Privacy

1Who is responsible

Individual Entrepreneur Claudia Abou Ibrahim, trading as RFQ to PO, registered at 2 Sativi Street (formerly 47/57 Merab Kostava St.), Tbilisi 0179, Georgia, identification number 304829121.

For anything about your data, write to direct@rfqtopo.com. We have not appointed a data protection officer, because we are not required to.

2Counting visits, without cookies

To see whether this site works and where our visitors come from, we count page views with Umami, an open source analytics tool. It sets no cookies and stores nothing on your device.

For each page view it records the page you opened, the page that referred you, the country, and the type of device, browser and operating system your browser reports. Your IP address is used to work out the country and to build a hash that groups the pages of one visit together; that hash changes daily and your IP address itself is not stored. Nothing here identifies you, and we cannot recognise you on a later visit.

If your browser sends a Do Not Track signal, we record nothing at all.

Umami runs on our own instance at analytics.sabala-mentoring.com, operated for us by Sabala Studios under a data processing agreement. The data stays on that server. It is never sold, never shared with an advertising network and never merged with anything else.

The legal basis is our legitimate interest in understanding whether the site does its job, Article 6(1)(f) GDPR. You can object to this at any time by writing to us, and browsers that block third party scripts already prevent it.

Beyond this, there is no advertising network, no social media pixel and no session recording on this site. The films, drawings and fonts are served from our own domain, so opening a page tells no one else that you were here.

3Server log files

Our hosting provider records the usual technical data when a page is served: the requesting IP address, the time, the page requested, the referring page, and the browser and operating system reported by your device. These logs exist to keep the site running and secure, for example to recognise attacks and faults.

The legal basis is our legitimate interest in a working and secure site, Article 6(1)(f) GDPR. The logs are held by the hosting provider for a short period and are not merged with any other data.

4The RFQ form

When you send a request through the form, we receive what you filled in:

• the items you need, with quantities, units and, if given, manufacturer and part numbers
• your delivery destination, the delivery term, your required date, your payment terms and, if given, your target price
• your company name, your name, your email address and, if given, your phone number
• anything you write in the notes field
• the documents you attach, see section 5

We use this to answer your request, to source the equipment and to prepare an offer. The legal basis is Article 6(1)(b) GDPR, steps taken at your request before entering into a contract.

How long we keep it. If no working agreement follows, we delete your request and its attachments seven days after we have answered it. If a working agreement follows, we keep what belongs to that business relationship for as long as the project and the applicable retention periods require.

We do not add you to a newsletter and we do not send you advertising.

5Documents you attach

A bill of quantities or a specification you attach is uploaded from your browser straight to our file storage and is reachable only through the link generated for it. A copy also arrives as an attachment to the email that brings your request to our inbox. Please do not attach anything you do not want us to hold. If your documents contain personal data of your own staff, you remain responsible for that data and we process it only to answer your request.

Attachments are deleted on the same schedule as the request they belong to.

6Email, phone and WhatsApp

If you write or call instead of using the form, we process what you send us for the same purpose and on the same legal basis. Ordinary email is not an encrypted channel; if a matter is sensitive, say so and we will agree another way.

WhatsApp is operated by Meta. If you choose to contact us there, your message and your phone number are processed by Meta under its own terms, which we do not control.

7Who processes data for us

We keep the number of services small and use them only where they are needed:

Vercel

Hosting of the site and of the file storage for your attachments, and the server log files described above.

Resend

Delivery of the email that carries your request to our inbox, and of the confirmation we send you.

Google Workspace

Our mailbox, where your request and any correspondence are stored.

Sabala Studios

Operates the Umami instance described in section 2 and maintains this website.

These providers act on our instructions under data processing agreements. Nobody else receives your data unless a supplier needs a technical detail to quote your requirement, in which case we pass on what the quotation requires and not your contact data, or unless we are legally obliged to disclose it.

8Where your data goes

We are based in Georgia, and our processors named above operate in the European Union and the United States. Georgia has no adequacy decision from the European Commission.

Where we receive data from the European Economic Area, the transfer to us is necessary to take the steps you asked for before a contract, Article 49(1)(b) GDPR. Where our processors transfer data, they rely on the European Commission's standard contractual clauses.

9Your rights

You can ask us for access to the data we hold about you, for its correction or deletion, for the restriction of its processing, and for a copy in a portable format. You can object to processing based on our legitimate interest. Write to direct@rfqtopo.com and we will answer without undue delay.

If you believe we handled your data wrongly, you can complain to a supervisory authority, in the European Economic Area usually the one where you live or work.

10Security

The site is served over an encrypted connection, and uploads travel encrypted to the file storage. Access to the mailbox and to the hosting account is protected by two-factor authentication and limited to the people who need it.

11Changes

If the site changes in a way that affects this notice, we update the notice and change the date at the top. The version you see here is the one that applies.