KALACALA · Creative Technology

KALACALALet's talk

LegalLast updated 4 August 2026

Legal notice and privacy

Who runs this site, what data we process, where it came from and how to have it deleted. No small print, because none is needed.

Legal notice

What this is

kalacala.com is the site of Kalacala, a creative technology studio: design, code and artificial intelligence. It explains what we do and how to reach us. Nothing is sold or charged through this site.

Using the site

Read it, quote it, link to it. Don't use it for anything unlawful or try to interfere with how it runs. If you find a security problem, write to us before telling anyone else — we'll be grateful and we'll fix it.

Intellectual property

The words, the visual system, the wordmark and the code are ours. The Kalacala name and mark can't be used without permission. Third-party marks belong to their owners.

Liability

Content is informational and may change without notice. Any prices or timelines mentioned are not a binding offer: what binds is a signed proposal. Links to other sites don't make us responsible for what's on them.

Governing law

Spanish law applies. Unless the law requires otherwise, the courts of Barcelona.

Privacy policy

Short version: we only process what we need in order to talk to you, we don't sell it to anyone, and you can ask us to delete it whenever you like.

Controller

Kalacala. For anything about your data, write to hello@kalacala.com: you reach us directly, with nobody in between.

What we process, and why

From the contact form: name, email, company if you give one, and your message. Used to reply and, if there's a project, to prepare the proposal. Nothing else — no profiling, no advertising, no automated decisions.

Legal basis

Your consent when you write to us, and legitimate interest in maintaining business relations where the contact is professional (GDPR art. 6.1.f, and art. 19 of the Spanish LOPDGDD).

Where your data came from, if you didn't give it to us

If we wrote to you first, your professional details — name, role, company phone or email — came from public sources: your company's website, your town council's business directory, a trade association listing or your public professional profile. We don't buy databases, and we don't scrape platforms that forbid it.

How long we keep it

Enquiries that don't become projects, one year. Client data, for as long as the relationship lasts and then as long as tax and accounting rules require — six years. If you ask to be removed, it's done straight away.

Who else sees it

Nobody who doesn't need to. The providers that keep this running: Vercel (hosting), Resend (delivering the contact form email, region pinned to Ireland) and Nominalia (the mailboxes). All act as processors and none use your data for their own purposes. We don't share data with third parties for advertising.

Transfers outside the EU

Some of these providers are US companies and may process data outside the European Economic Area. Where that happens it relies on the European Commission's standard contractual clauses or the adequacy framework in force.

Your rights

Access, rectification, erasure, restriction, objection and portability. Write to hello@kalacala.com; we answer within a month at most, usually the same day. If you think we've got it wrong, you can complain to the Spanish Data Protection Agency (aepd.es).

Cookies

No banner, because there's nothing to consent to

This site uses no advertising or tracking cookies, and shares your browsing with no social network. The typefaces are hosted here: nothing is requested from third-party servers, so your IP doesn't travel anywhere just because you're reading.

Cookieless analytics

We measure how many visits there are and which pages get read using analytics that set no cookies and identify nobody: no persistent identifier, no way to follow a person across visits, and nothing exportable to any other system.

The one cookie that exists

If we send you a password-protected proposal, opening it stores a technical cookie remembering that you did. It is strictly necessary for that access, lasts for the session and needs no consent.