Personal Data Processing

1. Operator information

• Operator: CALISERO S.R.L.
• Registered office: Strada Pășunii 7A, Brașov, România
• Unique registration code: RO31869276
• Trade Registry number: J08/949/2013
• Phone: +4 0742 350 350
• Email: [email protected]

2. What categories of personal data we process

We generally collect your personal data directly from you, so you control the information you provide. For example:

When you create a Calisero account, you provide your email address, name, phone number, and billing details.

On our website we may store and collect information in cookies and similar technologies.

We do not collect or otherwise process sensitive data categories as defined by the GDPR.

We do not seek to collect or process data of minors under 16 years of age.

3. Purposes and legal grounds of processing

We use your personal data for the following purposes:

1. To provide Calisero services to you

This general purpose may include, as applicable:

• Creating and managing the Calisero account;
• Billing for Calisero services;
• Processing and resolving support requests;

Processing for these purposes is usually necessary to conclude and perform a contract between Calisero and you. Some processing is also required by applicable law, including tax and accounting legislation.

2. To protect our legitimate interests

We may use or share information to protect our rights and business. This may include:

• Protecting the website and Calisero platform users from cyberattacks;
• Preventing and detecting fraud attempts, including sharing information with competent public authorities;
• Managing various other risks.

These processing activities are based on our legitimate interest in protecting our business, while ensuring a balance between our interests and your fundamental rights and freedoms.

In some cases we also rely on legal obligations, such as securing assets as required by applicable law.

4. How long we store your personal data

As a rule, we store your personal data as long as you have a Calisero account. You can request deletion of certain information or account closure at any time; we will comply subject to retaining data where required by law or our legitimate interests (for example accounting or fraud prevention).

5. Who we share your personal data with

Where applicable, we may transmit or grant access to your personal data to the following recipients:

• payment/banking service providers (MobilPay);
• IT service providers;
• accounting service providers (SmartBill);
• web hosting providers we use (Digital Ocean, Romarg);

If we have a legal obligation or it is necessary to protect a legitimate interest, we may also disclose certain personal data to public authorities.

We ensure third-party private entities access your data in line with data protection and confidentiality requirements, under agreements concluded with them.

6. Countries where we transfer your personal data

We currently store and process your personal data in Romania.

We may transfer certain personal data to entities located in the European Union or outside it, including countries without an EU adequacy decision.

We will always take measures to ensure any international transfer is handled carefully to protect your rights and interests.

You can contact us at any time, using the details above, to learn more about the countries where we transfer your data.

7. How we protect your personal data

We commit to securing personal data through appropriate technical and organizational measures, in line with industry standards.

Data transmission uses modern encryption algorithms and is stored on secure servers with redundancy.

Payments are processed through MobilPay; any payment information is encrypted using HTTPS with TLS encryption.

Despite these measures, transmitting information over the Internet or other public networks is not fully secure, and data may be viewed or used by unauthorized third parties. We cannot be responsible for vulnerabilities in systems outside our control.

8. Your rights

The GDPR grants you several rights regarding your personal data. You may request access, correction of errors, or object to processing. You may also file a complaint with the supervisory authority or take the matter to court. Where applicable, you may request data deletion, restrict processing, or request data portability.

More information about each right is available in the table below.

To exercise your rights, contact us using the details above.

Please note the following when exercising these rights:

• Identity. We take confidentiality seriously. Please send requests from the email address associated with your Calisero account; otherwise we may ask for additional information to verify your identity.
• Fees. We do not charge fees for exercising your rights unless the request is unfounded, repetitive, or excessive, in which case a reasonable fee may apply. We will inform you of any fee before resolving the request.
• Response time. We aim to respond to valid requests within 30 days; if requests are complex or multiple, we may extend this to 60 days.

Third-party rights: we will not fulfill a request if it would adversely affect the rights and freedoms of other data subjects.