Privacy policy

Courtesy English translation (non-binding). The legally binding version is the Spanish original; in the event of any discrepancy, the Spanish version prevails.

This Privacy Policy describes how Idea Italia, S.A. ("Idea Italia") collects, uses, shares and protects the personal data processed through the Website (www.ideaitaliasa.com) and its associated services. It forms an integral part of the Terms and Conditions; for matters not addressed here, the Terms and Conditions apply. The Spanish version prevails over any translation.

1. Data controller

Idea Italia, S.A., with registered address at 17 calle A 18-70 Zona 10, Guatemala City, Republic of Guatemala, is the controller of the personal data collected through the Website. For privacy matters you may contact us at dpo@ideaitaliasa.com (data protection) or, for requests from California residents, at privacy@ideaitaliasa.com; telephone +(502) 2213 5656. Where applicable law requires the formal designation of a Data Protection Officer (DPO), Idea Italia will make such designation in accordance with the corresponding requirements.

2. Applicable regulations

We process data in accordance with Guatemalan legislation and, to the extent applicable based on the User's residence or location, with Regulation (EU) 2016/679 (GDPR), the UK GDPR, the California CCPA/CPRA, Brazil's LGPD (Law 13.709/2018), Canada's PIPEDA and other equivalent data protection regulations.

3. Personal data we collect

Data you provide to us.

Contact form: name, e-mail, telephone and the message you send us. Newsletter: e-mail. Client portal registration: company or business name, contact name, e-mail, telephone, address, Tax ID (NIT) and country.

Files and content you upload.

Drawings you upload to the automatic quoting tool (in PDF or image format) and the project files of your orders (for example, PDF and .rvt files), together with the quotations, budgets and comments that are generated.

Data collected automatically.

IP address, browser and device type, language, pages visited and basic interactions. Part of this data is logged for security, abuse prevention and activity logging; analytics data is collected only with your consent (Section 5).

4. Purposes and legal bases

We process data for the following purposes, under the legal bases indicated:

4.1 To respond to inquiries and contact requests (performance of pre-contractual measures and legitimate interest).

4.2 To manage newsletter subscriptions and send commercial communications (consent, which you may withdraw at any time).

4.3 To operate the client portal, prepare quotations and manage orders (performance of the contract).

4.4 To ensure the security of the Website, prevent fraud and abuse, and log activity (legitimate interest and compliance with legal obligations).

4.5 To comply with legal, tax, accounting and rights-defense obligations (legal obligation and legitimate interest).

4.6 To measure and improve use of the Website through analytics (consent).

5. Cookies and similar technologies

The Website uses cookies and browser local storage. We distinguish:

Essential cookies.

Necessary to log in, maintain your session and protect forms against request forgery (CSRF security token). They do not require consent because they are indispensable to provide the service.

Analytics cookies (Google Analytics 4).

These are activated only if you accept them in the cookie notice. We apply Google Consent Mode: by default, all signals are denied and no analytics data is loaded or transmitted until you accept. If you accept, Google Analytics installs cookies (for example, "_ga" and "_ga_<id>") to generate usage statistics. We do not use this data for advertising purposes nor do we activate Google's advertising signals.

reCAPTCHA.

The contact and quoting forms use Google reCAPTCHA to distinguish humans from bots and prevent automated abuse; for that purpose, Google may process data relating to your browsing.

Your consent choice is saved in your browser's local storage. You may change it at any time through the "Cookie preferences" link in the footer, or by configuring or deleting cookies from your browser. If you reject non-essential cookies, the Website will continue to function, but no analytics data will be collected.

6. Automatic quoting tool and artificial intelligence

The portal's automatic quoting tool uses automated processing and machine learning techniques to detect spaces and modules from the drawings you upload and to prepare a preliminary estimate or quotation. These quotations are drafts subject to review and do not constitute a binding offer or a decision producing legal or significant effects on you; the results are reviewed by Idea Italia personnel before any contracting. In accordance with Article 22 of the GDPR and equivalent regulations, you have the right, where applicable, to request human intervention, express your point of view and contest the result. When you interact with AI-based assistants or features, we will inform you of such interaction in accordance with Article 50 of the European Union Artificial Intelligence Regulation (EU AI Act), as of the date on which such obligations become enforceable.

7. Suppliers and data processors

To provide the service we share data with suppliers acting on behalf of Idea Italia under contractual obligations of confidentiality, use limitation and data protection: Google (Firebase for authentication, database and file storage; Google Analytics for analytics; reCAPTCHA for abuse prevention) and SendGrid (delivery of transactional e-mails and the newsletter). We do not sell your personal data nor transfer it to third parties for advertising purposes.

8. International transfers

Global use of the Website and of the indicated suppliers may involve the storage or processing of personal data outside your jurisdiction of residence, including outside Guatemala. Where necessary, Idea Italia will use appropriate safeguards, such as the European Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914), adequacy decisions, binding corporate rules, your express consent or other mechanisms recognized by applicable regulations.

9. Retention periods

We retain personal data for as long as necessary to fulfill the purposes described and while your relationship with us continues, and thereafter for the periods required by applicable tax, commercial, accounting or evidentiary regulations. Contact messages are retained for the time necessary to handle your inquiry and evidence the communication; newsletter subscriptions, until you unsubscribe; portal account data, while the account remains active. Once the periods have elapsed, the data is deleted or anonymized.

10. Minors

The Website is not directed to persons under eighteen (18) years of age. In the European Union, the processing of data of minors under sixteen (16) years of age requires the consent or authorization of the holder of parental responsibility or guardianship (with a possible reduction to thirteen (13) years of age under national legislation); in the United States, Idea Italia does not knowingly collect data from children under thirteen (13) years of age in accordance with COPPA. If we detect that we have collected data from a minor without valid consent, we will take reasonable measures to delete it.

11. Your rights

You may exercise, in accordance with applicable regulations, the rights of access, rectification, erasure, objection, restriction of processing, portability, withdrawal of consent (without affecting the lawfulness of processing carried out beforehand), the right not to be subject to decisions based solely on automated processing with legal or significant effects, and the right not to be discriminated against for exercising your privacy rights. To exercise them, write to dpo@ideaitaliasa.com stating your request; we may ask you to verify your identity. We will address your request within the periods provided by applicable law. If you believe your rights have not been addressed, you may file a complaint with the competent supervisory authority of your country.

12. California residents

Where the CCPA/CPRA applies, California residents may exercise the rights to know, access, correct and delete their personal information, as well as the right to opt out of the sale or sharing of their personal information ("Do Not Sell or Share My Personal Information"), where such activities occur or the law so requires, by request to privacy@ideaitaliasa.com or through the mechanism available on the Website. Idea Italia does not discriminate against Users for exercising these rights.

13. Security and breach notification

We apply reasonable technical and organizational measures to protect the data, including encryption in transit (HTTPS), access control and antivirus scanning of uploaded files. In the event of a security breach affecting your personal data, we will notify the competent authority and, where appropriate, you, within the periods required by applicable law, not exceeding seventy-two (72) hours where the GDPR, the UK GDPR or the LGPD apply. No security measure is infallible; you are also responsible for protecting your credentials.

14. Changes to this Policy

We may update this Policy to reflect changes in the Website, in our processing activities or in applicable regulations. Material changes will be notified with the advance notice provided in the Terms and Conditions (a minimum of thirty days for Material Changes, except where the law requires immediate application). We will publish the current version here with its effective date.

15. Contact

For privacy inquiries, exercise of rights or claims:

Idea Italia, S.A.
Address: 17 calle A 18-70 Zona 10, Guatemala City, Republic of Guatemala
Telephone: +(502) 2213 5656
Data protection: dpo@ideaitaliasa.com
Privacy (California consumers): privacy@ideaitaliasa.com
Legal matters: legal@ideaitaliasa.com
Website: www.ideaitaliasa.com