Privacy Policy

How we handle your personal data

Last updated: 7 May 2026

This policy describes how Calumea collects, uses, and protects the personal data of users who visit this website and use the application, in compliance with EU Regulation 2016/679 (GDPR).

Data Controller

The data controller is Calumea (hereinafter «Calumea», «we»). For any privacy-related matter you can reach us through our contact page.

Data collected and purposes

We collect only the data strictly necessary to provide our services:

  • Contact data

    Name and e-mail provided through the contact form, used solely to respond to your request.

  • Browsing data

    IP address, browser type, and pages visited, collected automatically by the server to ensure proper website operation and for security purposes. This data is not linked to identifiable user profiles.

  • App account data

    When you create a Calumea account, we collect your e-mail and the credentials required for authentication. Data from IoT devices linked to your account is processed to deliver the remote control service.

Legal basis for processing

We process your data on the following legal grounds: (a) performance of a contract or pre-contractual measures, for data required to deliver the app service; (b) consent, for marketing communications; (c) legitimate interest, for browsing data collected for website security.

Data retention

Contact data is retained for as long as needed to handle your request and for a maximum of 12 months thereafter. App account data is retained for the duration of the contractual relationship and for 12 months following account deletion, unless different legal obligations apply.

Data sharing and transfer

We do not sell or transfer your data to third parties for commercial purposes. Data may be shared with technical providers (hosting, cloud infrastructure) acting as data processors under GDPR-compliant agreements. We do not transfer data outside the European Economic Area unless appropriate safeguards are in place.

Your rights

Under the GDPR you have the right to:

  • Access your personal data and obtain a copy
  • Rectify inaccurate or incomplete data
  • Request erasure of your data ('right to be forgotten')
  • Restrict or object to processing in certain circumstances
  • Receive your data in a structured format (portability)
  • Withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal

To exercise your rights, contact us through our contact page .

You also have the right to lodge a complaint with your local supervisory authority.

Security

We apply appropriate technical and organisational measures to protect your data from unauthorised access, loss, or accidental disclosure. Communication between the app and our servers is encrypted via TLS.

Changes to this policy

We may update this policy to reflect regulatory or operational changes. The 'Last updated' date at the top of the page indicates when it was last modified. We encourage you to review it periodically.

Contact

For any questions about our privacy policy, write to us from our contact page .