SANOVIA EUROPE

Privacy notice

Updated: 17 September 2026

1. Data controller & contact

Sanovia Maquinaria de Construcción y Reciclaje, S.L.
Av. Mencia Calderon 7
29680 Estepona, Spain

This notice describes how personal data is processed on the SANOVIA Europe website and when you enquire about our machinery trading services.

2. Data we use

When you contact us, we process the information you provide, such as your name, company, email address, telephone number, message and machine details. This may include photographs, service reports and contractual, invoicing, delivery and export documents. Please provide only information necessary for your enquiry.

3. Purposes & legal bases

We use your information to respond to enquiries, assess and source machinery, buy and sell machines, and prepare and perform agreed services. Article 6(1)(b) GDPR applies to a contract with you or steps taken at your request before entering into one. Communication with business representatives is based on our legitimate interest in managing business relationships (point f). Statutory documentation and retention duties are based on point c; separately obtained voluntary consent is based on point a.

Simply using this website does not constitute consent. Required enquiry fields are needed to handle your request; without sufficient contact and machine details, we may be unable to prepare an offer.

4. Website, hosting & cookies

This website is provided through OpenAI Sites, using Cloudflare infrastructure for technical delivery. Access involves processing essential connection data, such as your IP address, time, requested URL and browser information, to deliver and protect the website (Article 6(1)(f) GDPR).

The website code contains no analytics or advertising trackers and sets no own visitor analytics cookies. The first visit to the main address selects a supported local language using the approximate country supplied by the hosting infrastructure. If unavailable, it uses the browser language, with English as the fallback. A manual language choice is saved in the functional cookie sanovia_lang for up to 180 days. It contains only the language code and can be deleted in the browser. English is the source and fallback language. Additional languages are automatically translated by Microsoft Azure Translator. Only fixed website text is sent from our server to Microsoft; customer form entries and uploaded files are not sent for translation. Translated website text is cached for reuse. The language can always be changed manually. No GPS location is requested and the preference is not used for advertising. The restricted preview may require platform authentication and essential session technologies. No maps, social media feeds or videos are automatically embedded.

5. Enquiry form, files & email

When you submit the form, your contact and machine details and selected files are transferred over HTTPS and stored in Cloudflare R2. A notification is sent through Microsoft 365 to SANOVIA. Your supplied email address is used as the reply address; it is not verified by the form.

Files are provided through protected download links that expire 30 days after the enquiry is created. Anyone possessing a link can access its file until expiry. Uploaded enquiry data and files older than 30 days are removed during subsequent automatic cleanup when the website is used. Copies retained in business correspondence are subject to section 7.

To limit abuse, we use a signed form token and a pseudonymous identifier derived from your IP address. Short-lived request counters are cleared during automatic cleanup after one day. These measures serve website security under Article 6(1)(f) GDPR. Email links open your own email application; messages are transmitted when you send them.

6. Recipients & international transfers

We do not sell personal data. Where required for a transaction, relevant information may be shared with technical service partners, transport and logistics companies, customs and export agents, IT providers and legal or tax advisers. Data is disclosed to authorities where legally required.

International transactions and global IT services may involve processing outside the European Economic Area. This requires a permitted basis under Chapter V GDPR, such as an applicable adequacy decision or appropriate safeguards. You can request details of recipients and transfer safeguards relevant to your enquiry using the contact address above.

7. Retention & security

We retain business correspondence and documents for as long as necessary to handle the enquiry, manage the business relationship or establish, exercise or defend claims. Statutory retention requirements may require longer storage of contracts, invoices and export documents. Data should then be deleted or anonymised. The applicable period depends on the data and its purpose.

This website uses encrypted HTTPS connections. Access to business data should be restricted to people who need it to handle the matter. Please do not send passwords or other unnecessary confidential information.

8. Your rights

Subject to the GDPR, you can request access, correction, erasure, restriction and portability of your personal data. You may object to processing based on legitimate interests on grounds relating to your particular situation. Consent may be withdrawn for the future without affecting the lawfulness of earlier processing.

Please contact info@sanovia-eu.com to exercise your rights. You may also lodge a complaint with a supervisory authority, particularly Spain’s Agencia Española de Protección de Datos (AEPD). The website form does not make automated decisions about you with legal or similarly significant effects.

9. External links & updates

Manufacturer brochures and other external links lead to third-party websites. Their processing activities and privacy notices apply when you open those links. We update this notice when our website or processing changes.