GDPR

This notice describes how Kalt Institute handles personal data under the EU General Data Protection Regulation and the UK GDPR, where they apply.

Controller

Kalt Institute is the controller for personal data collected through this website. Reach us through contact.

What we process

• Information you send us, such as your name, email address, and message.
• Account details, if you sign in.
• Technical logs required to operate and secure the site, such as IP address and the time of a request.

Why

We process this data to reply to you, operate the site, keep it secure, and meet legal obligations.

The legal bases are:

• Steps you ask us to take when you write to us, or a contract if you hold an account (Article 6(1)(b)).
• Our legitimate interests in operating and securing the site (Article 6(1)(f)).
• Legal obligations, where they apply (Article 6(1)(c)).

Sharing

We never share personal data. We do not sell it, and we do not pass it to advertisers, brokers, or other third parties. See also our privacy page.

Retention

We keep correspondence for as long as we need it to handle the matter, then delete it. Security logs are kept only as long as needed to operate the site.

Your rights

Where the GDPR applies, you may ask us to:

• Confirm whether we hold your data, and for a copy of it.
• Correct inaccurate data.
• Delete it, or restrict how we use it.
• Provide a portable copy of data you gave us.
• Object to processing based on legitimate interests.

You may also lodge a complaint with your supervisory authority. Requests go through contact.