Legal notice and privacy

kalacala.com is the site of Kalacala, a studio of engineering, design and artificial intelligence. It explains what we do and how to reach us. Nothing is sold or charged through this site.

Read it, quote it, link to it. Don't use it for anything unlawful or try to interfere with how it runs. If you find a security problem, write to us before telling anyone else — we'll be grateful and we'll fix it.

The words, the visual system, the wordmark and the code are ours. The Kalacala name and mark can't be used without permission. Third-party marks belong to their owners.

Content is informational and may change without notice. Any prices or timelines mentioned are not a binding offer: what binds is a signed proposal. Links to other sites don't make us responsible for what's on them.

Spanish law applies. Unless the law requires otherwise, the courts of Barcelona.

Kalacala. For anything about your data, write to hola@kalacala.com: you reach us directly, with nobody in between.

From the contact form: name, email, company if you give one, and your message. Used to reply and, if there's a project, to prepare the proposal. Nothing else — no profiling, no advertising, no automated decisions.

Your consent when you write to us, and legitimate interest in maintaining business relations where the contact is professional (GDPR art. 6.1.f, and art. 19 of the Spanish LOPDGDD).

If you subscribe, we store your email address and nothing else. The legal basis is your consent, and we ask for it twice: you tick a box —never pre-ticked— and then confirm from a link sent to your inbox. Until you click that link we store nothing, so nobody can sign you up using your address. We send one email a month about what we learn working; there is no third-party advertising and no profiling, and we do not measure whether you open it because these emails carry no tracking pixel. The list is handled by Resend, region pinned to Ireland. You can unsubscribe from the link in every issue: one click, immediate. If you unsubscribe, your address is deleted. And writing to us through the contact form does not subscribe you to anything.

If we wrote to you first, your professional details — name, role, company phone or email — came from public sources: your company's website, your town council's business directory, a trade association listing or your public professional profile. We don't buy databases, and we don't scrape platforms that forbid it.

Enquiries that don't become projects, one year. Client data, for as long as the relationship lasts and then as long as tax and accounting rules require — six years. If you ask to be removed, it's done straight away.

Nobody who doesn't need to. The providers that keep this running: Vercel (hosting), Resend (delivering the contact form email, region pinned to Ireland) and Nominalia (the mailboxes). All act as processors and none use your data for their own purposes. We don't share data with third parties for advertising.

Some of these providers are US companies and may process data outside the European Economic Area. Where that happens it relies on the European Commission's standard contractual clauses or the adequacy framework in force.

Access, rectification, erasure, restriction, objection and portability. Write to hola@kalacala.com; we answer within a month at most, usually the same day. If you think we've got it wrong, you can complain to the Spanish Data Protection Agency (aepd.es).

This site uses no advertising or tracking cookies, and shares your browsing with no social network. The typefaces are hosted here: nothing is requested from third-party servers, so your IP doesn't travel anywhere just because you're reading.

We measure how many visits there are and which pages get read using analytics that set no cookies and identify nobody: no persistent identifier, no way to follow a person across visits, and nothing exportable to any other system.

If we send you a password-protected proposal, opening it stores a technical cookie remembering that you did. It is strictly necessary for that access, lasts for the session and needs no consent.