Calisan Solutions SL
Privacy Policy
Last updated: 30 September 2026
1. Who we are
The data controller is Calisan Solutions SL, represented by Jezabel Barroumères. You can contact us at office@calisan.io.
This policy applies to personal data collected through the Speed Matchmaking registration forms available at speed-matchmaking.calisan.io.
2. What data we collect
When you register for a Speed Matchmaking event we collect the following personal data:
- IdentityFull name
- ContactEmail address, LinkedIn profile URL, Instagram handle
- LocationCity of residence
- ProfessionalJob title or role, industry, business stage
- PreferencesNetworking goals, topics of interest, conversation style, event comfort preferences
- Consent recordsWhich consent options you selected and when
We do not collect special category data (health, ethnicity, religion, etc.).
3. Why we collect it — legal basis
We collect and process your data on the basis of your freely given, informed consent (GDPR Article 6(1)(a)). You provide this consent by ticking the consent checkboxes before submitting the registration form.
We use your data exclusively to:
- Organise and deliver the Speed Matchmaking experience you registered for
- Pair you with a curated match based on your profile and goals
- Send you event communications, including your match details and reminders (where you have consented)
- Improve future editions of the event
We will never sell your data or use it for unrelated marketing.
4. Use of artificial intelligence
Where you have consented, we use AI-assisted tools (specifically OpenAI's language models) to analyse your form responses and support the matching process. The AI helps us identify relevant pairings based on complementary goals, expertise and preferences.
In accordance with GDPR Article 22, no purely automated decision carries legal or similarly significant effect on you. The final matching decision is always reviewed and confirmed by a human member of the Calisan team. You have the right to request human review of any matching outcome.
If you do not consent to AI-assisted matching, you may still register — tick only the consents you agree with. Matches for non-consenting participants are made manually.
5. Who we share your data with
We use the following third-party processors who act strictly on our instructions:
- SupabaseDatabase hosting (EU region). Stores your registration data securely.
- OpenAIAI processing for match analysis. Data is not used to train OpenAI models under our API agreement.
- CloudflareCAPTCHA protection (Turnstile) to prevent spam submissions. No personal data is stored by Cloudflare beyond the verification token.
- VercelWeb hosting infrastructure. No personal data is stored at this layer.
We do not transfer your data outside the European Economic Area without adequate safeguards.
6. How long we keep your data
We retain your registration data for 12 months after the event you registered for, unless you request deletion sooner. After this period your data is permanently deleted from our systems.
If you have consented to receive future event communications, we will retain only your email address and name until you unsubscribe or withdraw consent.
7. Your rights under GDPR
You have the following rights regarding your personal data. To exercise any of them, email us at office@calisan.io. We will respond within 30 days.
- AccessRequest a copy of the data we hold about you.
- RectificationAsk us to correct inaccurate or incomplete data.
- ErasureAsk us to delete your data ("right to be forgotten").
- PortabilityReceive your data in a structured, machine-readable format.
- RestrictionAsk us to limit how we process your data while a concern is being resolved.
- ObjectionObject to processing based on legitimate interests.
- Withdraw consentWithdraw any consent you have given at any time, without affecting the lawfulness of prior processing.
- Human reviewRequest that a human reviews any AI-assisted matching outcome.
8. Complaints
If you believe we have not handled your data correctly, you have the right to lodge a complaint with a supervisory authority. In Spain the competent authority is the Agencia Española de Protección de Datos (AEPD) — www.aepd.es.
We would always appreciate the chance to resolve any concern directly first — please contact us before escalating.
9. Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Material changes will be communicated to registered participants by email.