Política de privacidad
Cómo recopilamos, usamos y protegemos los datos personales, incluidos los planos y archivos que nos envía.
Última actualización: 2026-09-20
This document is maintained in English. A translation can be provided on request; in case of discrepancy the English version prevails.
1. Who we are
The controller responsible for the processing described in this policy is [Company legal name], [registered address], [country] (referred to as "we", "us" or "our").
Questions about this policy or about your personal data can be sent to our contact address, which is published on the Contact page once finalised.
2. What data we collect
Data you give us. When you submit the quotation or contact form we collect your name, work email address, and — where you choose to provide them — your company, country, telephone number, project requirements and the message you write.
Files you upload. Technical drawings, 3D models, specifications and other documents you attach to an enquiry.
Technical data. Our server records a pseudonymised form of your IP address (a keyed hash, not the address itself), the browser user-agent string, and the page that referred you. This data is used for rate limiting, abuse prevention and security logging.
Cookies. Only strictly necessary cookies are set by default. See our Cookie Policy for details.
3. Why we process it, and on what legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to your enquiry and preparing a quotation | Art. 6(1)(b) — steps prior to entering a contract |
| Performing a contract you place with us | Art. 6(1)(b) — performance of a contract |
| Keeping records required by tax, customs and commercial law | Art. 6(1)(c) — legal obligation |
| Security, rate limiting and fraud prevention | Art. 6(1)(f) — legitimate interest in protecting our systems |
| Sending our engineering newsletter | Art. 6(1)(a) — your consent, withdrawable at any time |
We do not use your data for automated decision-making or profiling, and we do not sell personal data to anyone, ever.
4. Confidentiality of your technical files
Files you upload are transmitted over TLS and stored outside the public web root on access-controlled servers. They are accessible only to the engineering and sales personnel assigned to your enquiry.
We do not share your drawings with subcontractors without your written approval, we do not use them as marketing material, and we do not use them to manufacture parts for anyone else. A mutual non-disclosure agreement is available on request before any file exchange.
5. Who we share data with
- Email delivery. Our outbound mail provider processes the content of notification emails in order to deliver them.
- Logistics providers. Where you place an order, the name, address and telephone number needed for delivery are shared with the carrier.
- Professional advisers and authorities. Where required by law, or to establish or defend legal claims.
We do not use third-party analytics, advertising networks, social media pixels or content delivery networks on this website. Fonts are self-hosted, so no request is made to any external font service.
6. International transfers
Our servers are located in [server location, to be confirmed]. Where personal data is transferred outside the European Economic Area, that transfer is protected by the European Commission's Standard Contractual Clauses or an equivalent safeguard. A copy of the relevant safeguard can be requested from us.
7. How long we keep it
- Enquiries that do not result in an order: 24 months from the last contact
- Uploaded technical files: 24 months, or deleted sooner on your written request
- Order and accounting records: as required by applicable commercial and tax law, typically 10 years
- Security and rate-limiting logs: 90 days
- Newsletter subscriptions: until you unsubscribe
8. Your rights
Under the GDPR you have the right to request access to your personal data, rectification of inaccurate data, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, contact us using the details on the Contact page. We respond within one month. You also have the right to lodge a complaint with a supervisory authority in your country of residence.
9. Security measures
Transport encryption (TLS) on all pages and form submissions; uploaded files stored outside the web root with restrictive file permissions; content-type validation and magic-byte verification on every uploaded file; rate limiting and CSRF protection on all forms; passwords stored as salted scrypt hashes; access to enquiry data restricted to named personnel; security headers including Content-Security-Policy and HSTS.
10. Changes to this policy
We may update this policy to reflect changes in our processing or in applicable law. The date at the top of this page shows when it was last revised. Material changes will be highlighted on this page.