Privacy policy

Last updated: 22 September 2026

1. Data controller

The data controller is CaltaTech Srl, Via Giacomo Leopardi 55-59, 90144 Palermo (PA), Italy — VAT no. IT04624120988.

For any matter relating to the processing of your data you can write to amministrazione@caltatech.com or call +39 091 7379322.

The controller has not appointed a Data Protection Officer (DPO), as the conditions set out in Article 37 GDPR do not apply.

2. What data we process

Data you provide voluntarily. If you use the form on the Contact page or write to us by email: your name, company name, email address, the voltage level you are interested in, and the content of your message, including any technical information about the project you choose to share.

Technical browsing data. The systems hosting this website automatically record data connected to the operation of internet protocols: IP address, browser type and operating system, date and time of the request, and the page requested. This data is not collected in order to identify you, but to ensure the site works correctly and securely.

Data collected by Google Analytics, only with your consent. If you accept statistics cookies, Google Analytics records how you use the website: pages visited, interactions, device and browser type, approximate location and where you came from, including our ads. If you also accept marketing, the same data is used for our Google Ads campaigns. Details are in section 5.

Data collected by the Meta pixel, only with your consent. On the CaltaTech Solare page, if you accept marketing cookies, the Meta pixel records your visit and whether you click the button to book a demo, together with technical data about your browser. Details are in section 5.

3. How the contact form works

When you press «Send your enquiry», the form data on the Contact page travels encrypted to a function of this website, hosted on Microsoft Azure, which forwards it by email to amministrazione@caltatech.com and sends a confirmation copy to the address you entered.

The website does not store the form data in any archive: after sending, it remains only in the two emails. The emails are sent through Brevo's delivery service, described in section 6.

4. Purposes and legal bases

• Responding to enquiries and assessing a possible engagement. Legal basis: steps taken at the request of the data subject prior to entering into a contract, Article 6(1)(b) GDPR.
• Ensuring the website works securely through technical logs. Legal basis: the controller's legitimate interest in protecting its infrastructure, Article 6(1)(f) GDPR.
• Complying with legal obligations in accounting, tax and record-keeping matters. Legal basis: Article 6(1)(c) GDPR.
• Understanding how the website is used and how well our campaigns perform, with Google Analytics statistics. Legal basis: your consent, Article 6(1)(a) GDPR and Article 122 of the Italian Personal Data Protection Code (Legislative Decree 196/2003), which you can withdraw at any time.
• Measuring our Google, Facebook and Instagram ads and showing them to people who may be interested, through Google Ads, linked to Google Analytics, and the Meta pixel on the CaltaTech Solare page. Legal basis: your consent, Article 6(1)(a) GDPR and Article 122 of the Italian Personal Data Protection Code, which you can withdraw at any time.

Providing your data is optional, but without contact details we cannot reply to your enquiry. Consent to statistics and marketing cookies is freely given: if you decline, the website works just the same.

5. Cookies and tracking

Besides technical cookies, this website uses third-party tools for two purposes, only with your consent and chosen separately:

• Statistics: Google Analytics (Google Ireland Limited), on every page;
• Marketing: Google Ads (Google Ireland Limited), through Google Analytics, on every page, and the Meta pixel (Meta Platforms Ireland Limited), only on the CaltaTech Solare page, which is in Italian.

Google Analytics. It tells us how many visits the website receives, where they come from, including our advertising campaigns, and which pages are read. It records the pages visited and interactions, such as scrolling, clicks on external links and the submission of the contact form but not its content, together with device and browser type, approximate location and the page or ad you came from. The IP address is used only to derive the approximate location and is discarded immediately: Google Analytics does not store it. It uses the _ga and _ga_6K3BEFS531 cookies, which last two years. If you accept statistics only, Google cannot use this data for advertising.

Google Ads. Google Analytics is linked to our Google Ads account. If you also accept marketing, the website reports conversions to Google Ads — that is, when someone who arrives from one of our ads opens the calendar to book a demo — and Google Analytics data is used to measure which ads bring visits and enquiries and to show our ads to people who have already visited the website. In that case the _gcl_au cookie may also be set and, if you arrive from one of our Google ads, the _gcl_aw cookie; they last 90 days. For the use of data for advertising, Google Ireland Limited acts as an independent controller, under its controller-to-controller data protection terms and its privacy policy.

Meta pixel. The pixel lets us measure how well our Facebook and Instagram ads perform and show them to people who may be interested. If you accept it, it tells Meta:

• that you visited the CaltaTech Solare page;
• whether you press the button to book a demo;
• technical data such as your IP address, browser and device type, the page address and the address of the page you came from.

The pixel sets the _fbp cookie on your device and, if you arrive by clicking one of our ads, the _fbc cookie. Both last 90 days. If you have a Facebook or Instagram account, Meta may link this data to your profile.

Nothing runs before consent. Until you accept, the Google Analytics and Meta scripts are not even downloaded and your browser does not communicate with their servers. Scrolling or continuing to browse does not count as consent.

How to choose and how to change your mind. On your first visit a banner appears with two equally prominent buttons, «Decline» and «Accept», and a «Customise» link to choose statistics and marketing separately; closing it with the X counts as declining. You can change your choice at any time from the «Cookie preferences» link at the bottom of every page: if you withdraw consent, the tool stops and its cookies are deleted. Withdrawal does not affect the lawfulness of what happened before.

How we remember your choice. Your choice is saved in your browser's storage for six months, after which we ask again. This is a technical tool, needed so the banner is not shown on every visit, and it does not require consent.

Meta's role. For the collection of data through the pixel and its transmission to Meta, CaltaTech Srl and Meta Platforms Ireland Limited are joint controllers under Article 26 GDPR, according to the joint controller addendum provided by Meta. What Meta does with the data once received is its own responsibility, as an independent controller, and is described in its privacy policy.

Links to external services. The links to our social profiles in the footer are plain links: they load no third-party content and transmit no data unless you use them. The same applies to the button for booking a CaltaTech Solare demo: the calendar is not embedded in the website but opens on a Microsoft page, and until you open it your browser does not communicate with Microsoft's servers.

6. Third-party services

Google Fonts. The site loads its typefaces from Google's servers (Google Ireland Limited). To allow this, your browser communicates its IP address to Google, which may also be processed on servers located in the United States on the basis of the EU-US Data Privacy Framework adequacy decision. No cookies are set by Google and the data is not used for profiling.

Google Analytics. Only with your consent, website statistics are collected with Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which acts as a data processor under Article 28 GDPR, on the basis of Google's data processing terms. For the use of data in Google Ads, only with your consent to marketing, Google instead acts as an independent controller. Details are in section 5.

Microsoft Bookings. Demos of CaltaTech Solare are booked through Microsoft Bookings (Microsoft Ireland Operations Limited). The calendar is not embedded in this website: pressing the button opens a page hosted by Microsoft, where your browser communicates with their servers and technical browsing data may be processed. The data you enter to book the appointment — name, email address, phone, company and the number of permit applications you handle — is collected by CaltaTech Srl to organise the meeting and remind you of it. For this processing Microsoft acts as a data processor under Article 28 GDPR.

Hosting. The website is hosted on Microsoft Azure (Static Web Apps service), provided by Microsoft Ireland Operations Limited, Dublin, Ireland. Pages are delivered from a network of servers in several countries; the function that receives contact form data runs in a Microsoft data centre in the United States. On behalf of CaltaTech Srl, Microsoft processes technical browsing data, IP addresses, system logs and form data as a data processor under Article 28 GDPR, on the basis of its data protection terms.

Sending the form emails. The two emails generated by the contact form are sent through Brevo (Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France), which acts as a data processor under Article 28 GDPR and keeps technical delivery data. In the confirmation copy you receive, Brevo also detects whether the message is opened, if your email programme loads images.

Email and calendar. The amministrazione@caltatech.com mailbox and the demo calendar are managed with Microsoft 365, provided by Microsoft Ireland Operations Limited as a data processor.

Meta. Only on the CaltaTech Solare page and only with your consent: see section 5.

7. Retention period

• Messages received by email or through the form: for as long as needed to handle the enquiry and, thereafter, for 24 months from the last contact, unless a longer period is required by law or to establish or defend a legal claim.
• Server technical logs: for as long as strictly necessary for security and diagnostic purposes, in line with the retention periods applied by the hosting provider and in any case for no longer than 12 months, unless needed to investigate unlawful activity.
• Google Analytics: the _ga and _ga_6K3BEFS531 cookies last two years and are deleted if you withdraw consent; detailed data is kept in Google Analytics for no longer than 14 months.
• Google Ads cookies: _gcl_au and _gcl_aw last 90 days and are deleted if you withdraw your consent to marketing.
• Meta pixel cookies: _fbp and _fbc last 90 days from your last visit with the pixel active, and are deleted if you withdraw consent. Data received by Meta is retained according to its privacy policy.
• Your cookie choice: six months, after which we ask again.

8. Who receives the data

Data is processed by the controller's authorised staff and may be disclosed to the technical service providers listed in section 6 — Microsoft for hosting, email and the demo calendar, Brevo for sending the form emails and, only with your consent, Google for statistics — appointed as data processors under Article 28 GDPR.

Only with your consent to marketing, data is also disclosed to Google Ireland Limited, for Google Ads, and to Meta Platforms Ireland Limited, for the pixel on the CaltaTech Solare page, as described in section 5.

Data is not disseminated, is not sold to third parties for commercial purposes, and is not subject to automated decision-making. Apart from marketing, active only with your consent, it is not used for profiling.

9. Transfers outside the EEA

Some of the providers listed also process data in the United States: Google for the typefaces and, only with your consent, for statistics and advertising; Microsoft for the function that receives the contact form; only with your consent, Meta for the pixel. These transfers rely on the European Commission's adequacy decision of 10 July 2023 (EU-US Data Privacy Framework), under which Google LLC, Microsoft Corporation and Meta Platforms, Inc. are certified, and, where applicable, on the standard contractual clauses approved by the Commission (Articles 45 and 46 GDPR).

Any other transfer to a third country will take place only where there is an adequacy decision or appropriate safeguards under Articles 44 and following of the GDPR.

10. Your rights

As a data subject you may exercise the rights set out in Articles 15 to 22 GDPR at any time:

• access your personal data and obtain a copy of it;
• ask for it to be corrected if inaccurate or incomplete;
• ask for it to be erased, in the cases provided for by law;
• ask for processing to be restricted;
• receive your data in a structured format and transmit it to another controller (portability);
• object to processing based on legitimate interest;
• withdraw your consent to statistics and marketing at any time, from the «Cookie preferences» link at the bottom of every page, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, simply write to amministrazione@caltatech.com. The controller will respond within one month of receiving the request. For data collected through the pixel you can also contact Meta directly, which is responsible for what happens after collection.

If you believe the processing of your data infringes the law, you also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the country where you live.

11. Changes to this policy

The controller may update this policy to reflect changes in the law or in how the website operates. The current version is always published on this page, together with the date it was last updated.