Aquilo Thermal Systems
Privacy Statement
What this website collects, why, how long it is kept, and the rights you have over it.
This statement explains what personal data Aquilo Thermal Systems collects through this website, why it is collected, and what rights you have over it. It covers this website only.
Who is responsible
Aquilo Thermal Systems, 2400 NW Thermal Way, Hillsboro, Oregon 97124, United States, is the controller for the data described here. Privacy questions can be sent to the address on our contact page.
What we collect, and why
Inquiry and quotation forms. Name, business email, company, phone or WhatsApp number, quantity and the technical description you write. We use it to answer your inquiry and to prepare a quotation. The legal basis is the steps taken at your request prior to entering a contract (GDPR Art. 6(1)(b)).
Server logs. IP address, browser identification, requested page and timestamp, written by the web server. We use these to keep the site available and secure; the legal basis is our legitimate interest (GDPR Art. 6(1)(f)).
Cookies. Which cookies are set, and by whom, is listed in our Cookie Policy. Non-functional cookies are set only after you consent.
How long we keep it
Inquiry records are kept for [To be confirmed by the site owner] months after the last contact, then deleted. Server logs are kept for [To be confirmed by the site owner] days. Quotations and contracts are kept for the period required by applicable commercial and tax law.
Who else sees it
Your inquiry is read by our engineering and sales staff. Data is processed by our hosting provider and our transactional email provider on our instructions: [To be confirmed by the site owner] (hosting) and [To be confirmed by the site owner] (email delivery). We do not sell personal data and we do not share it for advertising.
Where data is transferred outside the EEA or the UK, it is covered by [To be confirmed by the site owner] (for example, Standard Contractual Clauses).
Your rights
You may request access to your data, ask for it to be corrected or deleted, object to processing based on legitimate interest, ask for processing to be restricted, and ask for a copy in a portable format. Where processing is based on consent, you may withdraw that consent at any time. Send the request to the address on our contact page; we reply within one month.
If you believe we have handled your data incorrectly you may complain to your national supervisory authority. In the EEA this is the data protection authority of your country of residence; in the UK it is the Information Commissioner’s Office.
Security
The site is served over HTTPS, administrative access is restricted and protected by additional login verification, and form submissions are validated on the server. No online service is perfectly secure; if a breach affects your data and presents a risk to you, we will notify you and the supervisory authority as required by law.
Changes
If this statement changes materially we will update the date below and, where the change affects a purpose you consented to, ask for consent again.
Last updated: [To be confirmed by the site owner].