Privacy policy

The Data Controller is COMATEX Textile Machinery Srl, with headquarters in Via Ciurlina, 75 — 24050 Ghisalba (BG) — Italy.

• Telephone: +39 0363 943011
• Email: comatex@comatex.net
• VAT IT 02618890160 · REA BG-309270 · SDI ECK2R8E

For any request relating to personal data, you can write to the email address indicated above, specifying "Privacy" in the subject line. A Data Protection Officer (DPO) has not been appointed; the privacy contact is the company management.

Through this site we may process the following categories of data:

• Contact and company data che inserisci nella richiesta di preventivo o nel modulo contatti: nome e cognome, ruolo, ragione sociale, paese, email, telefono, dati fiscali se forniti.
• Technical process data: selected machines, quantities, technical notes, widths, fabric types and other information useful for formulating the offer.
• B2B reserved area credentials and activities, when you access your request history.
• Conversation data with the AI assistant: questions, answers, optional email provided to be contacted, suggested machines. They serve to guide you towards the right machinery.
• Browsing data (IP address, browser and device type, pages visited) processed by the hosting provider for security and service stability.

We do not request nor do we wish to receive special categories of data (Art. 9 GDPR). The site is not intended for minors.

• Managing requests for quotations, contacts and negotiations — legal basis: performance of a contract or pre-contractual measures requested by the data subject (Art. 6.1.b GDPR).
• Providing the B2B restricted area and showing you the history of requests — Art. 6.1.b GDPR.
• Providing the AI assistant and answering questions about the machinery catalogue — legal basis: explicit consent to interact with AI and to the processing of conversation data (Art. 6.1.a GDPR), in addition to pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR).
• Tax, accounting and legal obligations related to the supply of machinery — Art. 6.1.c GDPR.
• Website security, abuse prevention and anti-spam — legitimate interest of the data controller (Art. 6.1.f GDPR).
• Non-essential cookies, statistics and commercial communications — free and revocable consent (Art. 6.1.a GDPR).
• Legal defense of rights — legitimate interest (Art. 6.1.f GDPR).

The provision of data marked as mandatory in the forms is necessary to receive a response; without them, we cannot process the quotation.

In this version of the site, the request for quotation, the machine list, the technical comparison, the AI assistant and the B2B area function entirely in your browser: data is saved in the device's local memory (localStorage) and is not transmitted to any Comatex server or third parties, except as indicated for the AI assistant.

You can delete them at any time by clearing the site data from your browser or by resetting the request from the "Product Request" window.

This policy will be updated when the submission of requests moves to an archive managed by Comatex; at that time, we will explicitly indicate recipients, retention periods and server locations.

The site includes a digital assistant based on artificial intelligence that helps to identify the most suitable Comatex machine. Before starting the conversation, we explicitly ask you to agree to interact with an AI and to review the processing of the chat data.

The assistant does not replace a human consultant: responses are generated automatically and may contain inaccuracies. For technical, commercial or support data, always refer to the Comatex contacts listed on this page.

Conversations are transmitted to the artificial intelligence model via the Lovable AI gateway (service provider) to generate the response; do not enter sensitive data, special categories of personal data or confidential company information into the chat.

In this version of the site, the conversation and the relative consent are saved only in the local memory of your browser. When the archive moves to a server managed by Comatex, we will update this policy with details on processors, location and retention periods.

Data may be communicated, for the purposes indicated above, to:

• hosting, maintenance and IT security providers;
• tax, accounting and legal consultants;
• banking and insurance institutions for the management of payments and shipments;
• freight forwarders, installers and technicians in charge of delivery, assembly and servicing of the machines;
• Comatex agents and distributors in the customer's country;
• public authorities, when required by law.

Suppliers who process data on our behalf are appointed as data processors pursuant to Art. 28 GDPR. We do not sell or transfer personal data to third parties for their own purposes.

Comatex supplies textile machinery worldwide: to manage negotiations, shipments and technical assistance, corporate contact data may be transferred to agents, distributors or technicians in non-EEA countries.

In these cases, the transfer takes place on the basis of an adequacy decision by the European Commission or the Standard Contractual Clauses approved by the Commission, supplemented — where necessary — by additional security measures. You can request a copy of the safeguards adopted by writing to comatex@comatex.net.

• Unconverted quotation requests: 24 months from the last contact.
• Contractual, accounting and tax data: 10 years from the end of the relationship, as required by law.
• Data for assistance, spare parts and machinery revamping: for the entire life cycle of the plant.
• Consent to cookies: 12 months, then the choice is presented to you again.
• Data saved in the browser's local memory: until your manual deletion.

You may exercise the rights provided for in Arts. 15-22 GDPR at any time: access, rectification, erasure, restriction, portability, objection to processing based on legitimate interest and withdrawal of consent (without prejudice to processing already carried out).

The fastest way is to complete the rights exercise form: you will receive a reference code and a pre-filled email for the privacy office. Alternatively, write to comatex@comatex.net. Risponderemo entro un mese. Hai inoltre diritto di proporre reclamo al Garante per la protezione dei dati personali (www.garanteprivacy.it) o all'autorità di controllo del tuo paese di residenza.

United Kingdom and Switzerland

For UK residents, processing is carried out in accordance with the UK GDPR and the Data Protection Act 2018; for Swiss residents, in accordance with the FADP (nLPD). The rights described above apply equally and can be exercised at the same contacts; complaints may be filed with the ICO (UK) or the FDPIC (IFPDT/CH).

California (CCPA/CPRA)

If you are a California resident, you have the right to know what categories of personal information we collect and with whom we share them, to request their deletion or correction, and not to be discriminated against for exercising these rights. Comatex does not sell and does not share personal information ai fini di pubblicità comportamentale cross-context, e non tratta informazioni personali sensibili per finalità di profilazione.

Other countries

For customers in Brazil (LGPD), Canada (PIPEDA), Turkey (KVKK), India (DPDP Act) and other jurisdictions, we apply the same standards of transparency and security described in this policy, supplemented by the rights recognised by local law.

Full details of the technologies used, purposes and durations are in the cookie policy, where you can also modify or withdraw consent at any time.

We may update this policy to adapt it to regulatory developments or new site features. The current version is always published on this page with the date and version number; in cases of substantial changes, we will ask for your consent again where necessary.