Privacy Policy

This Privacy Policy applies to our website, our contact and quotation forms, and the commercial relationships that follow from them. We process personal data under Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and other applicable European data-protection and electronic-communications rules.

Where a topic is covered in more detail elsewhere, we link to that document. See our Cookie Policy for tracking technologies and our Data Protection Notice for the short-form notice presented at the point of collection.

Stronx ("we", "us") is the data controller for the personal data described in this document. You can reach our privacy team at info@example.com.

Please use the contact details above for privacy enquiries and requests. If a data protection officer or representative is appointed and required to be identified under applicable law, the relevant contact details will be added to this policy.

We collect only the data we need for the purpose it was given to us.

• Identity and contact data — full name, email address, telephone number, and the country you tell us you are writing from.
• Project data — the content of your message, the building type you are interested in, site location, intended use, and any drawings or specifications you choose to send us.
• Commercial data — quotation history, order and delivery records, invoicing details, and correspondence relating to a project.
• Technical data — IP address, browser and device type, operating system, referring page, and pages viewed. This is collected through server logs and, where you consent, analytics cookies.
• Marketing data — your consent status for commercial electronic messages and your interaction with those messages.

We do not ask for special categories of personal data (such as health, biometric, or belief data) and we ask that you do not include them in your messages.

• Responding to enquiries and preparing quotations for prefab buildings and structures.
• Managing contracts, production planning, delivery, installation, and after-sales support.
• Meeting accounting, tax, customs, and other statutory obligations.
• Operating, securing, and improving our website and measuring how it is used.
• Sending campaigns, newsletters, and product announcements where you have given separate consent.
• Establishing, exercising, or defending legal claims.

Each processing activity has a legal basis under Article 6 GDPR. The basis depends on why the data is needed and may change if the context changes.

• Forms on this website, including the contact and quotation forms.
• Email, telephone, and messaging applications you use to reach us.
• Trade fairs, dealer meetings, and other business events.
• Cookies and similar technologies, subject to your consent.
• Publicly available sources such as company registries, for business contacts.

We work with a limited number of processors who act only on our documented instructions under a contract meeting Article 28 GDPR.

• Hosting and content delivery for this website.
• Email and office productivity services used to handle your correspondence.
• Web analytics, activated only after you accept analytics cookies.
• Accounting, logistics, and installation partners engaged for a specific project.

The providers used for a particular enquiry or project may change according to location and scope. You may ask us for further information about the relevant provider categories and safeguards. We do not sell personal data or allow service providers to use it for their own unrelated advertising.

• Processors listed above, strictly for the purposes described.
• Manufacturing, transport, and installation partners where they need the data to fulfil your project.
• Professional advisers such as lawyers, auditors, and insurers.
• Courts, public authorities, and regulators where disclosure is required by law or necessary to defend legal claims.

If personal data is transferred from the European Economic Area to a country or recipient without an applicable adequacy decision, we use a permitted Chapter V GDPR transfer mechanism after assessing the transfer. Depending on the circumstances, this may include the European Commission Standard Contractual Clauses and appropriate supplementary measures. You may ask us for information about the safeguard relevant to your data.

Strictly necessary cookies are set without consent because the site cannot function without them. Analytics and marketing cookies are set only after you accept them, and you can change or withdraw that choice at any time. Full details, including categories and lifetimes, are in our Cookie Policy.

We use technical and organisational measures selected according to the nature of the data, the processing context, and the risk to individuals, in line with Article 32 GDPR.

• TLS encryption for all traffic to and from this website.
• A restrictive Content Security Policy and modern security response headers.
• Role-based access control and the principle of least privilege for internal systems.
• Backup and recovery controls appropriate to the relevant system.
• Confidentiality undertakings and data protection training for staff with access.

If a personal data breach occurs, we assess it promptly and make notifications to regulators and affected individuals when and within the period required by the law that applies. The GDPR 72-hour supervisory-authority rule applies only where the GDPR and its notification threshold apply.

We keep personal data only for as long as the purpose requires, plus any statutory limitation period.

At the end of the applicable period, data is deleted, destroyed, or anonymised.

We send campaigns, newsletters, and product announcements only to people who have opted in. Consent is separate from any contract, it is never a condition of receiving a quotation, and you can withdraw it at any time through the unsubscribe link in every message or by writing to us. The full terms are set out in our Electronic Communications Consent.

Under Articles 15 to 22 GDPR, you may have the following rights, subject to their statutory conditions and exceptions.

• Access — obtain confirmation of whether we process your data and receive a copy of it.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — request deletion where we no longer have a lawful reason to keep the data.
• Restriction — ask us to limit processing while a request or objection is assessed.
• Portability — receive the data you provided in a structured, machine-readable format and have it transmitted to another controller.
• Objection — object to processing based on our legitimate interests, and object at any time to direct marketing.
• Withdrawal of consent — withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Automated decisions — not be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not make such decisions.

Write to info@example.com to exercise any of these rights. We normally respond within one month, subject to the extensions permitted by GDPR. You may also complain to the competent data-protection supervisory authority in the EEA country where you live, work, or believe an infringement occurred.

We update this policy when our processing activities, service providers, or the applicable law change. The date at the top of this page always reflects the current version. Where a change materially affects you, we give notice before it takes effect.

For any question about this policy or about how we handle your personal data, contact us at info@example.com, or use our contact form.