Privacy Policy

This policy explains what personal data this website collects, why, how long it is kept and what you can do about it. It is written under Regulation (EU) 2016/679 (the GDPR) and Italian legislative decree 196/2003 as amended.

The short version: this is a static brochure site. It sets no cookies, runs no analytics and loads nothing from third-party servers. Unless you fill in the contact form, we do not learn anything about you beyond what our hosting provider records in its server logs.

Who is responsible

The data controller (titolare del trattamento) is:

Controller

OW Elemets S.r.l

Address

Via delle Serre 12, 20080 Ambrosio (MI), Italy

Email

info@owelemts.com

No data protection officer has been appointed. Given the scale and nature of the processing described here, OW Elements is not required to appoint one under art. 37 GDPR.

What we collect, and why

The contact form

If you write to us through the form, we receive whatever you put in it: your name, your email address, the subject you selected and your message. We use it to answer you and, if it leads to an order, to arrange that order.

• Legal basis: art. 6(1)(b) GDPR — steps taken at your request before entering into a contract — and art. 6(1)(f), our legitimate interest in replying to people who contact the business.
• Retention: up to 24 months from our last exchange, then deleted. Messages that result in an order are kept for as long as Italian tax and accounting law requires the underlying records to be kept, currently ten years.
• Providing it is voluntary, but without a name, an email address and a message we cannot reply.

Email you send us directly

Same treatment as the form, on the same legal bases and the same retention periods. Email is not a secure channel — please do not send us anything sensitive through it.

Server logs

Our hosting provider records standard technical information when a page is requested: the IP address, the time, the page, the referring page and the browser's user-agent string. This is generated by the web server, not by anything we run in your browser, and we use it only to keep the site available and to investigate faults and abuse.

• Legal basis: art. 6(1)(f) GDPR — our legitimate interest in a working, secure website.
• Retention: as set by the hosting provider, typically a few weeks.

Cookies and tracking

This site sets no cookies, uses no local storage, embeds no third-party scripts and runs no analytics. Fonts are served from our own domain rather than from a font CDN, so loading a page here does not disclose your visit to anyone else. That is why you were not asked to accept anything. The cookie policy covers this in more detail.

Who else sees your data

Only the people and services that have to. Specifically: our hosting provider, which stores the site and generates the server logs described above; and, once the contact form is connected to a form-handling service, that service, which passes messages to us. Both act as data processors under art. 28 GDPR, on written terms.

We do not sell personal data, do not share it for marketing, and do not disclose it to anyone else except where we are legally obliged to.

Transfers outside the EEA

Our intention is to keep processing within the European Economic Area. If a provider we use processes data outside it, that transfer will rely on an adequacy decision under art. 45 GDPR or on standard contractual clauses under art. 46, and this page will name the provider and the safeguard.

Your rights

Under arts. 15–22 GDPR you can ask us to:

• confirm whether we hold data about you, and give you a copy (art. 15);
• correct anything inaccurate (art. 16);
• delete it (art. 17);
• restrict what we do with it (art. 18);
• hand it over in a portable format (art. 20);
• stop processing carried out on the basis of legitimate interest (art. 21).

Write to the address or email above. We will respond within one month, and there is no charge unless a request is manifestly unfounded or excessive. We may need to confirm who you are first.

If you think we have got this wrong, you can complain to the Italian supervisory authority — the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma — or to the authority where you live or work.

Automated decisions

There are none. Nothing on this site profiles you or makes automated decisions about you within the meaning of art. 22 GDPR.

Children

This site is not aimed at children and we do not knowingly collect data from them. If a child has sent us something through the form, tell us and we will delete it.

Changes

If what we do changes, this page changes with it, and the date at the top will tell you when it last did. Material changes will be flagged on the site itself.