Privacy Policy

Founded in 2025, CastleTech was born with a clear mission to transform the technological landscape through innovative, robust, and secure solutions. Our name reflects our fundamental purpose: to build a digital fortress for our clients, where efficiency, security, and cutting-edge technology go hand in hand. In a constantly evolving market, we began our journey focused on anticipating the needs of the digital ecosystem. We combine the expertise of professionals passionate about innovation to develop customized strategies that drive growth and digital transformation for companies of all sizes.

We believe that technology should be an engine for simplification and progress. Therefore, every project we undertake is guided by technical excellence, transparency, and an unwavering commitment to the success of those who trust our work. At CastleTech, we don't just look to the future; we help build it, ensuring that your business is always one step ahead and fully protected.

We only collect what is strictly necessary to provide and improve our services:

• Identification data: name, e-mail address and, when applicable, phone number and profile photo.
• Account data: credentials in encrypted form, roles, permissions and session activity.
• Content you submit: contact messages, job applications, comments, testimonials and newsletter subscriptions.
• Technical data: IP address, browser, device, operating system and pages visited.
• Cookie data: consent preferences and analytics or marketing identifiers, when authorized by you.

• Create and manage your account, sessions and access permissions.
• Answer contact requests, quotes, job applications and support tickets.
• Deliver, maintain and improve the features of our platform.
• Send newsletters and service communications, when you have subscribed.
• Detect, prevent and investigate fraud, abuse and security incidents.
• Comply with legal, accounting and regulatory obligations.

• Consent: newsletters, non-essential cookies and optional communications.
• Contract performance: account creation, service delivery and client support.
• Legal obligation: tax, accounting and regulatory record keeping.
• Legitimate interest: platform security, fraud prevention and service improvement.

We use essential cookies to keep your session active and the site secure. Analytics and marketing cookies are only activated after your explicit consent, which you may change at any time.

• Essential: always active — authentication, session and security. Cannot be disabled.
• Analytics: anonymous usage statistics that help us improve the experience.
• Marketing: personalized content and campaign measurement.

Your data may be shared only with:

• Infrastructure providers: hosting, database and backup services under contract.
• Communication providers: e-mail delivery and newsletter distribution.
• Public authorities: exclusively when required by a valid legal order.

All partners are bound by confidentiality and data protection agreements.

• Account data: kept while your account remains active.
• Contact messages: up to 24 months after the last interaction.
• Job applications: up to 12 months after the recruitment process ends.
• Access and security logs: up to 12 months.
• Legal and accounting records: for the period required by applicable law.

• Password hashing and encryption of sensitive information.
• Role and permission based access control with session tracking.
• Session idle timeout and protection against brute-force login attempts.
• Anti-forgery tokens on every form submission.
• Periodic backups and continuous activity monitoring.

• Access: obtain a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request the deletion of your data, subject to legal limits.
• Restriction and objection: limit or object to specific processing activities.
• Portability: receive your data in a structured, machine-readable format.
• Withdraw consent: at any time, without affecting prior lawful processing.