Tekally – Privacy Policy & Data Protection Statement

Effective Date: [Septembre-1-2025]

Tekally (“Tekally,” “we,” “our,” or “us”) is firmly committed to protecting the privacy, integrity, and confidentiality of all personal and business information entrusted to us in the course of our operations. This Privacy Policy sets forth, in accordance with the highest international legal and compliance standards, the principles and procedures governing the collection, use, processing, storage, transfer, and protection of such information. Our practices are designed to ensure compliance with applicable laws and regulatory frameworks, including the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Personal Information Protection and Electronic Documents Act (PIPEDA), the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) of Mexico, the United States–Mexico–Canada Agreement (USMCA), and the quality and security requirements mandated by ISO/IEC 17025. By accessing or using our website, submitting information to us, or engaging with our services, you acknowledge that you have read, understood, and agreed to the terms set forth herein.

Tekally acts as the Data Controller for the personal data collected in the context of its business and commercial activities. Our headquarters and full contact details are available through our official communication channels. For purposes of compliance with the GDPR and other applicable privacy regulations, Tekally has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and for serving as the point of contact for any inquiries, complaints, or requests related to the exercise of data protection rights. The DPO may be contacted through the dedicated email address provided in the Contact section of this Policy.

We collect personal information through various interactions, including, but not limited to, communications initiated by you through our website or other channels, the completion of online forms, the submission of commercial inquiries, participation in quotation or procurement processes, the execution of contractual agreements, and recruitment activities. The data collected may consist of identification and contact information such as names, company details, positions held, addresses, telephone numbers, and email addresses; technical and business information including purchase orders, technical specifications, CAD drawings, compliance certifications, and delivery instructions; and, where applicable, professional background and qualifications relevant to recruitment processes. Additionally, certain technical data may be collected automatically during your interaction with our website, including IP addresses, browser types, operating systems, referring websites, pages visited, and the duration of each visit. This information is gathered for legitimate purposes such as improving the functionality and security of our website, conducting statistical analyses, and ensuring the integrity of our online services, and is not used to identify individual users except where required for the investigation of unlawful activities or cybersecurity incidents.

The processing of personal data by Tekally is carried out on lawful bases, which include the necessity of such processing for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures at the request of the data subject, compliance with legal obligations imposed upon Tekally, the pursuit of legitimate interests provided that such interests are not overridden by the rights and freedoms of the data subject, and, where applicable, the data subject’s explicit and informed consent.

Tekally does not sell, lease, or otherwise trade personal data to third parties for commercial gain. However, in the performance of our business activities and in strict accordance with applicable law, we may disclose personal information to trusted service providers, contractors, logistics and customs agents, auditors, professional advisors, and, where required, governmental or regulatory authorities. Given the international scope of our operations, personal data may be transferred across borders to jurisdictions including, but not limited to, the United States, Canada, Mexico, and Member States of the European Union. All such transfers are conducted in compliance with applicable legal requirements, including the implementation of appropriate safeguards such as Standard Contractual Clauses under the GDPR, contractual confidentiality obligations, and adherence to the principles set forth in the USMCA.

We retain personal data only for the period necessary to fulfill the purposes for which it was collected or to comply with applicable legal, regulatory, or contractual retention requirements. Data related to contractual obligations may be retained for a period of up to ten years from the conclusion of the relevant contract, while data submitted in the context of recruitment processes may be retained for a period not exceeding six months unless extended with the explicit consent of the candidate. Upon the expiry of the applicable retention period, personal data will be securely deleted, anonymized, or otherwise rendered inaccessible.

Data subjects have the right, subject to applicable law, to request access to the personal information we hold about them, to seek the rectification of any inaccurate or incomplete information, to request the erasure of data when there is no legal basis for its continued retention, to request the restriction of processing in specific circumstances, to object to processing on legitimate grounds, and to receive a copy of their data in a structured, commonly used, and machine-readable format where technically feasible. Requests to exercise these rights should be submitted to our Data Protection Officer using the contact details set forth at the end of this Policy, and will be processed in accordance with the procedures and timelines prescribed by applicable law.

Tekally’s website employs cookies and similar technologies for the purposes of facilitating navigation, improving user experience, analyzing usage patterns, and supporting security measures. These may include session cookies, which expire upon closing your browser, and persistent cookies, which remain on your device for a defined period. You may configure your browser to refuse cookies or to delete them; however, doing so may affect the functionality of certain features of our website. Where third-party analytics services, such as Google Analytics, are utilized, Tekally ensures the implementation of privacy safeguards, including IP anonymization, in compliance with applicable laws and regulations.

To protect personal information from unauthorized access, alteration, disclosure, or destruction, Tekally implements a range of technical, administrative, and organizational safeguards, including encryption in transit and at rest, access controls based on defined roles and responsibilities, secure data storage environments, and periodic security audits, in accordance with the requirements of ISO/IEC 17025 and relevant privacy legislation.

Tekally reserves the right to amend or update this Privacy Policy at any time to reflect changes in law, technology, or business practices. Any such amendments will be published on our official website and will indicate the effective date of the updated version.

For any inquiries regarding this Policy or the exercise of your rights under applicable data protection laws, you may contact our Data Protection Officer at the email address provided herein or by writing to us at our registered office address.

Part II – Specific Provisions on Marketing, Digital Tracking, Newsletters, Social Media, and Event Data

In addition to the general principles and safeguards described above, Tekally undertakes to regulate the processing of personal data in the context of marketing communications, the use of digital tracking technologies, the administration of newsletter subscriptions, the operation of corporate social media accounts, and the collection of information related to event registration and participation.

Tekally engages in marketing communications only in compliance with applicable laws and with due respect for the preferences and rights of the individuals and entities with whom we interact. Promotional materials, whether disseminated by email, telephone, direct mail, or other electronic means, are directed solely to recipients who have provided explicit consent or where Tekally can establish a lawful basis, such as a legitimate business interest, under the applicable data protection regime. Any person may, at any time, withdraw consent to receive marketing communications, without prejudice to the lawfulness of communications sent prior to the withdrawal. Tekally maintains secure systems and operational controls to ensure that such withdrawal requests are honored promptly and that marketing databases are accurate, current, and protected against unauthorized access.

In the course of delivering certain online services or marketing communications, Tekally may deploy tracking technologies, such as tracking pixels, web beacons, and similar mechanisms, in order to evaluate the effectiveness of campaigns, measure audience engagement, and optimize content delivery. These technologies may record whether a communication has been opened, which hyperlinks have been accessed, and other interactions relevant to the improvement of our services. Tekally does not use such technologies to collect sensitive personal data or to engage in automated decision-making that produces legal effects concerning the data subject. Where required by law, explicit consent will be sought prior to the use of such tracking technologies, and recipients may disable tracking through the settings of their email client or by following the opt-out instructions contained in the relevant communication.

Tekally offers a subscription-based newsletter for the dissemination of information about its products, services, industry developments, and company news. Subscription is entirely voluntary and, where mandated by law, is subject to a double opt-in procedure to confirm the subscriber’s intent. Personal data provided for newsletter purposes is processed exclusively for the administration of the subscription, the distribution of content, and the analysis of aggregate engagement statistics. Such data is not shared with third parties outside Tekally’s corporate group and is retained only for as long as the subscription remains active. Subscribers may terminate their subscription at any time, whereupon their data will be removed from the newsletter distribution system without undue delay.

Tekally also maintains official corporate profiles on various social media platforms as a means of communication and engagement with clients, suppliers, industry stakeholders, and the general public. Interactions with Tekally’s social media accounts—such as follows, likes, comments, messages, or other engagements—may make certain personal data visible to Tekally, the platform provider, and other users, depending on the user’s privacy settings. Tekally processes such personal data solely for the purpose of responding to inquiries, managing communications, and conducting legitimate business development activities. Users are advised that the processing of their personal data by the platform provider is subject to the provider’s own privacy policies, over which Tekally exercises no control, and are encouraged to review such policies to understand their rights and the provider’s practices.

In connection with trade shows, conferences, webinars, and similar events in which Tekally participates, personal data may be collected from participants during registration, whether the process is administered directly by Tekally or by third-party organizers. Such data may include identification details, professional information, and expressions of interest in specific products or services. The information collected is used exclusively for event management, including participant verification, badge issuance, logistical coordination, and post-event follow-up communications where permitted. In cases where participant data is collected through badge scanning or similar technologies, Tekally will obtain the participant’s consent prior to collection and will process such data strictly in accordance with the consent given. Any third-party event organizers acting on Tekally’s behalf are contractually bound to process participant data in compliance with applicable laws and solely for the purposes authorized by Tekally. Data collected for event purposes will be retained only for the period necessary to achieve those purposes and will be securely deleted thereafter, unless a longer retention period is required by law or expressly authorized by the participant.

This Part II forms an integral component of Tekally’s Privacy Policy & Data Protection Statement, and its provisions shall be interpreted consistently with the general principles set forth in Part I. Where any specific provision in this Part II conflicts with the general terms in Part I, the specific provision shall prevail to the extent necessary to address the context to which it applies.