1. Introduction

KalphaTech d.o.o. and KalphaTech Ltd. (“we,” “us,” or “our”) are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your personal information when you visit our website (https://www.kalphatech.com), use our services, or interact with us. As a Croatian company operating within the European Union, we comply with the General Data Protection Regulation (GDPR) and all applicable data protection laws.

 

2. Data Controller Information

Data Controller:

 

3. Personal Data We Collect

We collect and process the following categories of personal data:

  • Contact Information:
    • Name and professional title
    • Email address
    • Phone number
    • Company name and address
    • Billing and shipping addresses
  • Technical Data:
    • IP address
    • Browser type and version
    • Operating system
    • Device information
    • Website usage data and analytics
    • Cookies and similar tracking technologies
  • Professional Information:
    • Industry sector
    • Research interests
    • Project requirements
    • Sample analysis data (when provided for our services)
  • Communication Data:
    • Records of correspondence
    • Meeting notes and recordings (with consent)
    • Support ticket information
  • Personal Identification Information: Name, email address, phone number, etc.
  • Usage Data: Information about how you use our website, products, and services.
  • Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

 

4. How We Collect Personal Data

We collect personal data through:

  • Direct interactions (contact forms, emails, phone calls)
  • Website usage (cookies, analytics)
  • Third-party sources (professional networks, industry databases)
  • Service delivery (when you use our materials analysis services)

 

5. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

  • Consent: When you provide explicit consent for specific processing activities.
  • Contract: To perform our services or fulfill contractual obligations.
  • Legitimate Interest: For business development, marketing, and improving our services.
  • Legal Obligation: To comply with regulatory requirements.
  • Contractual Necessity: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.

 

6. How We Use Your Personal Data

We use your personal data to:

  • Provide materials analysis and crystallography services
  • Respond to inquiries and provide customer support
  • Process orders and manage billing
  • Improve our website and services
  • Send marketing communications (with consent)
  • Comply with legal obligations
  • Protect our business interests and prevent fraud
  • Provide, operate, and maintain our website.
  • Understand and analyze how you use our website.
  • Develop new products, services, features, and functionality.
  • Communicate with you, either directly or through one of our partners.

 

7. Data Sharing and Disclosure

We may share your personal data with:

  • Service Providers: IT support, payment processors, analytics providers, third-party vendors who provide services on our behalf, such as hosting, data analysis, and customer service.
  • Professional Partners: Research institutions, commercial companies, equipment manufacturers.
  • Legal Authorities: When required by law or to protect our rights and safety.
  • Business Transfers: In case of merger, acquisition, or sale.
  • We do not sell your personal data to third parties.

 

8. International Data Transfers

When we transfer personal data outside the EU or EEA, we ensure adequate protection through:

  • European Commission adequacy decisions.
  • Standard Contractual Clauses (SCCs).
  • Binding Corporate Rules.
  • Explicit consent when required.
  • Transferring to countries with an adequacy decision by the European Commission.
  • Using standard contractual clauses approved by the European Commission.

 

9. Data Retention

We retain personal data for as long as necessary to:

  • Fulfill the purposes outlined in this policy.
  • Comply with legal obligations.
  • Resolve disputes and enforce agreements.

Specific retention periods:

  • Contact inquiries: 3 years
  • Customer data: 7 years after contract termination
  • Marketing data: Until consent is withdrawn
  • Website analytics: 24 months
  • The retention period depends on the type of data and the purpose of processing.

 

10. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of Access: Request copies of your personal data.
  • Right to Rectification: Correct inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data.
  • Right to Restrict Processing: Limit how we use your data.
  • Right to Data Portability: Receive your data in a structured format.
  • Right to Object: Object to processing based on legitimate interests or direct marketing.
  • Right to Withdraw Consent: Withdraw consent at any time.
  • To exercise these rights, contact us at privacy@kalphatech.com.

 

11. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

  • Ensure website functionality.
  • Analyze website performance.
  • Provide personalized content.
  • Enable social media features.
  • Enhance user experience, analyze site usage, and assist in our marketing efforts.

You can manage cookie preferences through your browser settings. 

 

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit and at rest.
  • Access controls and authentication.
  • Regular security assessments.
  • Staff training on data protection.
  • Incident response procedures.
  • Protect personal data against unauthorized access, loss, destruction, or alteration.

 

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through our website or direct communication. Continued use of our services constitutes acceptance of the updated policy. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

 

14. Contact Information

For questions about this Privacy Policy or to exercise your rights, contact:

  • Email: privacy@kalphatech.com
  • Address: KalphaTech Ltd., Zelenjak 50, 10000 Zagreb, Croatia
  • Data Protection Officer: dpo@kalphatech.com