Privacy Notice

Caskade ("we," "us," or "our") is committed to protecting the personal data of the individuals we interact with in the course of providing our B2B water reuse evaluation services. This Privacy Notice explains what personal data we collect, why we collect it, how we use it, and the rights you have in relation to it.

This Notice applies to visitors to our website, prospective clients, representatives of our business clients, and any other individuals whose personal data we process.

Caskade is a company registered in the United States, with operations primarily in Spain and the EU, where it operates under the trade name EvalAgua in Southern Europe and Spanish-speaking markets.

For data protection enquiries, please contact us using the details in Section 11.

We may collect and process the following categories of personal data:

We do not intentionally collect sensitive personal data (such as health data, biometric data, or data revealing racial or ethnic origin). Please do not submit such data through our platform.

We collect personal data:

• Directly from you, when you fill in forms, contact us, or engage our services;
• Automatically, through cookies and similar technologies when you visit our website;
• From publicly available sources, including company registries, environmental regulatory databases, and professional networking platforms;
• From third-party tools and integrations used in our business operations (e.g. CRM, email platforms, prospecting tools).

We process personal data for the following purposes:

Where we rely on legitimate interests as a legal basis, we have assessed that our interests are not overridden by your rights and freedoms, given the B2B context of our operations.

We do not sell personal data. We may share personal data with:

• Service providers and sub-processors who assist us in operating our platform and business (e.g. cloud hosting, CRM, email delivery, analytics). These parties process data only on our documented instructions.
• Professional advisors such as lawyers and accountants, subject to confidentiality obligations.
• Regulatory or public authorities, where required by law or a binding legal order.
• Successors, in the event of a merger, acquisition, or sale of assets, subject to equivalent data protection commitments.

Caskade is incorporated in the United States and operates primarily from Spain. Personal data may be transferred to, and processed in, countries outside the European Economic Area (EEA), including the United States.

Where such transfers occur, we ensure appropriate safeguards are in place in accordance with applicable EU/EEA data protection law, such as Standard Contractual Clauses approved by the European Commission, or other lawful transfer mechanisms.

We retain personal data only for as long as necessary for the purposes set out in this Notice, or as required by law.

• Client and prospecting data is retained for the duration of the business relationship and for a reasonable period thereafter (typically up to 3 years) for legal and business continuity purposes.
• Website analytics data is retained in aggregated or anonymised form.
• Communications are retained as long as they are relevant to our business relationship or legal obligations.

When data is no longer needed, we securely delete or anonymise it.

Our website may use cookies and similar technologies to enhance your experience and collect usage data. You may manage your cookie preferences through your browser settings or any consent management tool provided on our website.

For more detail on the cookies we use, please refer to our Cookie Policy (if separately published).

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Right of access — to obtain a copy of the personal data we hold about you;
• Right to rectification — to request correction of inaccurate or incomplete data;
• Right to erasure — to request deletion of your data in certain circumstances;
• Right to restriction of processing — to request that we limit how we use your data;
• Right to data portability — to receive your data in a structured, machine-readable format;
• Right to object — to object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent — where processing is based on consent, to withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us as set out in Section 11. We will respond within the timeframes required by applicable law (typically one month).

If you are located in the EEA, you also have the right to lodge a complaint with your local data protection authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD):

www.aepd.es

For any questions, requests, or complaints relating to this Privacy Notice or our data processing practices, please contact us at:

contact@evalagua.com

We may update this Privacy Notice from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated Notice on our website. The date at the top of this Notice indicates when it was last revised.