PRIVACY POLICY

Last updated: 28 May 2026

Who is responsible for your data

The data controller is SOLYSIA ENERGY S.L.U. ("CALA"), Son Prohens, Primera Volta, 110, 07200 Felanitx (Illes Balears), CIF B16610438. For any privacy matter, contact us at hola@cala.market.

What data we collect

Account data: your email address; and, optionally, your display name, username, phone number, WhatsApp number, town, short bio, and preferred language.
Sign-in data: if you sign in with Google, we receive your email address and basic profile information from Google.
Listing data: the content you publish — titles, descriptions, photos, category, location (town), condition, and price.
Messages: the content of messages you exchange with other users through the platform.
Technical data: limited technical information necessary to operate the service securely (such as connection data and timestamps).

Why we use it and our legal basis

To create and manage your account, and to display your listings — performance of a contract (the Terms you accept).
To enable messaging between users — performance of a contract.
To send you sign-in links and essential service messages — performance of a contract.
To keep the platform secure and prevent fraud or abuse — our legitimate interest.
To comply with legal obligations where applicable — legal obligation.

We do not use your data for advertising and we do not sell your data.

What is public

Your listings and your public display name are visible to anyone using CALA. Do not include sensitive personal information in listing text or photos. Your email address is never shown publicly; other users contact you through CALA's internal messaging.

Who processes data on our behalf

We use trusted service providers who act as data processors under contract:

Supabase — database, authentication, and file storage (hosted in the EU, Frankfurt region).
Vercel — website hosting and content delivery.
Postmark — sending transactional emails (such as sign-in links).
Google — only if you choose to sign in with Google.

International transfers

Your core data is stored within the European Union. Where any processor transfers data outside the EU, it does so under appropriate safeguards (such as the European Commission's Standard Contractual Clauses).

How long we keep it

We keep your account data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain information to comply with legal obligations or resolve disputes. Messages are retained for the duration of the related conversation.

Your rights

You have the right to access, rectify, erase, restrict, port, or object to the processing of your personal data, and to withdraw consent at any time. To exercise these rights, contact hola@cala.market. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

Cookies

See our Cookie Policy for details on the cookies we use.

Security

We apply appropriate technical and organisational measures to protect your data, including encryption in transit and access controls.

Changes

We may update this policy. We will post the updated version here with a revised "last updated" date and, where the changes are significant, notify you.