the countries or international organizations for which the European Commission has adopted a decision on adequacy, or to one of the countries from the list of third countries with an appropriate level of data protection, which is managed by the Information Commissioner;

• the transfer is subject to the appropriate protective measures from Article 46 of the General Data Protection Regulation (e.g. standard data protection clauses, binding company rules);

• the conditions for deviations in special cases from Article 49 of the General Data Protection Regulation are met.


How long do we keep your data?
Calda processes your personal data to the extent and for as long as it is necessary to fulfil the purpose of the processing. We will thus process your personal data until the purpose of the processing is fulfilled or within the limitation periods for obligations that could arise from the processing of this personal data. If the retention of personal data is prescribed by law, Calda will keep your personal data in accordance with the prescribed retention periods.



In cases where the legal basis for processing is your consent, we will keep personal data until cancellation. We will also stop processing your personal data upon withdrawal of consent, unless there is another lawful legal basis for further processing.


What are your rights?
The existence and extent of your rights depends on the specific circumstances of the individual case or processing. Under the terms of the General Data Protection Regulation, you have the right to request from Calda access to personal data and correction or deletion of personal data, restriction of processing and the right to object to processing and the right to data portability. You can send us your request by e-mail or registered mail to our address.


How do we protect your data?
The effective protection and protection of personal data means a lot to us, which is why we have taken appropriate technical and organizational measures to protect all personal data and to protect it from accidental or illegal destruction, loss, alteration and unauthorized disclosure or access.



If you believe that there has been a breach of personal data protection, please let us know immediately, and we will provide you with an appropriate response in a timely manner. If necessary, we will also immediately implement all necessary measures to eliminate any irregularities.



You also have the right to file an official complaint with the Information Commissioner (Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, e-mail: gp.ip@ip-rs.si, telephone: 00386 1 230 97 30).

‍