Privacy policy

Last updated: 6 August 2026

1. Data controller

The data controller is CaltaTech Srl, Via Giacomo Leopardi 55-59, 90144 Palermo (PA), Italy — VAT no. IT04624120988.

For any matter relating to the processing of your data you can write to amministrazione@caltatech.com or call +39 091 7379322.

The controller has not appointed a Data Protection Officer (DPO), as the conditions set out in Article 37 GDPR do not apply.

2. What data we process

Data you provide voluntarily. If you use the form on the Contact page or write to us by email: your name, company name, email address, the voltage level you are interested in, and the content of your message, including any technical information about the project you choose to share.

Technical browsing data. The systems hosting this website automatically record data connected to the operation of internet protocols: IP address, browser type and operating system, date and time of the request, and the page requested. This data is not collected in order to identify you, but to ensure the site works correctly and securely.

3. How the contact form works

The form on the Contact page does not send data to this website and does not store it on any server. When you submit it, it opens the email programme on your own device with a pre-filled message, which is sent from your email address to amministrazione@caltatech.com.

Until you press «send» in your email programme, the data you have typed remains solely on your device. From that moment onwards, processing takes place through ordinary email channels.

4. Purposes and legal bases

• Responding to enquiries and assessing a possible engagement. Legal basis: steps taken at the request of the data subject prior to entering into a contract, Article 6(1)(b) GDPR.
• Ensuring the website works securely through technical logs. Legal basis: the controller's legitimate interest in protecting its infrastructure, Article 6(1)(f) GDPR.
• Complying with legal obligations in accounting, tax and record-keeping matters. Legal basis: Article 6(1)(c) GDPR.

Providing your data is optional, but without contact details we cannot reply to your enquiry.

5. Cookies and tracking

This website uses no profiling cookies, no analytics cookies and no statistical tools, and installs no cookies on your device. There are no tracking pixels or advertising services. The links to our social profiles in the footer are plain links: they load no third-party content and transmit no data unless you use them. For these reasons no cookie banner is displayed.

6. Third-party services

Google Fonts. The site loads its typefaces from Google's servers (Google Ireland Limited). To allow this, your browser communicates its IP address to Google, which may also be processed on servers located in the United States on the basis of the EU-US Data Privacy Framework adequacy decision. No cookies are set by Google and the data is not used for profiling.

Hosting. The website is hosted by Register S.p.A., Viale della Giovine Italia 17, 50122 Florence (FI), Italy — tax code and VAT no. 04628270482, REA FI-467460. Register S.p.A. provides the technical infrastructure required to publish and run the website and may process, on behalf of CaltaTech Srl, technical browsing data, IP addresses, system logs, security-related information and backup copies.

For the processing carried out in providing the hosting service, Register S.p.A. acts as a data processor under Article 28 GDPR, on the basis of the contractual terms and of the specific Data Processing Agreement applicable to the service purchased.

7. Retention period

• Messages received by email or through the form: for as long as needed to handle the enquiry and, thereafter, for 24 months from the last contact, unless a longer period is required by law or to establish or defend a legal claim.
• Server technical logs: for as long as strictly necessary for security and diagnostic purposes, in line with the retention periods applied by the hosting provider and in any case for no longer than 12 months, unless needed to investigate unlawful activity.

8. Who receives the data

Data is processed by the controller's authorised staff and may be disclosed to technical service providers — in particular Register S.p.A. for hosting and the email service provider — appointed as data processors under Article 28 GDPR.

Data is not disseminated, is not sold to third parties for commercial purposes, and is not subject to automated decision-making or profiling.

9. Transfers outside the EEA

The hosting infrastructure is located in the European Union and the provider is established in Italy. Other than as described in section 6 in relation to Google Fonts, data is therefore processed within the European Economic Area. Any transfer to a third country will take place only where there is an adequacy decision by the European Commission or appropriate safeguards under Articles 44 and following of the GDPR.

10. Your rights

As a data subject you may exercise the rights set out in Articles 15 to 22 GDPR at any time:

• access your personal data and obtain a copy of it;
• ask for it to be corrected if inaccurate or incomplete;
• ask for it to be erased, in the cases provided for by law;
• ask for processing to be restricted;
• receive your data in a structured format and transmit it to another controller (portability);
• object to processing based on legitimate interest.

To exercise these rights, simply write to amministrazione@caltatech.com. The controller will respond within one month of receiving the request.

If you believe the processing of your data infringes the law, you also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the country where you live.

11. Changes to this policy

The controller may update this policy to reflect changes in the law or in how the website operates. The current version is always published on this page, together with the date it was last updated.