Privacy Notice

Controller

The controller responsible for the data processing on this website is

The Cala Mama Company
2 rue Guenot
75011 Paris
France

Represented by the Managing Director Raphaël Becanne.

Data collection

Providing this website requires the processing of personal data, such as your IP address. This processing is necessary in order to retrieve the content displayed on this website (including its functions) and for reasons of IT security measures.

The processing of your personal data for the provision of this website is carried out on the basis of our overriding legitimate interest (Art. 6(1)(f) GDPR). In order to provide this website, it is technically necessary for us to process certain personal data (e.g. the IP address).

As part of the required balancing of interests, we have weighed your interest in confidentiality against our interests in providing this website. Your interest in confidentiality is outweighed in each case. Otherwise, we would not be able to provide you with this website.

We use service providers to provide our website. For this purpose, we transmit personal data to these service providers. These service providers are contractually obliged by us to exercise the same care in handling personal data as we do ourselves.

Software update check

On startup, the software “The Cala Mama Data Station” makes a single request to our server (calamama.io) to check whether a newer version is available. For technical reasons this transmits your IP address, without which no response could be delivered. The IP address is processed solely to answer the request and is neither stored nor linked to any other data. The software transmits no further data, in particular no usage data and no information about your system.

The legal basis for this processing is our legitimate interest (Art. 6(1)(f) GDPR) in being able to inform you about available updates, in particular security updates.

Embedded YouTube videos

On our home page we embed videos from the YouTube platform. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube’s privacy-enhanced mode (youtube-nocookie.com).

When you visit our website, only a preview image is shown at first. Our server retrieves this preview image and the details of the current video from YouTube itself at regular intervals; no visitor data is transmitted in the process. Loading the page therefore transmits no data to YouTube.

The video is loaded from YouTube only when you click the preview image. YouTube then receives in particular your IP address, the address of our website, and technical information about your browser and device. YouTube may also store or read information in your browser (e.g. cookies or local storage). If you are logged in to a Google account, YouTube can associate the playback with that account.

The legal basis is your consent, which you give by clicking the preview image (Art. 6(1)(a) GDPR, Article 82 of loi n° 78-17 du 6 janvier 1978). We do not store this decision; on every page visit the video is loaded only after a new click. You can withdraw your consent at any time with effect for the future by stopping playback and deleting the information stored by YouTube in your browser settings.

Once the video has loaded, Google processes the data under its own responsibility. Google also processes data in the USA; Google LLC is certified under the EU-US Data Privacy Framework. For more information, see Google’s privacy policy: policies.google.com/privacy.

Data disclosure

At least some of the data we collect as described above is passed on to processors. They process your data only on our instructions and not for their own purposes (Art. 28, 29 GDPR). These are the following companies, which process data for the purposes stated below:

Data transfers to third countries

At least some of the data we collect as described above may be transferred to third countries. With respect to the USA, the data transfer is based on the EU-US Data Privacy Framework. In this respect, the European Commission certifies, by way of an adequacy decision, a level of data protection comparable to the EEA standard. Beyond that, we do not transfer your personal data to countries outside the EU or the EEA or to international organisations, unless expressly stated otherwise in this privacy notice.

The software is sold through Stripe as merchant of record through Stripe Managed Payments (customers see “Sold through Link”; the invoicing entity is Sold through Link, LLC). We receive from Stripe the contact data required to issue and deliver the license key (name, email address) and process it for this purpose. Stripe’s privacy policy additionally applies to the order process.

Retention period

We delete your personal data when the respective purpose of storage no longer applies and no legal provision requires retention.

Your rights

Right to object

If your personal data is processed on the basis of Art. 6(1)(f) GDPR (data processing to safeguard legitimate interests), you have the right to object to the processing at any time. You can declare your objection via contact@calamama.io.

Further rights

Where the legal requirements are met, you have the following further rights with regard to your personal data:

• the right of access,
• the right to rectification or erasure,
• the right to restriction of processing,
• the right to data portability.

Finally, you have the right to complain to a data protection authority about our processing of your personal data.

Data security

We take appropriate technical and organisational security measures to protect the personal data we process against accidental or intentional manipulation, loss, destruction, or unauthorised access.