Promotech privacy policy

The data controller is Promotech Srl, VAT no. 01668490467. For information or to exercise your rights, you can write to info@promotechsrl.it.

Operating office and postal address: Via delle Ville 267–271, Località S. Colombano, 55012 Capannori (Lucca), Italy.

Data provided directly. When you use the forms, request a quote or contact support, we process the data you enter: first and last name, email, telephone, company, VAT number, message content and information about the request. The latter may include product codes, quantities, urgency, technical notes, serial numbers and delivery address, if provided. We also process the messages and any relevant documents exchanged as the request progresses.

Reserved area. To manage access and the available features, we process the account’s identification and contact data, the information required for authentication and the requests associated with the profile.

Technical data. While you browse, our systems may process your IP address, the date and time of the request, the pages and resources requested, the outcome of operations and information about your browser and device. Optional measurement services may also collect online identifiers and browsing events, according to the preferences you have expressed.

Data provided by others. Your business contact details may be provided by the company you work for, or by one of its representatives, as part of a request addressed to Promotech. In this case we process the identification, contact and role data needed to manage the relationship with that company, and we make this notice available to you within the terms set out in Article 14 of the GDPR.

In free-text fields and in the chat, please enter only information relevant to the request, avoiding health data, other particularly sensitive data or unnecessary information about third parties.

For requests and relationships that concern you personally, the legal basis is the performance of pre-contractual measures taken at your request or of a contract to which you are a party, pursuant to Article 6(1)(b) of the GDPR. When you act as an employee or representative of a company, the legal basis is instead Promotech’s legitimate interest in managing communications and the business relationship with that company, pursuant to point (f).

You can browse the public pages without sending a request. Fields marked as mandatory in the forms are needed to identify and manage the request or to provide the service: if you do not fill them in, we may be unable to reply or to complete the operation. Other data are optional. Not allowing statistics or external content does not prevent you from browsing the catalogue or sending requests.

Data are processed using IT tools and, where necessary, paper records. Access is limited to authorised persons according to their duties. Technical and organisational measures appropriate to the nature of the data and to the risks of the processing are in place, pursuant to Article 32 of the GDPR.

Data may be received, to the extent necessary, by providers of hosting and infrastructure, website management and maintenance, email, management software, support and the services described below. Providers acting on behalf of Promotech are appointed as processors pursuant to Article 28 of the GDPR. Professionals and authorities may process data as independent controllers where this arises from their respective functions or from legal obligations.

For requests involving technical checks or subsequent supplies, the strictly necessary data may be disclosed to technical partners, repairers or other parties involved in performing the service. Personal data are not intended for public disclosure. You can request up-to-date information on recipients by writing to the controller.

Google Analytics 4. The website uses GA4 to measure traffic and understand how pages are used. In the intended configuration, the tag is activated only after consent to the “Statistics” category. The data may include online identifiers, visits, events, traffic source, device characteristics and approximate location. The fact that IP addresses are not logged, as described by Google, does not automatically make the whole processing anonymous.

Google’s privacy information for business services

Google Maps. The Contact page includes a map showing our premises. Loading it may send technical and connection data to Google. In the intended configuration, the embedded map is loaded after consent to the “External content” category. The directions link, by contrast, opens an external service subject to Google’s privacy policy.

Google Privacy Policy

Smartsupp. The chat service, provided by Smartsupp.com, s.r.o., is started by opening the “Messages” section of the SOS panel. It processes the content of the conversation, the contact details provided and the technical data needed to handle the support request. Processing of the request follows the legal bases set out above. Any additional analytics or marketing tools that may be enabled require a specific consent choice, separate from the use of the chat.

Information on data processing in Smartsupp

Cloudflare Web Analytics. The website includes a beacon to measure page performance. The provider states that this service does not use cookies or local storage to track users over time and that the IP address received with the connection is discarded without being stored in its main databases or logs. For any personal data processed in this technical measurement, the purpose is to maintain and improve the operation of the website, based on the related legitimate interest.

Cloudflare documentation on the measurement beacon

The list of cookies and local storage items, their durations and how to manage your choices are described in the Cookie Policy. You can change or withdraw your choices via “Cookie preferences” in the footer. Withdrawal does not affect the lawfulness of processing already carried out on the basis of consent.

The use of international providers and infrastructure may involve transfers of, or access to, data from countries outside the European Economic Area. Transfers are permitted only where the conditions of Chapter V of the GDPR are met, such as an applicable adequacy decision or appropriate safeguards, including standard contractual clauses and supplementary measures where necessary.

You can obtain information on the applicable safeguards, and on how to consult a copy of them, by writing to info@promotechsrl.it.

We keep data for as long as necessary for the specific purpose. The following periods apply unless legal obligations or documented needs to establish and protect rights require otherwise. In such cases, only the relevant data are kept, and only for the justified period.

In the cases provided for by Articles 15–22 of the GDPR, you can request access to your data, rectification of inaccurate data, erasure and restriction of processing. You can obtain portability of the data you have provided when the processing is based on consent or on a contract and is carried out by automated means.

When processing is based on legitimate interest, you can object on grounds relating to your particular situation. In that case the controller assesses the request and stops the processing, unless there are overriding compelling legitimate grounds or the processing is needed to establish, exercise or defend legal claims. You can object to any direct marketing at any time.

You can withdraw your consent at any time, without retroactive effect. To exercise your rights, write to info@promotechsrl.it. Where necessary, the controller may ask for proportionate information to verify the requester’s identity. A reply is normally given within one month; any extensions, in the cases provided for by the GDPR, are communicated with the reasons.

You can also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or with the competent supervisory authority, including in the State where you habitually reside or work, and seek judicial remedies.

Italian Data Protection Authority (Garante per la protezione dei dati personali)

This notice may be updated when services or processing activities change. The current version is published on the website with its update date. Before data are used for further purposes, the necessary information is provided and new consent is obtained where required.