Prital S.r.l. is the data controller for everything described here. We are at Corso Europa Unita 2, 24030 Valbrembo (BG), Italy, and you can reach us at info@prital.it or on +39 351 479 6193.

We are below the headcount that obliges an Italian company to appoint a data protection officer, so there is not one. Privacy questions go to the address above and are answered by a person, not a ticketing system.

Two things, and nothing else.

What you type into the enquiry form. Your name, email address, phone number, company, the sector you picked, and the message. Name, email, phone and message are required because an enquiry we cannot answer is not an enquiry. Company and sector are optional and only help us put the right engineer on the reply.

What our hosting produces on its own. Standard server logs: IP address, the page requested, timestamp, browser and referring page. Every web server on the internet writes these, and they are what lets us tell a broken link from an attack.

We run no analytics, no advertising pixels, no session recording and no third-party embeds. Nothing on this site profiles you or follows you to another one.

This site sets no cookies. It writes nothing to local storage and asks for no consent, because there is nothing to consent to.

That is a design decision rather than an oversight, and it is the reason you were not shown a banner on the way in. If we ever add something that does need one, this page changes first and the banner appears second.

Under Article 6 of the GDPR, an enquiry you send us is handled on the basis of taking steps at your request before entering a contract. You asked us to quote for something, and we cannot quote for it without reading it.

Server logs are held on the basis of legitimate interest: keeping the site up and keeping it from being abused. We have weighed that against your interests and concluded that a log line nobody reads unless something breaks does not override them.

We do not send marketing email. If that ever changes it will be on consent you gave deliberately, with an unsubscribe link in every message.

Our hosting provider and our email provider, both acting as data processors on written terms, and both operating inside the European Economic Area or under an adequacy decision. Nobody buys this data from us, because we do not sell it.

Where an enquiry concerns equipment built by a machine builder or an OEM we work with, we may forward it to them so they can answer the part we cannot. We tell you in the reply when we do that, and we do not do it for anything else.

We will hand data to a public authority where the law requires it. It has not happened yet.

Enquiries that turn into work are kept for the life of the project and ten years after it, because Italian civil and tax law requires records of a commercial relationship to be available that long.

Enquiries that do not turn into work are kept for 24 months. Industrial projects come back: a line that was quoted and shelved is often rebuilt two years later, and having the original correspondence is the difference between resuming and starting again. After 24 months they are deleted.

Server logs are kept for 12 months and then rotated out.

Under Articles 15 to 22 of the GDPR you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, ask for it in a portable format, or object to us holding it at all.

Write to info@prital.it and say which. We answer within 30 days, usually the same week, and we do not charge for it. We may ask you to confirm you are who you say you are, which for an enquiry means replying from the address it was sent from.

If we get it wrong you can complain to the Italian supervisory authority, the Garante per la protezione dei dati personali, at garanteprivacy.it. We would rather you told us first, but that is your call and not a condition.

The site is served over TLS, so what you type into the form is encrypted between your browser and us. Enquiries land in a mailbox with multi-factor authentication on it and are readable by the engineers and directors who need to answer them, which is a handful of named people rather than the company.

No system is proof against everything. If a breach ever puts your data at risk we will tell the Garante within 72 hours and tell you directly where the law requires it, without waiting to have a tidy story.

The date at the top is the date this text last changed. Where a change affects what we do with data already collected, we will say so here rather than quietly editing a paragraph.