Privacy notice
Data controllers and local companies
Europolish S.r.l., a company subject to the direction and coordination of Wasag Holding AG, is the controller for the Global website, Application Portal and shared ASK platforms: accounts, operation, security, privacy choices, central records and conversation reports. The companies below independently decide how to manage their own contacts and business relationships and are separate controllers for those activities. Enquiries are routed to the local company according to country or area and relevant expertise; the selected language does not determine the controller. Public contact details: Italy — Europolish S.r.l. Via Stretta 61–65, 25070 Sabbio Chiese (BS), Italia info@europolish.com USA — Europolish Precision Finishing USA Inc. 111 Arrowhead Drive, Suite C, Slippery Rock PA 16057, USA info.usa@europolish.com United Kingdom — Europolish International UK Co. Ltd. 1 Empire Mews, London SW16 2BF, UK info.uk@europolish.com Germany — Europolish Deutschland GmbH Antoniusstr. 8, D-47608 Geldern, Germany website@europolish.com Hong Kong — Europolish Precision Finishing Co., Ltd. registered office: Unit 304-7, 3/F, Laford Centre, 838 Lai Chi Kok Road, Kowloon, Hong Kong info.hk@europolish.com Shanghai, China — Europolish Precision Finishing (Shanghai) Co., LTD. Room 310, Building 1, No.135 Wangyou Road, Wutong International, Pudong district, Shanghai 201315, China info.cn@europolish.com Thailand — independent licensed partner — Polyasia Co., Ltd. sales office: 53 Soi Pasana 2, Sukhumvit Road, Prakanong Nua, Wattana, Bangkok 10110, Thailand info@polyasia.co.th Italy — Vagnone&Boeri — Europolish Vagnone&Boeri S.r.l. registered office: Via Stretta 63, 25070 Sabbio Chiese (BS), Italia info.vb@europolish.com Polyasia Co., Ltd. is independent and is not part of the Europolish / Hilzinger–Thum group. Vagnone&Boeri is the controller for contacts received directly or expressly forwarded to it; the general form for Italy is initially routed to Europolish S.r.l. For data and rights concerning a local relationship, contact the relevant company; for shared platforms and central processing, contact info@europolish.com.
Browsing and security
We process technical data needed to deliver pages and prevent misuse (IP address, request and device details). Our legal basis is the legitimate interest in website operation and security, Article 6(1)(f) GDPR. Requested technical preferences are described in the Cookie policy. We have not installed advertising analytics or commercial profiling tools. To limit misuse, we use counters and a pseudonymous identifier derived from the IP address that changes daily, separately from the privacy-choice register. Counters expire after periods ranging from a few minutes to one day; expired entries are removed by the next cleanup triggered by a request. They do not contain messages or contact details entered in forms.
Enquiries and quotations
Information you provide, such as name, email, company, country and application details, is used to respond and prepare the requested quotation. Legal bases: precontractual steps requested by the individual (Article 6(1)(b)) or the legitimate interest in dealing with a business representative (Article 6(1)(f)). Mandatory fields are needed to handle the enquiry. Acknowledging this notice does not authorise marketing. Europolish S.r.l. records your enquiry in its central services and forwards it through Microsoft 365 to the relevant local company according to country or area. The companies and contact details are listed in the Privacy notice; each is a separate controller for its own business contacts. Authorised central staff may also handle the enquiry in ASK. Form contact details are not sent to AI. Do not include unnecessary personal or confidential information.
Optional videos and maps
YouTube videos and Google maps load only after separate consent (Article 6(1)(a) GDPR and Article 122 of the Italian Privacy Code). The provider receives connection and device data and may use cookies, potentially linking them to your Google account according to its settings. Addresses, text and contact details remain available without these services.
Page and catalogue guide
The optional chat uses catalogue rules and AI support. OpenAI may process only coded technical data and public sources, not raw messages or contact details. You can use the ordinary form without enabling chat. Activation is based on consent, which you can withdraw in Privacy preferences (GDPR Article 6(1)(a)). Each submitted question, actual reply and any error are recorded on the server. A report with the date, language, country if provided, source page and messages is periodically sent to Giuseppe Vigevani, giuseppe.vigevani@europolish.com, including after the page is closed. We use it only to review assistance quality, correct errors and follow up customers and enquiries, not to assess individual employee performance. The basis is our legitimate interest in providing correct and continuous assistance (GDPR Article 6(1)(f)); you can object by contacting info@europolish.com. Operational records expire 180 days after the conversation is created and are removed by periodic cleanup. Email copies and protected backups have separate cycles and are not erased by clearing browser history. Do not enter passwords, confidential information or unnecessary personal data. ASK functions are covered by their own notice.
Choice records
Acceptance, refusal, changes and withdrawal are recorded with a random browser identifier, date, purposes, language and a copy of the notice presented. This register does not contain IP addresses, names, email addresses, messages or browsing history. Evidence is retained for 730 days from the event to document choices and accountability duties (Articles 5(2) and 7(1) GDPR). Expired records are excluded from consultation and removed at the next register cleanup. Only authorised administrators can access the register.
Recipients and international transfers
The service is hosted by OVHcloud. Microsoft 365/Microsoft Graph processes operational communications; Microsoft Entra provides organisational identification in ASK. Relevant data may be accessed by staff and branches authorised to handle the enquiry. Google/YouTube is involved on the website only after the choice for external content; WhatsApp/Meta only when you voluntarily open that service. OpenAI may process coded technical data and public sources in the optional Global chat. Authorised ASK AI functions may process technical data, messages or documents according to the function and ASK notice. Provider retention is separate from website report retention; erasure requests are handled according to the service used and applicable rights. We do not sell data for behavioural advertising. Transfers outside the EEA depend on the actual providers and contracts, with applicable safeguards; contact info@europolish.com for details. Forwarding an enquiry to the local company is disclosure to a separate controller for commercial follow-up; Europolish S.r.l. retains the central processing described above. Companies outside the European Economic Area may receive information relevant to the enquiry. For applicable transfer safeguards and how to obtain a copy, contact info@europolish.com.
Other retention periods
Enquiries and correspondence are retained while the enquiry is being handled and, if a relationship follows, for its performance. After completion, only data needed for legal duties, evidence of the relationship or protecting rights during applicable limitation periods are retained; a dispute may require retention for its handling. This criterion also applies to report emails; operational conversation records have a separate limit of 180 days from creation. Backups follow separate cycles with restricted access for service recovery. Browser preference periods are described in the Cookie policy; technical security data are retained in relation to incident prevention and handling and provider periods. Accounting records follow statutory retention duties. You may ask the relevant company about retention of your data.
Choices and rights
You may refuse optional services and still access the catalogue. Use “Privacy preferences” to change or withdraw consent at any time, prospectively. You may request access, rectification, erasure, restriction and portability where applicable, and object to processing based on legitimate interests. Contact info@europolish.com; include your receipt reference, if available, to help identify your browser’s choice. We normally respond within one month, subject to GDPR extensions. You may complain to the Italian data protection authority or the competent authority in your country.
Catalogue requests
Your name, company, email, country and any contact details and interests are processed to provide the requested catalogue and to handle contact only if requested. Legal bases: Article 6.1.b GDPR for pre-contractual steps requested, or Article 6.1.f for relationships with business contacts. The request is recorded in Europolish+Hilzinger Global Website and the email is sent through Microsoft 365. The link is valid for 14 days. The request record is retained for 12 months and deleted during the next cleanup triggered by requests or administrative access. Any subsequent correspondence follows the retention periods stated for commercial enquiries. To exercise your rights: info@europolish.com. No promotional consent is collected through this form.
WhatsApp / email
Opening WhatsApp transfers the prefilled question to WhatsApp/Meta. Opening email transfers it to your email application. The message reaches our team only when you send it in the chosen service.
Website and ASK: one service, permissions by role
Europolish S.r.l., Via Stretta 61–65, 25070 Sabbio Chiese (BS), Italy, is the controller for the Global and ASK platforms, accounts, security, privacy choices and central records and reports. Contact: info@europolish.com. Local companies listed in the opening section of the Global privacy notice are separate controllers for their own contacts and business relationships. Copies of enquiries managed in shared services remain accessible to authorised central staff according to their roles; local handling does not mean that only the branch can access the data. Shared sign-in grants no additional permissions.
Requests and samples
Website enquiries may be passed to ASK with contact details, company, country, language and the details confirmed in the form. Sample requests include product, quantity, packaging, customer, destination, freight payment and approval decisions, and may link to an analysis or countertype case. Operational emails include the reference, enquiry and relevant replies for handling and traceability, limited to content the recipient is permitted to receive. Internal notes and restricted documents do not thereby become visible to customers. Do not provide unnecessary third-party data; inform business contacts whose details you supply.
Cookie choices across both sites
ASK uses technical tools for sign-in, security and preferences, without advertising or audience-measurement cookies. The main website offers separate choices for YouTube videos, Google Maps and page guidance; external content remains blocked until the required choice. Website and ASK preferences remain separate by domain and device: common sign-in does not transfer consent for optional services. Closing ASK’s technical notice is not marketing consent. Newsletter preferences remain separate and optional.