This policy explains how Capla GmbH (“Capla”, “we”) processes personal data when you use this website, in accordance with the EU General Data Protection Regulation (GDPR).
Controller
Capla GmbH, Eichet 7b, 85777 Fahrenzhausen, Germany.
Email: info@caplagroup.com
What we collect and why
- Enquiry forms: your name, email, organisation, role, country, message and the consent you gave. We use this only to respond to your enquiry (Art. 6(1)(b) GDPR) and on the basis of your consent (Art. 6(1)(a)).
- Newsletter: your email address, processed on the basis of your explicit double opt-in consent (Art. 6(1)(a)). You can withdraw consent at any time.
- Server logs: technical data (e.g. IP address, browser) processed by our hosting and infrastructure providers to deliver and secure the site (Art. 6(1)(f) legitimate interest).
Processors
We use carefully selected service providers who process data on our behalf under data-processing agreements, including our database and authentication provider (Supabase) and our hosting and media providers. Where data is processed outside the EU/EEA, appropriate safeguards (such as EU Standard Contractual Clauses) are in place.
Retention
Enquiries are retained for up to 24 months and then deleted, unless a longer period is required to establish, exercise or defend legal claims. Newsletter data is kept until you unsubscribe.
Your rights
- Access to your personal data (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure (Art. 17) and restriction of processing (Art. 18)
- Data portability (Art. 20)
- Objection to processing based on legitimate interests (Art. 21)
- Withdrawal of consent at any time, without affecting prior processing
- Complaint to a supervisory authority
To exercise any of these rights, contact us at info@caplagroup.com.
Cookies and measurement
We use no advertising cookies, no advertising networks and no third-party analytics service. Nothing you do here is sold or shared with anyone outside Capla. What we record depends on how you answer the banner, and the three answers are genuinely different.
If you accept. We set two cookies: one remembering your answer, and one holding a random identifier for your browser. That identifier lets us see which pages were read in the same visit, and that a later visit came from the same browser. For each page we record its address, the site that linked you to it, how long the page was open, the country your connection reaches us from, whether you are on a phone, tablet or computer, the address your request arrived from, and the browser it identified itself as. The cookies last 180 days.
If you do not answer. Nothing is stored on your device and no identifier is created, so nothing links one page to another or one visit to another. We do record what any web server receives with a request in any case: the page, the referring site, the address the request came from, the browser it identified itself as, and a country derived from that address.
If you decline. We keep a cookie recording only that you said no, so we do not ask again, and we add one to a daily count of how often people decline. We record nothing else: not the page you were on, not your address, not the time. That count cannot describe you or anyone else.
We keep only the name of a referring site, never the full address you arrived from, which can carry personal information in its query string. Addresses and browser identifiers are deleted after 90 days; the counts they contributed to remain. You can change your answer at any time by clearing this site’s cookies in your browser, which makes us ask again.
For healthcare professionals
Product content on this site is intended for healthcare professionals. Product availability, indications and regulatory status vary by market.
This policy is a working draft and should be reviewed by legal counsel and completed with your final processor list before go-live.