Privacy Policy

1. Data Controller

The Data Controller, as defined by Article 4(7) of EU Regulation 2016/679 (GDPR), is:

2. Data Collected

When you interact with this website, we may collect the following categories of personal data:

2.1 Data provided directly by the user

Through the contact form on this website, we collect:

• First name and last name
• Company name
• Email address
• Country of residence or business
• Subject of inquiry
• Content of the message

2.2 Navigation and technical data

Our web server automatically logs standard technical data when you visit the website, including:

• IP address (anonymized where possible)
• Browser type and version
• Operating system
• Date and time of visit
• Pages visited and referring URL

This data is collected for security and statistical purposes only and is not used to identify individual users.

3. Purposes and Legal Basis of Processing

3.1 Responding to contact requests

Purpose: To respond to enquiries submitted through the contact form, provide technical information, and manage pre-contractual or contractual relationships.

Legal basis: Art. 6(1)(b) GDPR – processing is necessary for the performance of a contract or to take steps at the request of the data subject prior to entering into a contract; and Art. 6(1)(f) GDPR – legitimate interests of the controller.

3.2 Compliance with legal obligations

Purpose: To fulfil legal, fiscal, and administrative obligations.

Legal basis: Art. 6(1)(c) GDPR – processing is necessary for compliance with a legal obligation.

3.3 Website security and fraud prevention

Purpose: To protect the website from abuse, spam, and fraudulent access.

Legal basis: Art. 6(1)(f) GDPR – legitimate interests of the controller.

3.4 Marketing and commercial communications

We do not currently send marketing emails or newsletters to contact form users unless separate and explicit consent has been obtained. Should we introduce such communications in the future, we will request your prior consent in accordance with Art. 6(1)(a) GDPR.

4. Data Retention

Personal data is retained only for the time strictly necessary for the purposes described:

• Contact form data: up to 24 months from the date of receipt, unless a contractual relationship is established, in which case standard commercial retention periods apply (up to 10 years for accounting and tax obligations under Italian law).
• Server log data: up to 12 months from collection, for security and diagnostic purposes.

After the applicable retention period, data will be securely deleted or anonymised.

5. Data Sharing and Transfer

5.1 Third parties

Your personal data will not be sold, rented, or otherwise disclosed to third parties for their own marketing purposes. Data may be shared only with:

• Web hosting providers acting as data processors under a Data Processing Agreement (Art. 28 GDPR).
• Email service providers used to deliver and manage electronic communications.
• Professional advisors (legal, accounting, auditing) where required for compliance purposes.
• Competent authorities where required by law or court order.

5.2 International transfers

POLYSIR SRL operates manufacturing facilities in Italy, Thailand, and Turkey. Where personal data is processed or accessed by entities outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, including Standard Contractual Clauses approved by the European Commission, where applicable.

6. Cookies and Tracking

This website currently uses only technical and functional cookies essential for correct operation. We do not deploy third-party tracking cookies, profiling cookies, or advertising trackers.

The website loads web fonts from Google Fonts (fonts.googleapis.com). This involves a connection to Google servers, which may transmit your IP address to Google Inc. (USA). Google Fonts are loaded via API calls; no cookies are set by this service. For more information, see Google's Privacy Policy at policies.google.com/privacy.

Should profiling or analytics cookies be introduced in the future, an appropriate cookie banner and updated consent mechanism will be implemented prior to deployment.

7. Your Rights under the GDPR

Pursuant to Articles 15–22 of EU Regulation 2016/679, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact us at: info@mychem.global. We will respond within 30 days as required by the GDPR (Art. 12).

8. Right to Lodge a Complaint

If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority. As POLYSIR SRL is established in Italy, the relevant authority is:

You may also contact the supervisory authority of your country of residence within the EU/EEA.

9. Security

POLYSIR SRL implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access, in accordance with Art. 32 GDPR. These measures include:

• HTTPS/TLS encryption for all data transmitted via the website
• Access controls limiting data access to authorised personnel only
• Anti-spam and honeypot mechanisms on the contact form
• Regular review of security practices

No transmission over the internet is completely secure; while we strive to protect your data, we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The date of the most recent revision is indicated at the top of this page. We encourage you to review this page periodically.

Where changes are material, we will take appropriate steps to notify affected users.

11. Contact

For any question, request, or concern regarding the processing of your personal data, please contact the Data Controller: