Privacy policy

1. Data controller

Data controller: [Nome e Cognome], [indirizzo], Modena (Italy) — VAT IT04182770364 — email [email] — PEC [PEC].

This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) to users of scadaportconvert.com and of the ScadaPort services. The site addresses professional users only (B2B).

2. Data collected

The site collects no personal data automatically beyond what is strictly necessary for the pages to work. Personal data is collected solely through the scan/contact form: name, company, email address, message content and, at a later stage, any SCADA/HMI project files sent for analysis or conversion.

Project files may incidentally contain personal data (for example user names or roles configured inside the project). Such data is treated as confidential client information and is never extracted, analysed or used for purposes other than performing the service. Access credentials are never migrated or stored.

3. Purposes and legal bases

a) Answering incoming requests and providing technical information — legal basis: pre-contractual measures at the data subject's request (Art. 6.1.b GDPR).

b) Preparing quotes, scan reports and technical documentation — legal basis: pre-contractual measures (Art. 6.1.b GDPR).

c) Performing the conversion service and the related verification, certification and support activities — legal basis: performance of the contract (Art. 6.1.b GDPR).

d) Ordinary professional correspondence and site security — legal basis: legitimate interest of the controller (Art. 6.1.f GDPR).

e) Accounting, tax and other statutory obligations — legal basis: legal obligation (Art. 6.1.c GDPR).

No profiling and no automated decision-making take place. No promotional message is sent without specific consent, which can be withdrawn at any time.

4. Confidentiality of project files

Project files sent to us are treated as strictly confidential material. They are used only for the requested service, never shared with third parties, never used to train models or tools, and are deleted after delivery unless otherwise agreed in writing. A non-disclosure agreement is available on request before any file is sent.

5. Recipients and transfers

Data may be processed by technical suppliers acting as processors under Art. 28 GDPR: the website hosting provider, the transactional email provider, and the accounting and tax advisor.

No data is transferred outside the European Economic Area, except as technically required by the hosting and email providers, which operate under the safeguards set out in Chapter V of the GDPR (adequacy decisions or standard contractual clauses).

6. Retention periods

Contact requests not followed by a contract: 24 months from the last exchange.

Project files received for a scan or a conversion: deleted within 30 days of delivery, unless otherwise agreed in writing.

Contractual documentation, reports and issued certificates: 10 years, for civil and tax purposes.

Accounting and tax records: 10 years as required by law.

7. Your rights

You may request access to your data, rectification, erasure, restriction of processing, data portability, and you may object to processing based on legitimate interest (Art. 15-22 GDPR).

Rights are exercised by writing to [email]; a reply is provided without undue delay and in any case within 30 days.

You also have the right to lodge a complaint with the Italian supervisory authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it).

8. Whether providing data is mandatory

Providing the data marked as required in the contact form is necessary to answer your request; without it no reply can be given. Providing project files is optional but necessary to run the scan and the conversion.