GDPR Policy

1. Lawful Basis for Processing

Where GDPR applies, we may process personal data based on one or more of the following lawful bases:

• Consent – where you have provided consent for a specific purpose.
• Contract – where processing is necessary to provide requested services or manage a business engagement.
• Legal Obligation – where processing is required to comply with applicable laws or regulations.
• Legitimate Interests – where processing is necessary for legitimate business purposes and those interests do not override applicable privacy rights.

2. Personal Data We May Process

Depending on your interaction with Calibreo, we may process business contact information such as:

• Name
• Business email address
• Business phone number
• Company or organization name
• Information submitted through contact or business inquiry forms
• Service and project requirements
• Communications relating to business inquiries or engagements

We may also process limited technical information associated with website use, such as IP address, browser information, device information, and website usage data, where applicable.

3. How We Use Personal Data

We may use personal data to:

• Respond to business inquiries
• Discuss enterprise print infrastructure requirements
• Provide and manage agreed services
• Prepare quotations, proposals, or service documentation
• Communicate regarding business engagements
• Improve website functionality and performance
• Maintain website and information security
• Meet legal and regulatory obligations
• Maintain appropriate business records

4. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including:

• Providing or managing business services
• Maintaining business records
• Resolving disputes
• Meeting contractual obligations
• Complying with applicable legal or regulatory requirements

When personal data is no longer required, it may be securely deleted or otherwise handled in accordance with applicable requirements.

5. Your Rights Under GDPR

Where GDPR applies, you may have the right to:

• Access your personal data
• Correct inaccurate or incomplete personal data
• Request deletion of your personal data where applicable
• Restrict certain processing activities
• Object to certain processing activities
• Withdraw consent where processing is based on consent
• Request data portability where applicable

These rights may be subject to applicable legal limitations and exceptions.

6. Data Security

Calibreo takes reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

7. Third-Party Service Providers

We may use trusted third-party providers for services such as:

• Website hosting
• Analytics
• Website security
• Communications
• Technical infrastructure
• Business operations

Where applicable, these providers may process personal data on our behalf and are expected to handle information in accordance with applicable contractual and legal requirements.

8. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), Calibreo will seek to use appropriate safeguards where required by applicable data protection laws.

Such safeguards may include applicable contractual or other legally recognized transfer mechanisms.

9. Cookies and Similar Technologies

Our website may use cookies and similar technologies for essential functionality, preferences, analytics, security, and website performance.

For additional information about how cookies are used and managed, please review our Cookie Policy.

10. Data Breach

Where required by applicable law, Calibreo will take appropriate steps to assess and respond to personal-data security incidents and make required notifications to relevant authorities or affected individuals.

11. Exercising Your GDPR Rights

If you would like to exercise a GDPR right or have a question regarding the processing of your personal data, please contact us through the business contact information provided on our website.

When making a request, we may need sufficient information to verify your identity and properly process the request.

12. Changes to This GDPR Policy

Calibreo may update this GDPR Policy periodically to reflect changes in applicable laws, regulations, technology, or business practices.