Privacy Policy.

Last updated: June 2026

1. Controller

The controller responsible for data processing on this website is:

Cala Capital GmbH
Alsterarkaden 12
D-20354 Hamburg, Germany
Email: info@cala-capital.com
Phone: +49 172 5802265

Managing Directors: Nikolaus Reus, Claas-Patrick Heiland, Jaan-Frederick Heiland

2. Data We Collect

When you use the contact form on our website, we collect the following personal data:

• First and last name
• Email address
• Phone number (optional)
• Company name (optional)
• Inquiry type and message content

When you visit our website, our server automatically records the following technical data: IP address, browser type and version, operating system, referrer URL, date and time of access. This data is used solely for technical operation and security purposes.

3. Purpose and Legal Basis

We process your contact form data for the purpose of responding to your inquiry (Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures, and/or Art. 6(1)(f) GDPR – legitimate interests).

Technical server data is processed on the basis of Art. 6(1)(f) GDPR to ensure the secure and stable operation of our website.

4. Data Retention

We retain contact form data for as long as necessary to process your inquiry and for any follow-up correspondence, or as required by applicable law. Technical log data is typically deleted after 7 days.

5. Third-Party Services

This website does not use external tracking, analytics, or advertising services. All fonts (Inter, Cormorant Garamond) and map libraries (Leaflet.js) are hosted locally on our server. No data is transmitted to third-party servers for these services.

The interactive map uses OpenStreetMap / CARTO tile data to render map tiles. When the portfolio map section is loaded, your browser requests map tiles from CARTO's servers (basemaps.cartocdn.com). This involves the transmission of your IP address to CARTO. This processing is based on Art. 6(1)(f) GDPR (legitimate interest in providing map functionality). See carto.com/privacy for details. If you do not wish for this transmission, please scroll past the portfolio map section.

6. Cookies

This website does not use tracking cookies, analytics cookies, or marketing cookies. No consent banner is required. We only use technically necessary browser caching for performance purposes. No personal data is stored in cookies.

7. Right to Object

Where we process your personal data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. You can exercise this right by contacting us at info@cala-capital.com.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

To exercise any of these rights, please contact us at info@cala-capital.com. You also have the right to lodge a complaint with a supervisory authority.

9. Data Security

Our website uses SSL/TLS encryption for all data transmission. We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or manipulation.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page. We encourage you to review it periodically.