Privacy Policy

Last updated: April 2026

1. Data Controller

The data controller is KaliSurf Web Agency, VAT IT05857820871, reachable via WhatsApp at the number shown on this website.

2. Data We Collect

When you contact us via WhatsApp or use this website, we may collect:

  • Your name and WhatsApp number (when you initiate contact)
  • Information about your business (provided voluntarily during our conversation)
  • Technical data from your browser (IP address, browser type) via server logs

We do not use tracking cookies or third-party analytics on this website.

3. Purpose and Legal Basis

We process your data for the following purposes:

  • Service delivery — to build and deliver your website (legal basis: contract performance)
  • Communication — to send you proposals, updates and invoices (legal basis: contract performance)
  • Legal obligations — to comply with Italian and EU tax and accounting laws (legal basis: legal obligation)

4. Third-Party Services

We use the following third-party services that may process your personal data:

  • WhatsApp (Meta) — for communication. Meta's privacy policy applies.
  • Stripe — for payment processing. Stripe's privacy policy applies.
  • PayPal — for payment processing. PayPal's privacy policy applies.

We do not sell or share your personal data with third parties for marketing purposes.

5. Data Retention

We retain your data for as long as necessary to deliver the service and comply with legal obligations (typically 10 years for accounting/tax records under Italian law). After that, your data is securely deleted.

6. Your Rights (GDPR)

Under the GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure ("right to be forgotten")
  • Restrict or object to processing
  • Data portability
  • Lodge a complaint with the Italian Data Protection Authority (Garante della Privacy)

To exercise any of these rights, contact us via WhatsApp or email at the address shown on this website.

7. Cookies

This website uses only technically necessary cookies required for the site to function. We do not use profiling, tracking or advertising cookies. No consent banner is required for technically necessary cookies under Italian and EU law.

8. Changes to This Policy

We may update this policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of our services after changes constitutes acceptance of the updated policy.