Privacy and Cookie Statement

Last update: 1st of March 2024

Data Protection Notice

The website calaso.com is operated and published by CALASO BV ("CALASO", "we", "us"), a company registered in the Commercial Register Meppel of the Netherlands (Stephensonstraat 57, 7903 AS Hoogeveen, Netherlands) under the number 82250316.

We are therefore responsible for the collection, processing and use of your personal data in accordance with the law. We take data protection very seriously and are committed to the protection of your personal data. Consequently, we comply with the applicable data protection laws of the European Union (in particular the General Data Protection Regulation, "GDPR") and of any other country, if applicable.

We would like to inform you below about how we handle your personal data. Please be aware that the following information may be reviewed and amended from time to time. We therefore recommend that you consult this Data Protection Policy on a regular basis.

1) Extent and Purpose of the Collection, Processing and Use of Personal Data

When you visit our website, our servers temporarily store each access in a log file. The following data is collected and stored, without any action on your side, until it is automatically deleted after 1 month:

• the IP address of the requesting computer,
• date and time of access,
• name and URL of the data accessed,
• the website from which access is made to our domain,
• your computer’s operating system and the browser you use,
• the country from which access to our website is made,
• the Status-Code, and
• the name of your Internet provider.

This data is collected and processed for the purpose of allowing the use of our website (establishing a connection), ensuring system security and stability in the long term, and allowing the optimization of our Internet offering as well as for internal statistical purposes.

The aforementioned information is not linked to or stored with any other personal data. Only in the event of an attack on the website's network infrastructure or where unauthorized or abusive use of the website is suspected will the IP address be evaluated for clarification and defensive purposes and, where necessary, used within the framework of criminal proceedings for identification and to bring legal action against the users concerned under civil and criminal law.

We rely on our legitimate interests within the meaning of art. 6 para. 1 lit. f GDPR to process the data for these purposes. Our legitimate interests consist of ensuring system security and stability, the optimization of service offers and our website, as well as statistical purposes. Furthermore, we rely on your consent within the meaning of art. 6 para 1 lit. a GDPR insofar required to store cookies for the purposes mentioned above. You may revoke your consent at any time without affecting the legality of the processing that has taken place on the basis of your consent until the time of revocation.

You may get in touch with us by using the contact form on our website either in order to submit general inquiries or to receive quotations.

In case of general inquiries, we might process the following personal data you provide us via contact form:

• Name*,
• Company,
• country*,
• e-mail*,
• phone number, and
• message*.

Personal data marked with * must be provided truthfully and mandatorily.

In case of quotations inquiries, we might process the following personal data you provide us via contact form:

• Name*,
• company name*,
• VAT number*,
• country*,
• address*,
• city, state*,
• zip code*,
• phone number*,
• e-mail*,
• website, and
• message*.

Personal data marked with * must be provided truthfully and mandatorily.

We use this data in order to be able to process your contact request, in particular to answer to your questions or to provide the required services and, if necessary, to contact you by e-mail. You are responsible for any communications or content you transmit to us. We recommend that you do not transmit sensitive information via contact form. Personal data is only collected if you voluntarily provide it to us. It is therefore up to you what information you provide us with.

We rely on our legitimate interests within the meaning of art. 6 para. 1 lit. f GDPR to process your above data for the mentioned purposes. Our legitimate interests consist of answering your questions, contact you, if necessary, or provide you with the services you required in the contact form.

You may place orders directly with us by using the e-mail address [email protected] or by other means (e.g. in person or by telephone). In this case, we might process the following personal data you provide us voluntarily:

• first name,
• surname,
• e-mail-address,
• company,
• address,
• phone number,
• order details,
• billing and shipping address (incl. shipping details such as residential, residential / commercial etc.),
• payment details,
• valid CDTFA (if applicable)
• VAT number and
• message.

We need this information to process your order. You are responsible for any communications or content you transmit to us. We recommend that you do not transmit sensitive information via e-mail, in person or by phone. In order to be able to process your order, we may transfer your personal data to our distributors in your territory (see section 5) below).

We process these personal data to fulfil our pre-contractual and contractual obligations within the meaning of art. 6 para. 1 lit. b GDPR.

2) Tracking Tools and Marketing

We use the web analytics service Google Analytics to maintain a user-oriented and continuously improving website. Google Analytics is provided by Google Ireland Limited, a company under Irish law with registered seat at Gordon House, Barrow Street, Dublin 4, Ireland („Google“). We create pseudonymized user profiles and cookies (see section 4) further below) for this purpose. Information that is generated by the cookies includes:

• browser type/version,
• operating system used,
• referrer URL (the previously visited website),
• host name of the accessing computer (IP address),
• time of server inquiry, and
• device used.

This information will be transmitted to and stored by Google. We have concluded a data processing agreement with Google for this purpose and use Google Analytics with a privacy-friendly set up. This privacy-friendly setting means that we have masked the last octet of your IP address, have turned off 'sharing data with Google' and do not use other Google services in combination with the Google Analytics cookies.

The information obtained with Google Analytics is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the design of these Internet pages to meet requirements. This information may also be transferred to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

It cannot entirely be excluded that the respective data will be processed in locations outside of the European Union or the European Economic Area. However, Google participates in and complies with the EU-US and also the Swiss-US Privacy Shield Framework. This means that Google's level of data protection is in accordance with European standards regarding the collection, use and retention of personal data.

For more information about the web analytics service used, please visit the Google Analytics website. The following link https://tools.google.com/dlpage/gaoptout?hl=en offers guidance on how to prevent the use of your data by the web analytics service.

We have implemented Google Analytics in a way that any data collected and processed in the above mentioned manner are automatically deleted within 14 months.

We rely on our legitimate interests within the meaning of art. 6 para. 1 lit. f GDPR to use the Google Analytics cookies for the mentioned purposes. Our legitimate interests consist of the optimal functioning of the website.

3) Social Plugins

On our website social plugins might be installed. These social plugins consist on the one hand side of “Like-Buttons” or similar functionalities that are typical for social media networks, on the other hand side of “dynamic” links to our social media sites on the respective social media network. Users recognize the respective plugins because they are displayed using the logo of the respective network.

If a user is logged in its user account with the respective social media network when accessing our website, the respective network may connect the website visit to his / her user account. If a user interacts with the plugins, the respective information will directly be forwarded to the server of the respective provider and stored there. The information may be published on the respective social media network and in certain circumstances displayed to other users of the network (e.g. if the “like”-button is used).

The provider of the social media network uses the information for marketing purposes, market surveys and the user-focused design of its services. In this respect use, interest or relation profiles may be created, e.g. in order to analyze the use of our website by the respective user with respect to the advertising displayed to this user on the social media network, in order to inform other users of the social media network about the activities of the respective user on our website, and in order to provide other services connected to the use of the social media network.

Purpose and extent of the data collection, processing and use by the provider of the social media networks as well as the rights and user settings for the protection of the users’ privacy may be found in the data privacy policies for the social media networks.

If users do not want that the provider of a social media network is able to connect the data collected on our website directly with their user account, the respective user must log out from his user account prior to using the plugins or prior to visiting the website.

On this website, plugins of the following providers might be implemented:

• Facebook Inc., 1601 California Ave, Palo Alto, CA 94304, USA, https://www.facebook.com/privacy/explanation
• Instagram Inc., 1601 Willow Rd., Menlo Park, CA 94026, USA, https://help.instagram.com/519522125107875
• Pinterest Inc., 634 High Street, Palo Alto, CA 94301, USA, https://policy.pinterest.com/en/privacy-policy
• LinkedIn Ireland Unlimited Company, Dublin 2, Ireland, https://www.linkedin.com/legal/privacy-policy

Data processing is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You may revoke your consent at any time without affecting the legality of the processing that has taken place on the basis of your consent until the time of revocation.

4) Video Plugin

On our website video plugins from the video portal Vimeo are installed.The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.

When you are logged in to your user account with Vimeo when accessing our website, Vimeo may connect the website visit to your user account. If you interact with the plugins, the respective information will directly be forwarded to the server of Vimeo and stored there. You can prevent this by logging out of your Vimeo account.

When you visit one of our pages equipped with a Vimeo plugin, a connection to the Vimeo servers is established. This tells the Vimeo server which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transferred to the Vimeo server in the USA.

The legal basis for the processing of your personal data is your consent according to art. 6 para. 1 lit. a GDPR. If you do not give your consent to the use of these plugins, you are not able to watch the videos. You may revoke your consent at any time without affecting the legality of the processing that has taken place on the basis of your consent until the time of revocation.

Purpose and extent of the data collection, processing and use by Vimeo as well as the rights and user settings for the protection of the users’ privacy may be found at https://vimeo.com/privacy. Vimeo Inc. is certified according to the EU-US and Swiss-US Privacy Shield and is thus committed to comply with the European data protection guidelines.

5) Functional Cookies

In many respects, cookies help to make the visit of our website easier, more pleasant and more useful. Cookies are information files stored automatically by your browser on the hard disk of your computer when you visit our website. Cookies neither damage the hard disk of your computer nor do they transmit your personal data to us.

Many Internet browsers still accept cookies automatically. However, you can configure your browser in such a way that no cookies are stored on your computer or a notice always appears when you receive a new cookie. The following pages explain how to configure the processing of cookies for the most common browsers:

• Microsoft Windows Internet Explorer
• Mozilla Firefox
• Google Chrome for Desktop
• Google Chrome for Mobile
• Apple Safari for Desktop
• Opera for desktop

Please note that deactivating these functional cookies may prevent you from using all the features of our website.

Unless notified otherwise in this data protection statement, the legal basis for processing the data for the above purposes lies in our legitimate interest in ensuring the functionality and optimization of the website (art. 6 para. 1 lit. f GDPR). You can object to the processing at any time (see section 9) further below) or opt-out by using the links above.

6) Disclosure of Personal Data to Third Parties and Abroad

We will only transfer your personal data to third parties or abroad if you have given us your explicit consent, if there is a legal obligation to do so, or if it is necessary for the enforcement of our rights.

In addition, we will disclose your personal information to third parties as far as it is necessary for the use of the website, the processing of your contact requests and the providing of any services you requested. The use of this data by third parties is strictly limited to the mentioned purposes. Two parties to which we might transfer your personal data are the following distributors:

• Techpack Pty Ltd., Unit 6, 31-41 Bridge Road, Stanmore, NSW 2048, Australia
• CALASO USA, Inc., 1248 N Mariposa Ave., Los Angeles, CA 90029, USA

Personal data is only disclosed to these two parties in case that you are domiciled in Australia or North America. These two parties will use the respective information in order to contact you, process your orders or provide any other services requested by you.

Other third-party service providers are explicitly mentioned in this data privacy notice (e.g. section 2). Furthermore, personal data might be forwarded to our website hosting company. The website is hosted on servers based in The Netherlands (operated by Skyberate Internet Services B.V., Julianaplein 44, 7003 DW Doetinchem, NL). The data is shared for the purpose of providing and maintaining the functionalities of our website.

In relation to the above uses of your personal data and the above sharing arrangements, your personal data may be transferred to, stored and processed in one or more countries outside the European Economic Area, including countries which do not provide equivalent protection for personal data. If the level of data protection in any country does not meet the requirements of the GDPR and other applicable data protection laws, we will take reasonable steps to ensure that your personal data is adequately protected in accordance with the requirements of the GDPR and other applicable data protection laws.

We only store personal data for as long as is necessary to carry out the above tracking services and further processing in the context of our legitimate interest. We keep contract data for longer, as this is required by legal storage obligations. Obligations to store data, which oblige us to store data, result from accounting regulations and tax regulations. According to these regulations, business communication, concluded contracts and accounting documents must be stored for up to 10 years. If we no longer need this data to perform the services for you, the data will be blocked. This means that the data may then only be used for accounting and tax purposes.

8) Data Security

We take all reasonable technical and organizational security measures that we deem appropriate in order to protect your stored data against manipulation, loss, or unauthorized third party access. Our security measures are continually adapted to technological developments.

We also take internal data privacy very seriously. Our employees and the service providers are required to maintain secrecy and to comply with applicable data protection legislation. In addition, they are granted access to personal data only insofar as this is necessary for them to carry out their respective tasks or mandate.

9) Your Data Protection Rights

You have the following data protection rights:

Information right: You have the right at any time to request access to your personal data stored by us. This gives you the opportunity to check which personal data we process about you and that we use it in accordance with applicable data protection regulations.

Correction right: You have the right to have inaccurate or incomplete personal data corrected and to be informed of the correction. We will inform the individual concerned of the adjustments made to any incorrect data, unless such notification is impossible or involves a disproportionate effort.

Deletion right: You have the right to require us to delete your personal data, as long as there is no legal basis that allows us to further process such data.

Right to limitation of processing: You have the right, under certain conditions, to request the processing of your personal data to be restricted.

Data transferability rights: Under certain circumstances you have the right to receive from us the personal data that you have provided to us, free of charge and in a readable format.

Right to complain: If you are resident of an EU or EEA member country, you have the right to lodge a complaint with a competent supervisory authority against the way in which your personal data is processed at any time.

Right of revocation: You can withdraw your consent to certain data processing at any time, with effect for the future.

Right to object: You can object to certain data processing at any time.

10) Contact

If you have any questions on data protection on our website, would like more information or would like to arrange for your data to be deleted, please get in touch with us by sending an E-mail to [email protected].