Data controller

The data controller is Toroidal Winding di Antonio Perin, registered at Via Ada Negri 8, 20841 Carate Brianza MB, Italia.

Email: info@toroidalwinding.it
Certified mail: toroidal-winding@legalmail.it
VAT number: 10595160960

We have not appointed a data protection officer because the conditions in article 37 of the Regulation do not apply. For any privacy matter write to the address above.

Which data we process

We process only data you give us yourself, plus the technical data any web server records in order to work.

Data you send us

Name, company, email address and telephone number, when you fill in the quotation form or write to us.
The content of the request, that is the technical data of the part you want built and anything else you decide to add.

Technical browsing data

IP address, date and time of the request, page requested, browser type and operating system. These are web server logs, recorded automatically by the hosting provider.

Data we do not process

We use no profiling cookies, we run no visitor analytics, we build no advertising profiles and we load no third party pixels.
We do not ask for and do not want special categories of data under article 9 of the Regulation. Please do not enter them into the form.

Why we process data and on which legal basis

Purpose, legal basis and retention
Purpose	Legal basis	Retention
Answering a quotation or information request	Article 6.1.b, pre contractual steps at your request	24 months from last contact
Managing the commercial relationship and the supply	Article 6.1.b, performance of a contract	Duration of the relationship
Tax, accounting and batch traceability obligations	Article 6.1.c, legal obligation	10 years
Site security and technical diagnostics	Article 6.1.f, legitimate interest in keeping the service secure	Up to 12 months in the provider logs
Defence of a legal claim	Article 6.1.f, legitimate interest	Until the limitation period expires

Providing the data marked as required in the form is necessary for us to answer you. Without it we cannot prepare a quotation. Every other field is optional.

Who we share data with

Data is neither sold nor transferred to anyone. It is handled by the controller and by a small number of suppliers acting as processors under article 28 of the Regulation.

Processors
Supplier	Service	Where
Hostinger International Ltd	Site hosting and server logs	European Union
Web3Forms	Forwarding the contact form to our mailbox	United States, under standard contractual clauses
Email provider	Receiving and storing requests	European Union
Accountant	Administrative obligations on supplies	Italy

Google Ireland Limited receives your IP address only if you choose to load the map on the contact page. Until you allow it, no request goes to Google. See the cookie policy.

Data may also be disclosed to public authorities where the law requires it.

Transfers outside the European Economic Area

The site is hosted in the European Union. Two services can involve a transfer to the United States:

Web3Forms, which forwards the form content to our mailbox. The transfer relies on the standard contractual clauses adopted by the European Commission in decision 2021 914.
Google Maps, only if you allow the map to load. Google LLC is certified under the EU United States Data Privacy Framework.

You can ask us for a copy of the safeguards in place by writing to info@toroidalwinding.it.

How long we keep data

Retention periods are in the purposes table. When they expire, data is deleted or anonymised, unless the law requires longer retention or the data is needed to defend a legal claim.

Quotation requests that do not lead to an order are kept for 24 months, because a project that stalls often comes back a year later and it helps to find the technical data already discussed. If you would rather they were deleted sooner, just say so.

Your rights

You can exercise the rights in articles 15 to 22 of the Regulation at any time:

Access: find out which data we hold and get a copy.
Rectification: correct inaccurate data or complete it.
Erasure: have data removed when it is no longer needed.
Restriction: ask for processing to be suspended pending a check.
Portability: receive your data in a machine readable format.
Objection: object to processing based on legitimate interest.
Withdrawal of consent: where processing rests on consent, withdraw it at any time without affecting what was lawful before.

Write to info@toroidalwinding.it. We answer within one month, extendable by two months in the complex cases set out in article 12.3.

Complaint to a supervisory authority

If you believe the processing breaches the Regulation you may lodge a complaint with the Italian data protection authority, Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, or with the authority of the country where you usually live.

Security

The site is served over HTTPS only. Form data travels encrypted and lands in a mailbox protected by multi factor authentication. Access to the data is limited to the controller and, for accounting, to the appointed accountant.

In the event of a personal data breach likely to result in a high risk to your rights, we will inform you without undue delay under article 34 of the Regulation.

Minors

This site addresses professionals and businesses. We do not knowingly collect data from people under 16. If we find that we have, we delete it.

Automated decisions and artificial intelligence

We take no decisions based solely on automated processing, including profiling, that produce legal effects concerning you under article 22 of the Regulation.

Where we use artificial intelligence tools for internal work, for example to draft a text or summarise a technical request, the rules in the AI and data addendum apply, including the ban on using customer data to train models.

Changes to this notice

If we change the way we handle data we update this page and the date at the top. Substantial changes are also flagged in the site banner.

How we handle personal data