Privacy Policy

This policy applies to anyone who visits www.weprototype.it, registers on the platform, requests a quote or orders PCB assembly and prototyping services, or contacts us. The service is intended for businesses and professionals. The Italian version of this policy prevails.

1. Data controller

For any question about this policy or your data, write to the address above.

2. What data we process

• Account: first and last name, email, password (stored only as a non-reversible hash), profile picture if you upload one, preferences (newsletter, notifications), the secret for two-factor authentication if you enable it.
• Company and billing data: company name, VAT number, SDI code, registered office, logo; tax code if we invoice an individual; shipping and billing addresses.
• Orders and quotes: services requested, quantities, amounts, production status, delivery dates, shipment tracking number.
• Project files: CAD, Gerber, ODB++ files, bills of materials (BOM), drawings and documents you upload. They are mostly technical data, but may contain names or references of the people who prepared them.
• Messages: what you write in the contact form, in the order chat with our staff and in the website support chat.
• Payments: outcome and reference of the payment. Card and PayPal account details are handled by PayPal: we never see them.
• Browsing data: IP address, browser, pages requested, date and time, logged automatically by the server; technical data used by Google reCAPTCHA to tell people from bots.
• Statistics and session recording: only if you accept them in the cookie banner (see the Cookie Policy).

Data not provided by you (Art. 14): if you are a member of a company account, your name and email may have been given to us by your company's account administrator, who invites you to the platform. We do not process special categories of data (health, political opinions, etc.).

3. Why we process data and on what legal basis

Our legitimate interest is keeping the service secure and protecting the company; you can object to this processing (see section 11).

4. Do you have to provide your data?

Account data, billing data and project files are needed to provide the service: without them we cannot prepare a quote or an order. Newsletter, statistics and support chat are optional: if you decline them, the service works anyway.

5. Who we share data with

Data is never published or sold. It is processed by our authorised staff and by the following providers, each only for its own part:

In addition, as independent controllers:

• couriers and forwarders, to deliver goods;
• banks, for payments by bank transfer;
• tax, legal and IT advisers, bound by confidentiality;
• public authorities, when required by law.

To calculate quotes we query component distributors' catalogues (Mouser, DigiKey, Farnell, TME, Rutronik): we send only part numbers and quantities, never personal data. If you are a member of a company account, your company's account administrator can see your orders and projects.

6. Transfers outside the European Union

The platform and files are hosted on servers in the European Union. Some Google services and the library delivery networks may process data in the United States: such transfers rely on the provider's participation in the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023) or on the standard contractual clauses approved by the Commission.

7. How long we keep data

8. How we protect data

• connections always encrypted (HTTPS);
• project files available only after login and only to their owner, the owner's company and our staff;
• customers' CAD files also encrypted on the server's disk;
• passwords stored only as non-reversible hashes; two-factor authentication available;
• staff access restricted by role.

9. Automated decisions and profiling

We do not take decisions based solely on automated processing that produce legal effects on you (Art. 22 GDPR). Automatic quote calculation uses only the project's technical data. Statistics and session recording, if you accept them, help us understand how the website is used, not to profile you for advertising.

10. Minors

The service is reserved for adults acting on behalf of a company or in the course of their professional activity; we ask you to declare this when you register. We do not knowingly collect data from minors: if you believe this has happened, write to us and we will delete it.

12. Cookies

Technical cookies are always active; statistics, session recording and chat only with your consent. Details, duration and how to change your choices are in the Cookie Policy.