Privacy Policy

The data controller responsible for your personal data is:

HST Vibroacoustic Technologies Monza (MB), Italy Email: info@hstvibroacoustic.com

If you have any questions about this policy or wish to exercise your rights, please contact us at the email address above.

We collect personal data only when you voluntarily submit our /conversation contact form. The form fields are:

• Full name (required)
• Email address (required)
• Company or organisation name (optional)
• Country (required)
• Phone number (optional)
• Conversation type — e.g. project enquiry, demonstration request (required)
• Message / enquiry details (required)

When you submit the contact form, our server infrastructure logs your IP address temporarily for spam prevention and security purposes. We also receive standard browser information (user-agent string) as part of the HTTP request. This data is not used for profiling or marketing.

We process your personal data on the following legal bases under GDPR Article 6:

• Article 6(1)(b) — Processing necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract: we use your data to respond to your enquiry and, where applicable, to prepare a commercial proposal.
• Article 6(1)(f) — Legitimate interests: we have a legitimate interest in responding to business enquiries sent to us through our website. We have assessed that this interest is not overridden by your rights and freedoms, given that you have actively chosen to contact us.

Enquiry data (form submissions and related correspondence) is retained for a maximum of 24 months following the date of last contact between you and HST. After this period, data is either permanently deleted or anonymised so it can no longer be associated with you.

IP address logs collected for spam prevention are deleted automatically within 30 days.

We do not sell, rent or share your personal data with third parties for their own purposes. Your data is accessible only to HST personnel who need it to handle your enquiry.

We use the following sub-processors, each engaged under a Data Processing Agreement (DPA):

• Vercel, Inc. (USA) — website hosting and serverless infrastructure. Vercel participates in the EU–US Data Privacy Framework (DPF) and provides Standard Contractual Clauses (SCCs) for international transfers.
• Resend (USA/EU) — transactional email delivery used to forward form submissions to the HST team. Data is processed under SCCs.
• Supabase, Inc. (EU region) — database storage for enquiry submissions. Data stored in the European Union.

HST is based in Italy (EU). Some of our sub-processors are based in or route data through the United States. These transfers are safeguarded by:

• The EU–US Data Privacy Framework (DPF), where the processor is certified (Vercel).
• Standard Contractual Clauses (SCCs) approved by the European Commission, which provide equivalent protections for transfers to processors not covered by an adequacy decision.

As a data subject, you have the following rights, which you may exercise at any time by contacting us at info@hstvibroacoustic.com:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — request deletion of your data, subject to our legal obligations.
• Right to restriction of processing — request that we limit how we use your data in certain circumstances.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint — you have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority in your country of residence.

We use only strictly necessary cookies and a language preference cookie. We do not use advertising cookies or third-party tracking pixels. Please refer to our Cookie Policy for full details.

All data transmitted to and from hstvibroacoustic.com is encrypted using HTTPS (TLS). Access to personal data is restricted to authorised HST personnel. In the event of a personal data breach, we will notify the competent supervisory authority within 72 hours where required by GDPR Article 33, and affected individuals where required by Article 34.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically. For material changes, we will take reasonable steps to notify you.