Privacy Notice
This notice explains how personal data submitted through this website (rpnbtraders.com) or by direct contact is handled, and says plainly what is not yet formalised.
Last updated:
Who is responsible for this website
The Data Controller of personal data collected through the RPNB website is Anmol Sharma, acting as an individual and operator of the RPNB project. For any request concerning the processing of personal data, the Data Controller may be contacted at the email address indicated in the Contact/Privacy section of the website: info@rpnbtraders.com. RPNB Traders is the trading name under which that activity is carried on from Treviso, Italy — formal company details to be published upon establishment. No registered company, legal form, company register entry, VAT number or registered business address is claimed at this stage; those details will be added to this page once the business is formally established.
Data Protection Officer and EU representative
As of the date of this Privacy Policy, the Controller has not appointed a Data Protection Officer (DPO), as the nature and current scale of the processing activities do not meet the conditions requiring mandatory designation under Article 37 GDPR. No representative pursuant to Article 27 GDPR has been appointed because the Controller is established within the European Union.
Data we may process
Identity and business contact details, company and project information, technical RFQ material and attachments, correspondence, and basic technical and security data generated when the website is accessed — including the data processed by Cloudflare Turnstile when the RFQ form is submitted.
Why we process it and legal bases
Personal data is processed, depending on the relevant purpose, where necessary to take pre-contractual steps at the data subject's request pursuant to Article 6(1)(b) GDPR; on the basis of the Controller's legitimate interests in managing B2B business relationships, maintaining website security, preventing abuse and protecting its rights pursuant to Article 6(1)(f) GDPR; and, where applicable, to comply with legal obligations pursuant to Article 6(1)(c) GDPR. In practice: an RFQ and the steps it triggers rest on Article 6(1)(b); the business contact details of the people who represent a company rest on Article 6(1)(f); enquiries and call bookings rest on Article 6(1)(b) and/or (f); operational and transactional email rests on the same basis as the interaction it belongs to; security, abuse prevention, rate limiting and logs rest on Article 6(1)(f); and the establishment, exercise or defence of legal claims rests on Article 6(1)(f) together with applicable legal obligations. Providing the data requested on the RFQ or contact route is not a statutory obligation: it is required in order to assess and answer your request, and if it is not provided the request cannot be handled. The privacy box on the RFQ form is an acknowledgement that you have read this notice — it is not the legal basis for the processing, and it is not consent to marketing. Nothing submitted through an RFQ is used for marketing. Analytics is the one activity that would rest on consent, and that consent can be withdrawn at any time.
RFQ attachments and confidential information
Submit only material you are authorised to share. File uploads are switched OFF on the RFQ form at this release: the form offers no file picker and the server refuses any file, so no attachment reaches this website or any of its providers — technical documents are exchanged by e-mail after first contact. If uploads are enabled later, the accepted types will be PDF, images, Office documents and CAD files (DWG, DXF, STEP/STP, IGES/IGS); archives such as ZIP, RAR and 7z, and executable files, will not be accepted, and attachments will not be scanned for malware — no malware scanning capability exists and none is claimed. This page will be updated before that change. If an NDA is required before technical documents are circulated beyond RPNB, indicate this in the RFQ form.
Sharing with manufacturers and partners
There is no automatic forwarding: the website transmits your submission only to the RPNB mailbox, and no RFQ is sent to any India-side or other partner by the site itself. Any sharing is a manual step, taken case by case, and only the minimum technical information needed for a quotation is shared — drawings, specifications, materials, quantities, tolerances and requirements. Your personal contact details are not shared by default. Where direct contact between you and a manufacturer becomes necessary, it is agreed with you first. Technical RFQ material is never published.
Service providers used for this website
The website relies on Cloudflare for network, security and content-delivery services, on Google Workspace for the mailbox behind info@rpnbtraders.com, and on Resend for operational and transactional email. These providers act as processors under their respective data processing agreements. Some of them are established outside the European Economic Area or process personal data outside it: Resend is a United States company and its data processing addendum states that its processing takes place in the United States, and Cloudflare and Google likewise process data outside the European Economic Area. Those transfers take place under the transfer mechanisms set out in each provider's data processing agreement — the European Commission's Standard Contractual Clauses adopted by Implementing Decision (EU) 2021/914 and/or the EU-US Data Privacy Framework. A copy of the safeguard relied on for a given provider can be requested at info@rpnbtraders.com. In concrete terms: the website runs on Cloudflare Workers, so Cloudflare is also the CDN, DNS and edge provider for the public site and for the non-public pre-launch staging host; Cloudflare Turnstile provides bot protection on the RFQ page, and a Cloudflare Workers KV namespace holds the RFQ rate-limiting records — a hash of the submitting e-mail address, a hash of the IP address, the associated counters and a submission identifier, with no RFQ content and no readable contact detail. Resend delivers the RFQ notification from rfq@mail.rpnbtraders.com and processes its content for that delivery. The notification is then received and stored in the info@rpnbtraders.com mailbox, which runs on Google Workspace. The Google booking page is described separately below: what you enter there is processed by Google under Google's own terms, and this notice makes no other claim about it. No analytics provider is in use: no analytics property is configured, so no analytics script is loaded and no analytics data is collected. No other third-party processor is used by the website code.
Booking a call through Google Calendar
The “Book a Call” page offers an appointment booking page hosted by Google (Google Calendar appointment schedules). No Google resource is requested until you choose to open it. If you open or use that booking page — in a new tab or in the page Google embeds — you interact with Google Calendar and other Google services, and the data you enter there, together with the technical data Google collects, is processed by Google under Google’s own terms and privacy policy. RPNB receives the resulting appointment in its own calendar, but does not control Google’s independent processing of that interaction and sets none of its terms.
International transfers to India
Certain personal data may be transferred to recipients located in India where this is necessary for the purposes described in this notice, in particular in order to obtain quotations from manufacturing sources. India is not covered by an adequacy decision of the European Commission. Where such transfers are regular, they are carried out on the basis of appropriate safeguards pursuant to Article 46 GDPR, including the European Commission's Standard Contractual Clauses adopted by Implementing Decision (EU) 2021/914, together with any additional safeguards required in the individual case. Transfers based on the derogations of Article 49 GDPR are used on an exceptional basis only. No transfer of this kind runs automatically today: the website forwards no request to any India-side recipient by itself, every instance of sharing is a manual decision taken case by case, and only the technical information needed for a quotation is sent, with personal contact data withheld by default.
Retention
Requests for quotation that do not lead to a business relationship, and leads that are not converted, are kept for 12 months from the closure of the request or from the last relevant communication, and are then deleted or anonymised. Ordinary correspondence is kept for 12 months from the last relevant communication. Records that become contractual, accounting, tax or legal-claims documentation are kept for the different period required by the applicable law.
Retention of appointment booking data
Data relating to appointments booked through Google Calendar — the event and the details you enter into Google's booking form, including your email address — is kept for 12 months from the date of the appointment and is then deleted, unless an ongoing business relationship, a legal obligation, or the establishment, exercise or defence of a legal claim requires it to be kept longer. That deletion is carried out by the Controller or by a person designated by the Controller, as a manual operation in Google Calendar: no automatic deletion mechanism exists and none is claimed.
Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent where processing relies on consent. Requests can be sent to info@rpnbtraders.com. You also have the right to lodge a complaint with the supervisory authority pursuant to Article 77 GDPR. The competent authority is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy. This is without prejudice to any other administrative or judicial remedy.
Updates
This notice will be updated when the business is formally established, when a regular transfer to India is activated, or when the website's service providers or processing activities change. The version published on this page is the current website notice.