Privacy Policy
Last updated: 23 October 2026
This policy explains how Caldorelli handles the personal data of people who visit caldorelli.com or contact us through the website, in line with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
1. Data controller
Caldorelli
Email: info@caldorelli.com
For any question about your personal data, or to exercise your rights, please write to this address.
2. What data we process
- Contact form and emails: your name, phone number, email address, product of interest, the content of your message and, for context, the language and page from which you sent the request.
- Technical access data: when you visit the website, our hosting provider automatically logs technical data such as your IP address, the date and time of access, the page requested and your browser type. This data is needed to deliver the website and protect it against abuse.
We do not ask for sensitive data (for example, health data). Please do not include it in your message.
3. Purposes and legal bases
- Replying to your request for information, a site visit or a quote, and preparing a possible offer: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in replying to people who contact us (Article 6(1)(f)).
- Operating and securing the website: our legitimate interest in providing a stable and secure website (Article 6(1)(f)).
- Complying with legal obligations, where applicable (Article 6(1)(c)).
We do not use your data for automated decision-making or profiling, and we do not sell it.
4. Recipients
Your data is only accessible to the Caldorelli staff who handle your request and to the service providers who help us run the website, acting as processors on our instructions:
- Vercel Inc.: website hosting and processing of the contact form.
- Microsoft (Microsoft 365): the email service through which we receive and answer requests.
Where needed to follow up on your request (for example, a site survey or an installation in your area), we may share the strictly necessary data with a partner installer or distributor, for that purpose only.
5. Transfers outside the European Economic Area
Some of these providers may process data outside the European Economic Area, in particular in the United States. In those cases the transfer relies on safeguards provided for by the GDPR, such as the EU-U.S. Data Privacy Framework where the provider is certified, or the standard contractual clauses approved by the European Commission.
6. How long we keep data
- Contact requests and correspondence: for as long as needed to handle the request and any commercial follow-up, and no longer than 24 months after the last contact, unless the law requires a longer period (for example, tax records for a contract that has been concluded).
- Technical access logs: only for the short period set by the hosting provider for operation and security purposes.
7. Cookies and local storage
The website does not use cookies, analytics tools, advertising or embedded social media content. Fonts are served from our own server, with no third-party connections. The website only stores your language choice in your browser's local storage (localStorage), which is strictly necessary to respect that preference. You can delete it at any time in your browser settings.
8. Your rights
Under the GDPR you may request access to your data, its rectification or erasure, restriction of processing and data portability, and you may object to processing based on our legitimate interest. To exercise these rights, write to info@caldorelli.com. We reply within the time limits set by the GDPR, normally within one month.
You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you live or work. In Portugal this is the Comissão Nacional de Proteção de Dados (CNPD); in Italy, the Garante per la protezione dei dati personali.
9. Providing your data
Providing your data is voluntary. Without your name, phone number and email address, however, we cannot reply to your request.
10. Changes to this policy
We may update this policy to reflect changes to the website or to the law. The version in force is always the one published on this page, with the date of the last update.