This policy explains how Capla GmbH (“Capla”, “we”) processes personal data when you use this website, in accordance with the EU General Data Protection Regulation (GDPR).
Controller
Capla GmbH, Eichet 7b, 85777 Fahrenzhausen, Germany.
Email: info@caplagroup.com
What we collect and why
- Enquiry forms: your name, email, organisation, role, country, message and the consent you gave. We use this only to respond to your enquiry (Art. 6(1)(b) GDPR) and on the basis of your consent (Art. 6(1)(a)).
- Newsletter: your email address, processed on the basis of your explicit double opt-in consent (Art. 6(1)(a)). You can withdraw consent at any time.
- Server logs: technical data (e.g. IP address, browser) processed by our hosting and infrastructure providers to deliver and secure the site (Art. 6(1)(f) legitimate interest).
Processors
We use carefully selected service providers who process data on our behalf under data-processing agreements, including our database and authentication provider (Supabase) and our hosting and media providers. Where data is processed outside the EU/EEA, appropriate safeguards (such as EU Standard Contractual Clauses) are in place.
Retention
Enquiries are retained for up to 24 months and then deleted, unless a longer period is required to establish, exercise or defend legal claims. Newsletter data is kept until you unsubscribe.
Your rights
- Access to your personal data (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure (Art. 17) and restriction of processing (Art. 18)
- Data portability (Art. 20)
- Objection to processing based on legitimate interests (Art. 21)
- Withdrawal of consent at any time, without affecting prior processing
- Complaint to a supervisory authority
To exercise any of these rights, contact us at info@caplagroup.com.
Cookies
This site uses only cookies strictly necessary for its operation. We do not use non-essential advertising or analytics cookies.
For healthcare professionals
Product content on this site is intended for healthcare professionals. Product availability, indications and regulatory status vary by market.
This policy is a working draft and should be reviewed by legal counsel and completed with your final processor list before go-live.
