Privacy Policy
Last updated: 1 September 2026
This Privacy Policy explains how Heila Cranes S.p.A. collects and processes personal data of visitors to this website, in accordance with Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended.
1. Data Controller
Heila Cranes S.p.A.
Via Romana 34/6 – 42028 Poviglio (RE) – Italy
VAT / Tax code: 02475650350
Email: info@heila.com
Certified email (PEC): heilacranes@legalmail.it
The Controller has not appointed a Data Protection Officer, as the conditions of Article 37 GDPR do not apply. Requests concerning personal data may be sent to the address above.
2. Personal data we process
a. Data you provide voluntarily
- Contact and quotation forms: first name, last name, company, email address, telephone number, country and any information you include in the message field.
- Newsletter subscription: email address.
- Direct email: any data contained in messages you send to our published email addresses.
b. Data collected automatically
- Server log files: IP address, date and time of the request, pages requested, browser type and operating system. These data are processed by the hosting provider for the security and correct operation of the website.
- Technical cookies: see our Cookie Policy. This website does not use profiling, advertising or analytics cookies.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Replying to enquiries and preparing quotations | Steps taken at the request of the data subject prior to entering into a contract – Art. 6(1)(b) GDPR |
| Managing the commercial and contractual relationship | Performance of a contract – Art. 6(1)(b) GDPR |
| Sending the newsletter | Consent – Art. 6(1)(a) GDPR, withdrawable at any time |
| Security, operation and maintenance of the website | Legitimate interest of the Controller – Art. 6(1)(f) GDPR |
| Compliance with legal, accounting and tax obligations | Legal obligation – Art. 6(1)(c) GDPR |
Providing the data marked as mandatory in the forms is necessary in order to receive a reply; failure to provide them makes it impossible to process your request. Providing any further information is optional.
4. Recipients of the data
Personal data may be accessed by authorised employees and collaborators of Heila Cranes S.p.A. who have been instructed under Article 29 GDPR, and by external parties appointed as data processors under Article 28 GDPR, in particular:
- the hosting and website maintenance provider;
- email and IT service providers;
- professionals and consultants bound by professional secrecy.
Data may also be shared with Heila Cranes Nederland B.V. (Sliedrecht, Netherlands) and with our authorised dealers where this is necessary to handle a request concerning your geographical area. Data are never sold or transferred to third parties for their own marketing purposes.
5. Transfers outside the European Economic Area
Personal data are processed on servers located within the European Union. Should a transfer outside the EEA become necessary, it will take place only on the basis of an adequacy decision of the European Commission or of appropriate safeguards under Articles 46 et seq. GDPR.
6. Retention period
- Enquiries and quotation requests that do not lead to a contract: 24 months from the last contact.
- Data relating to a contractual relationship: for the duration of the contract and for 10 years thereafter, in accordance with civil and tax law obligations.
- Newsletter: until you withdraw your consent or unsubscribe.
- Server log files: for the technical period set by the hosting provider, generally not exceeding 12 months.
7. Your rights
Under Articles 15 to 22 GDPR you have the right to obtain access to your personal data, their rectification or erasure, the restriction of processing, data portability, and to object to processing carried out on the basis of legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise these rights, write to info@heila.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of your country of residence.
8. Security
The website is served over an encrypted HTTPS connection. Heila Cranes S.p.A. adopts technical and organisational measures appropriate to the risk, in accordance with Article 32 GDPR, to protect personal data against unauthorised access, loss or disclosure.
9. Automated decision-making
No automated decision-making or profiling within the meaning of Article 22 GDPR is carried out through this website.
10. Changes to this Policy
This Privacy Policy may be updated to reflect changes in the services offered or in applicable legislation. The date of the latest revision is shown at the top of this page.