Skip to main content
Change language:EN
Menu
Request a quote

Privacy policy

Last updated:

This policy explains what personal data we process when you visit this website or send us a request, what we use it for and what rights you have. We process your data in accordance with Dominican Law 172-13 and apply the standards of the European Union’s General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”).

1. Data controller

2. What data we process

Data you provide in the contact form: full name, company or organisation (optional), email address, phone number (required only if you prefer to be contacted by phone or WhatsApp), preferred contact method, client type, services of interest, request type, urgency, project location, description of your request and, if you add them, attachments (drawings, photos or specifications). Please do not include data about other people or sensitive information that is not needed for your request.

Data from your communications: if you email or call us directly, we process the data you provide in that communication.

Technical security data, generated when you use the form:

The form maintains abuse counters with keys derived from IP addresses and email using HMAC-SHA-256 and a daily salt. These keys contain neither value in plain text and expire within 24 hours; expired entries are removed when new requests are processed. The hosting provider may also log access, IP addresses and errors according to its configuration.

Form submissions are not stored on the web server or in any database: each request is delivered to us by email. We do not send a confirmation email to your address.

3. Why we use your data

We use your data to answer your request, prepare a quotation or technical visit and protect the form. We apply session verification, a honeypot, a minimum completion time and limits per IP address, email and total volume. Attachments are checked for format, content and size; images are re-encoded to remove metadata. ClamAV antivirus scanning and additional Cloudflare Turnstile verification are used only when configured on the server.

  • Steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR): assessing your request and preparing a quote.
  • Legitimate interest (Art. 6(1)(f) GDPR): answering enquiries that are not aimed at a contract and protecting the security of the site and the form (Recital 49 GDPR).

The checkbox you tick in the form only confirms that you have read the data protection information; it is not consent.

5. Recipients and processors

We do not sell or disclose your data to third parties unless required by law. To run the site and receive your requests, we use providers that act as processors and process the data only on our instructions:

Web hosting: a hosting provider that provides the servers on which this site and its form run.

Email delivery (SMTP): an email provider that carries the requests sent through the form to our mailbox.

Mailbox: the provider of the mailbox in which we receive requests (see section 6).

6. Data location and transfers

Requests and attachments are sent to info@promaindsare.com.do through the hosting mail service. The mailbox location and processing depend on the contracted email provider; the form does not use a Gmail recipient.

7. Retention period

  • Requests (emails and attachments): up to 12 months after the last communication, unless a contractual relationship begins; in that case, they are kept for as long as it lasts and for any periods required by law.
  • Anti-abuse counters: 24 hours at most.
  • Technical security logs (without contact data): 14 days.

8. Your rights

You can exercise your rights of access, rectification, erasure, restriction of processing, objection and portability at any time by writing to info@promaindsare.com.do. Please state which right you wish to exercise; if necessary to verify your identity, we may ask you for additional information.

9. Complaints

If you believe that we have not processed your data correctly, you can lodge a complaint with the competent supervisory authority:

  • In the European Union: the data protection authority of the member state of your habitual residence, your place of work or the place of the alleged infringement.
  • In the Dominican Republic: Law 172-13 provides for the habeas data remedy before the Dominican courts.

Before doing so, you are welcome to write to us so that we can try to resolve the matter.

10. Law 172-13 (Dominican Republic)

We process your data in accordance with Organic Law No. 172-13 on the Protection of Personal Data of the Dominican Republic. Among other things, this law recognises your rights to access your data and to request its rectification, updating or deletion. You can exercise these rights in the same way as described in section 8.

11. Automated decision-making

We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. The form’s spam filter works automatically and may block messages that look like spam. If you think your message was blocked by mistake, email us at info@promaindsare.com.do or call us (+1 829‑640‑5666 · +1 849‑637‑8442).

12. Security

The form is used over HTTPS and employs a technical session cookie, verification tokens and server validation. PHP temporarily stores attachments during the request; they are neither published nor retained in a site folder. Counters do not store inquiry content; the session keeps recent references and fingerprints to prevent duplicate submissions. Fonts and icons are local; an external anti-bot provider is used only if enabled. See the Cookie policy for more information.

13. Changes to this policy

We may update this policy when our processing activities or the applicable law change. The date of the last update is shown at the top of this page.