Privacy Policy
Last updated: 2 September 2026
This Privacy Policy explains how Heila Cranes S.p.A. collects and processes personal data of visitors to this website, in accordance with Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended.
1. Data Controller
Heila Cranes S.p.A.
Via Romana 34/6 – 42028 Poviglio (RE) – Italy
VAT / Tax code: 02475650350
Email: info@heila.com
Certified email (PEC): heilacranes@legalmail.it
The Controller has not appointed a Data Protection Officer, as the conditions of Article 37 GDPR do not apply. Requests concerning personal data may be sent to the address above.
2. Personal data we process
a. Data you provide voluntarily
- Contact and quotation forms: first name, last name, company, email address, telephone number, country and any information you include in the message field.
- Newsletter subscription: email address.
- Direct email: any data contained in messages you send to our published email addresses.
b. Data collected automatically
- Server log files: IP address, date and time of the request, pages requested, browser type and operating system. These data are processed by the hosting provider for the security and correct operation of the website.
- Technical cookies: see our Cookie Policy. With your consent, this website uses Google Analytics 4 to measure aggregate traffic. No profiling or advertising technologies are used.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Replying to enquiries and preparing quotations | Steps taken at the request of the data subject prior to entering into a contract – Art. 6(1)(b) GDPR |
| Managing the commercial and contractual relationship | Performance of a contract – Art. 6(1)(b) GDPR |
| Sending the newsletter | Consent – Art. 6(1)(a) GDPR, withdrawable at any time |
| Measuring aggregate traffic in order to improve the website | Consent – Art. 6(1)(a) GDPR, withdrawable at any time |
| Security, operation and maintenance of the website | Legitimate interest of the Controller – Art. 6(1)(f) GDPR |
| Compliance with legal, accounting and tax obligations | Legal obligation – Art. 6(1)(c) GDPR |
Providing the data marked as mandatory in the forms is necessary in order to receive a reply; failure to provide them makes it impossible to process your request. Providing any further information is optional.
4. Recipients of the data
Personal data may be accessed by authorised employees and collaborators of Heila Cranes S.p.A. who have been instructed under Article 29 GDPR, and by external parties appointed as data processors under Article 28 GDPR, in particular:
- the hosting and website maintenance provider;
- email and IT service providers;
- professionals and consultants bound by professional secrecy;
- Google Ireland Limited, as provider of the traffic measurement service, acting as data processor under the Google Ads Data Processing Terms.
Data may also be shared with Heila Cranes Nederland B.V. (Sliedrecht, Netherlands) and with our authorised dealers where this is necessary to handle a request concerning your geographical area. Data are never sold or transferred to third parties for their own marketing purposes.
5. Transfers outside the European Economic Area
Personal data are processed on servers located within the European Union. The traffic measurement service is provided by Google Ireland Limited; in the course of providing that service data may be transferred to Google LLC in the United States. Such transfers take place on the basis of the adequacy decision of the European Commission of 10 July 2023 concerning the EU–U.S. Data Privacy Framework, to which Google LLC adheres, and are additionally covered by the Standard Contractual Clauses included in the Google Ads Data Processing Terms. Any further transfer outside the EEA would take place only on the basis of an adequacy decision of the European Commission or of appropriate safeguards under Articles 46 et seq. GDPR.
6. Retention period
- Enquiries and quotation requests that do not lead to a contract: 24 months from the last contact.
- Data relating to a contractual relationship: for the duration of the contract and for 10 years thereafter, in accordance with civil and tax law obligations.
- Newsletter: until you withdraw your consent or unsubscribe.
- Server log files: for the technical period set by the hosting provider, generally not exceeding 12 months.
- Traffic measurement data: for the retention period configured in the Google Analytics property, in any case no longer than 14 months from collection.
7. Your rights
Under Articles 15 to 22 GDPR you have the right to obtain access to your personal data, their rectification or erasure, the restriction of processing, data portability, and to object to processing carried out on the basis of legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise these rights, write to info@heila.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of your country of residence.
8. Security
The website is served over an encrypted HTTPS connection. Heila Cranes S.p.A. adopts technical and organisational measures appropriate to the risk, in accordance with Article 32 GDPR, to protect personal data against unauthorised access, loss or disclosure.
9. Automated decision-making
No automated decision-making or profiling within the meaning of Article 22 GDPR is carried out through this website.
10. Changes to this Policy
This Privacy Policy may be updated to reflect changes in the services offered or in applicable legislation. The date of the latest revision is shown at the top of this page.