Privacy Policy

Who Is Responsible for Personal Data?

This Privacy Policy applies to personal data processed through this website, business contact channels, RFQ forms, project discussions, and approved file-upload workflows. The data controller for the production website must be identified as:

“Company,” “we,” “us,” and “our” refer to the verified controller named in the final notice. The final policy must also explain whether another group company, sales entity, distributor, or service provider acts as a separate or joint controller.

What Information May We Collect?

Depending on how you use the website and communicate with us, we may process:

• Business identity and contact details: name, company, job title, business email, country or region, and optional telephone number.
• RFQ and commercial information: product category, project type, target market, estimated quantity, timing, budget or quotation context, purchasing requirements, and communication history.
• Project and technical information: product concepts, applications, specifications, drawings, CAD files, dimensions, materials, samples, tooling information, test requirements, inspection criteria, packaging details, and technical documents.
• Uploaded files: filenames, file content, format, size, upload time, associated message, and security-scan results.
• Website and device information: IP address, browser/device type, operating system, referring page, pages visited, timestamps, security events, and cookie or consent preferences where used.
• Communication and service records: emails, meeting notes, inquiry status, CRM records, consent/objection status, and documents needed to manage the business relationship.

How Do We Receive the Information?

Information may be received directly from you or your employer, through website forms and approved upload channels, during email/video/telephone communication, from an authorized colleague or project partner, or automatically through website security, server logs, and consented analytics. We may also receive business contact information from legitimate public sources, trade events, referrals, or approved service providers where permitted by applicable law.

If you provide personal data about another person, you should have authority to do so and provide any notice required by law.

Why Do We Use Personal Data?

The final policy must identify the legal basis actually used for each processing activity. Where consent is relied on, it may be withdrawn for future processing. Withdrawal does not affect processing already lawfully performed.

How Are CAD Drawings and Project Files Handled?

Project information may be reviewed for technical feasibility, quotation, material/process selection, tooling, sampling, testing, quality planning, production, documentation, and business communication. Access should be limited according to project role and need.

See the Confidential Project Information notice for project-file controls, limitations, and recommended steps before upload.

Who May Receive Personal Data?

We may disclose relevant information to authorized personnel and vetted providers only for an approved business purpose, including:

• Website hosting, security, backup, and technical-support providers.
• Website analytics providers, subject to cookie/consent settings and the final deployment configuration.
• Email, collaboration, and business communication services.
• CRM, quotation, customer-support, and project-management systems.
• Form, anti-spam, file-transfer, storage, and malware-scanning providers.
• Professional advisers, auditors, insurers, laboratories, logistics providers, and authorities where relevant and lawful.
• Affiliated or manufacturing entities involved in the project, when roles and access are approved.

The production policy must identify actual provider categories, material third parties, controller/processor roles, and any legally required names or links. We do not state that personal data is sold or shared for targeted advertising until the deployed systems and applicable law have been reviewed.

May Information Be Processed in Other Countries?

Because inquiries may involve customers, manufacturing operations, personnel, and service providers in different countries, personal and project information may be accessed or processed outside the sender's country. The final implementation must map these transfers and, where required, use an applicable transfer mechanism such as an adequacy decision, standard contractual clauses, or another lawful safeguard.

Transfer mechanisms do not remove the need for access control, data minimization, security, retention, and project-specific confidentiality review.

How Do We Protect Information?

We intend to use reasonable technical and organizational measures appropriate to the information and risk. Measures may include role-based access, authentication, encrypted transmission where supported, private storage, backups, malware scanning, logging, confidentiality obligations, provider review, employee procedures, and incident response.

No website, email, transfer, or storage system is completely secure. We therefore do not promise absolute security or confidentiality. Customers should use the approved channel, protect their own accounts and files, and tell us promptly if information was sent incorrectly or a security concern is suspected.

How Long Is Information Retained?

We retain information only for as long as reasonably needed for the stated purpose, business relationship, project record, legal/contractual obligation, dispute, security, backup cycle, or approved retention instruction. The final retention schedule must define actual periods or clear decision criteria.

What Privacy Rights May Apply?

Depending on your location and applicable law, you may have rights to request:

• Access to personal data and information about its processing.
• Correction of inaccurate or incomplete personal data.
• Deletion of personal data, subject to legal and contractual exceptions.
• Restriction of processing in specified circumstances.
• Objection to processing based on legitimate interests or to direct marketing.
• Portability of certain data where the legal conditions apply.
• Withdrawal of consent for future processing where consent is the basis.
• Information about recipients, sources, transfers, and safeguards where applicable.
• A complaint to the relevant data protection or privacy authority.

Applicable US state laws may provide additional rights, such as rights to know, delete, correct, opt out of certain sale/sharing, limit certain sensitive-data uses, or receive non-discriminatory treatment. These rights depend on the law and whether it applies to the Company.

We may need to verify identity and authority before responding. Rights may be limited by confidentiality owed to others, legal claims, record-keeping duties, security, trade secrets, or other lawful exceptions. The final notice must provide the request channels, verification method, response workflow, authorized-agent process where applicable, and appeal/complaint route.

How Do Cookies and Automated Decisions Apply?

See the Cookie Policy for cookie categories, consent, and management. Non-essential analytics or marketing technologies must not be enabled in regions requiring prior consent until the visitor has made an appropriate choice.

RFQ submissions are intended for human business and technical review. The production privacy notice must disclose any automated decision-making or profiling that produces legal or similarly significant effects; none should be introduced without legal, technical, and notice review.

Children

This B2B website is not directed to children. Do not submit a child's personal information through an RFQ or project upload.

How Will This Policy Change and How Can You Contact Us?

We may update the final policy when business processes, website technology, service providers, legal requirements, or project-handling practices change. The current version and Last Updated date should remain available on this page. Material changes may require additional notice or renewed consent.

This prototype is a drafting framework, not legal advice or a statement that every listed law applies. Qualified counsel and the responsible departments must approve the production text.