Privacy Policy

This notice explains how Polynamix processes personal data collected through the website, contact forms and quote request flows with or without attached files.

Last updated: April 10, 2026

1. Data controller

Polynamix di Bof Matteo acts as the data controller for personal data processed through this website.

For privacy requests or to exercise your rights, you can write to info@polynamix.com or contact +39 351 552 7774.

2. Categories of personal data

We may process the following categories of personal data:

  • navigation and technical log data, such as IP address, user agent, referer, timestamps and security metadata;
  • data voluntarily provided through forms, such as name, email, phone number, company name, notes and commercial requests;
  • technical quote-request data, including requested material, quantity, finish, tolerances, sector and other project information;
  • files uploaded by the user through the intake system, including CAD, mesh files or other technical documentation;
  • local preferences linked to the cookie banner and essential website functions.

3. Purposes and legal bases

Personal data is processed for the following purposes:

  • to answer contact and quote requests and take pre-contractual steps at the request of the data subject;
  • to assess technical feasibility and prepare offers or follow-up exchanges;
  • to protect the website and quote backend against abuse, automated submissions, unauthorized access or security events, based on the controller legitimate interest;
  • to comply with legal, tax, contractual or rights-defense obligations;
  • to manage any contractual relationship that may follow the initial request.

4. Nature of data provision

Providing the information marked as required in the forms is necessary to send the request and receive a reply.

Failure to provide required data prevents proper handling of the request. Optional information is provided at the user discretion and helps improve the quality of the technical or commercial review.

5. Processing methods and security measures

Data is processed using electronic and organizational measures appropriate to the nature of the information collected.

Quote requests and attached files are handled through a backend that uses segregated storage, access controls, rate limiting and encryption for stored payloads and attachments. Access to operational data is limited to authorized staff or providers acting on behalf of the controller.

6. Data recipients

Data may be processed by authorized internal staff and, where necessary, by suppliers providing services instrumental to the website or quote flow, such as hosting providers, email providers or technical infrastructure partners.

Such parties process data as processors or independent controllers depending on the role they effectively perform.

7. Transfers outside the EEA

The controller gives preference to solutions located within the European Economic Area. If some technical services require transfers to third countries, those transfers will take place using the safeguards provided by the GDPR, such as adequacy decisions or standard contractual clauses.

8. Retention periods

Contact data and commercial requests are retained for the time necessary to handle the request and in any case no longer than 24 months from the last meaningful contact, unless longer retention is required for contractual or defensive reasons.

Technical files uploaded for quote review are retained for the time strictly necessary for the assessment, any negotiation phase or the defense of rights, and may be removed earlier when no longer needed.

Technical security logs are retained for the period necessary to monitor and prevent abuse of the service.

9. Data subject rights

Where provided by the GDPR, you may request access, rectification, erasure, restriction, objection and, where applicable, data portability.

You can exercise your rights by contacting info@polynamix.com. You also have the right to lodge a complaint with the competent supervisory authority.