Privacy Policy

The controller responsible for processing personal data on this website is:

Hanki Lee
Stefan-Zweig-Straße 13
60431 Frankfurt am Main
Germany
Email: callaadmin@gmail.com

Depending on how you use CALLA, personal data may include:

• account data, such as your email address and authentication-related information
• profile data, such as your name or profile identity details, category, role, location, work preferences, working languages, portfolio details, and profile/contact settings
• posting data, such as opportunity details, compensation, work mode, application settings, and posting status
• application data, such as profile submissions made through CALLA
• support data, such as messages, attachments, and related information sent through contact or support forms
• technical data needed for secure operation, such as session-related information, request metadata, and basic server logs

CALLA processes personal data in order to:

• create and maintain user accounts
• enable sign-in and account access
• let users create, edit, and manage profiles
• let hirers create, edit, publish, pause, reactivate, or close postings
• compare saved profile details with published opportunities
• send tailored opportunity emails when alerts are enabled
• process applications made through CALLA
• let hirers review applicants who applied through CALLA
• respond to support or contact requests
• maintain the security, integrity, and stability of the service

Where the GDPR applies, CALLA relies in particular on the following legal bases:

• Article 6(1)(b) GDPR where processing is necessary to provide the service requested by the user, including account access, profile management, postings, matching-related functionality, and applications through CALLA
• Article 6(1)(f) GDPR where processing is necessary for legitimate interests such as service security, abuse prevention, debugging, fraud prevention, and basic product operation
• Article 6(1)(a) GDPR where consent is used, if CALLA introduces optional consent-based features such as non-essential cookies or optional communications in the future

CALLA uses Supabase Auth for account access. Email sign-in and session handling are managed through that service.

CALLA stores profile details and preferences so it can support account use, matching, and artist-side opportunity discovery.

If tailored alerts are enabled in your profile, CALLA may use your saved profile details and preferences to determine whether a published opportunity should trigger a matching email.

CALLA uses profile and posting data to help surface relevant opportunities. CALLA does not make legally binding decisions solely by automated means.

If an artist applies to a posting through CALLA, the relevant profile information may be made available to the hirer for that posting.

This may include profile information that the product is configured to share as part of CALLA’s internal application flow.

CALLA currently uses third-party service providers to operate core parts of the service, including:

• Supabase, for authentication and core application data
• Resend, for tailored opportunity email delivery

These providers process data only to the extent needed to support the service.

Where an artist applies through CALLA, relevant applicant or profile information may also be made available to the hirer connected to that posting.

CALLA may use service providers that process data in jurisdictions outside the European Economic Area, depending on service configuration and provider infrastructure.

Where personal data is transferred to a third country, CALLA will rely on the legal transfer mechanisms required under applicable data protection law, where relevant.

CALLA keeps personal data only for as long as necessary for the purposes described in this policy, unless a longer retention period is required by law.

In general:

• account and profile data may be kept while the account remains active and for a limited period afterwards where needed for security, recordkeeping, or legal reasons
• posting data may be kept while the account or posting relationship remains relevant, including where needed for operational or legal recordkeeping
• application data may be kept while the relevant posting and applicant history remain needed for product operation, dispute handling, or recordkeeping
• support messages and attachments may be kept as long as needed to handle the request and related follow-up
• basic email delivery status and technical logs may be kept for a limited period to support alert delivery, debugging, and service security

Depending on the applicable law, you may have the right to:

• request access to your personal data
• request correction of inaccurate personal data
• request deletion of personal data
• request restriction of processing
• object to certain processing
• receive your data in a portable format, where applicable
• withdraw consent at any time, where processing is based on consent
• lodge a complaint with a supervisory authority

Some personal data is necessary for CALLA to provide core account and service functions. If you do not provide required account, profile, or posting information, some parts of the service may not work properly or may not be available.

If you have questions about this Privacy Policy or about how personal data is handled on CALLA, please contact:

callaadmin@gmail.com