Semac International Ltd — semacint.com

Version 1.0 · 20 August 2026

This Privacy Policy explains how Semac International Ltd collects, uses and protects personal data in connection with the website semacint.com. It is written to be read, not to be survived: if anything below is unclear, write to us at privacy@semacint.com and we will explain it.

1. At a glance

Who we are: Semac International Ltd, a company established in Nicosia, Cyprus. We are the controller of the personal data described here.
What we collect: the business contact details you type into our contact form, and technical data your browser sends when you visit the site.
Why: to answer your enquiry, prepare a quotation, perform a contract, keep our records, keep the site secure and — only with your consent — measure how the site is used.
Cookies: nothing that tracks you runs before you allow it. Analytics stay switched off until you accept them in the cookie banner.
We do not sell personal data, we do not make it available to advertisers for their own purposes, and we do not take automated decisions about you.
Your rights: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time. We answer within one month.
Contact: privacy@semacint.com.

2. Who we are

The controller responsible for the processing described in this Policy is:

Company	Semac International Ltd
Registered office	Alamanas 3, Flat 103, Lakatamia, 2310 Nicosia, Cyprus
Registration	HE 397733 · VAT CY10397733Y
Telephone	(+357) 222-62316 · (+357) 968-60096
General enquiries	sales@semacint.com
Data protection	privacy@semacint.com

We are not required to appoint a Data Protection Officer under Article 37 GDPR: we are not a public authority, and our core activities do not consist of large-scale monitoring of individuals or large-scale processing of special categories of data. We have nonetheless designated a single point of contact for data protection matters, reachable at privacy@semacint.com, so that a request never depends on finding the right person.

3. What this Policy covers

This Policy covers the website semacint.com in both its English and Greek versions, and the enquiries we receive through it. It also covers the correspondence that follows an enquiry — the quotation, the technical clarification, the order.

It does not cover:

Other websites of the SEMAC group. They are operated by different companies and have their own privacy policies. Reading this one tells you nothing about those.
Manufacturers' own websites that we link to. Once you follow such a link, that manufacturer's privacy policy applies, not ours (see section 12).
Our internal staff application at /admin, which is not open to the public and is governed by our internal employment and IT policies.

4. What personal data we collect

4.1 Data you give us

The contact form is the only place on this site where you can give us personal data. It collects exactly the following, and nothing else. Fields marked * are required — the form will not submit without them.

Field	Required	Why we ask
First name, last name	Yes *	To address you properly in our reply.
Email address	Yes *	To send you the answer, the quotation or the datasheet.
Message	Yes *	Your enquiry itself. Please do not include information you would not want in an email.
Company	No	To route the enquiry to the right specialist and to check whether we already work with you.
Telephone	No	Because a measurement application is often faster to resolve by phone than by email.
Industry	No	To pick an instrument suited to your process conditions.
Product interest	No	Pre-filled when you enquire from a product page, so you do not have to describe what you were looking at.
Consent tick	Yes *	Your confirmation that you have seen this Policy. We record that it was given.

Together with your entry we automatically record the language version of the site you used, the address of the page you submitted from, and the time of submission. The page address matters: it is what tells our specialist which instrument you were reading about.

The form is for business enquiries. We do not ask for, and please do not send us, special categories of data — health, religious or political views, trade-union membership, biometric or genetic data. If such information reaches us in a free-text message anyway, we delete it from our records.

4.2 Data collected automatically

Server and security data, recorded by our hosting provider whenever a page is served: IP address, the requested address, the time, the type and version of your browser and operating system, and the page that referred you.
Analytics data, and only if you accept analytics cookies: which pages you viewed and in what order, approximate location derived from your IP address at country/city level, device and browser type, and whether you submitted the contact form. This never includes your name, email address or telephone number — those are deliberately excluded from what is sent to the analytics service.
Your own preferences, stored in your browser and never transmitted to us: your cookie choice, and any accessibility settings you turn on (see section 7).

5. Why we use it, and on what legal basis

Every purpose below has a legal basis under Article 6(1) GDPR and a retention period. Nothing is kept "just in case".

Purpose	Legal basis	How long we keep it
Answering your enquiry; preparing and sending a quotation	Steps taken at your request prior to entering a contract — Art. 6(1)(b)	24 months from our last exchange, if the enquiry does not lead to a business relationship. Then deleted.
Performing an order or contract, and the correspondence around it	Performance of a contract — Art. 6(1)(b)	For the duration of the relationship, then as required by the retention below.
Accounting, invoicing and tax records	Legal obligation — Art. 6(1)(c)	6 years, as required by Cypriot tax and company law.
Keeping the website and our systems available and secure; investigating abuse	Legitimate interests — Art. 6(1)(f): running a service that is not disrupted or defaced	Server logs, up to 12 months.
Understanding how the site is used, so we can improve it	Your consent — Art. 6(1)(a), given in the cookie banner and withdrawable at any time	14 months in the analytics service, then aggregated.
Recording that you were shown this Policy and ticked the consent box	Legal obligation — Art. 6(1)(c), read with Art. 7(1): we must be able to demonstrate consent	As long as the enquiry record itself.
Defending a legal claim, if one arises	Legitimate interests — Art. 6(1)(f)	Until the claim is time-barred.

Where we rely on legitimate interests, we have weighed our interest against your rights and freedoms and concluded that the processing is limited to what a visitor would reasonably expect. You may ask for a summary of that assessment at privacy@semacint.com.

We do not send marketing emails from this site. Submitting the contact form gets you an answer to your enquiry — it does not subscribe you to anything. If we ever introduce a newsletter, it will have its own separate opt-in and its own entry in this table.

6. Where your enquiry goes

A submitted form is written to our internal enquiry-management system, which runs on Google Cloud infrastructure (Firebase) under a contract that binds Google to act only on our instructions. From there it is read by the members of our team who handle enquiries of that kind — a sales engineer, and where the question is technical, a specialist for the instrument concerned. Access is limited to those people and is authenticated.

Beyond that, personal data may be disclosed to:

Our IT, hosting and email providers, acting as processors on our instructions and under a data processing agreement.
A manufacturer we represent, where your enquiry can only be answered by that manufacturer's application engineers — for example an unusual process condition needing a factory sizing calculation. We pass on what is needed to answer, and we tell you when we do this.
Our accountants, auditors and legal advisers, bound by professional confidentiality.
Public authorities, where the law obliges us to disclose. We do not volunteer data.

We do not sell personal data, rent it, or make it available to advertisers or data brokers for their own purposes.

7. Cookies and similar technologies

This site uses very few. Everything except the strictly necessary items below stays switched off until you accept it: the advertising and analytics signals are set to "denied" before any tag can fire, and only your acceptance in the banner changes that. Refusing costs you nothing — the whole site works either way.

Name	Type	Category	Expiry	What it does
`cookie-consent`	Local storage	Strictly necessary	Until you clear it	Remembers the choice you made in the cookie banner, so you are not asked again on every page.
`semac-int-accessibility-config`	Local storage	Strictly necessary	Until you clear it	Remembers accessibility settings you turned on — larger text, higher contrast, reduced animation.
`_ga`	Cookie	Analytics — consent required	2 years	Google Analytics: distinguishes one visitor from another so that visit counts are not double-counted.
`_ga_<property id>`	Cookie	Analytics — consent required	2 years	Google Analytics: keeps the state of your current visit.

The two "strictly necessary" entries are local storage, not cookies: they stay in your browser and are never sent to us or to anyone else. They exist so that the site can honour a preference you have already expressed, which is why they need no consent.

The banner also offers a marketing category. We want to be straightforward about it: this site currently loads no advertising tags at all. The category exists so that Google's advertising consent signals are explicitly set to "denied" unless you choose otherwise, and so that the choice is already yours if we ever do run a campaign. If that changes, we will update this section and ask for your consent again before anything runs.

To change your mind at any time, use the shield button at the bottom-left corner of any page. You can also delete cookies in your browser settings, or use your browser's "do not track" and privacy features — Chrome, Firefox, Safari and Edge all offer per-site controls.

8. International transfers

Our hosting and analytics providers are part of global groups, so some of the data described above may be processed outside the European Economic Area, in particular in the United States.

Where that happens, the transfer is covered by one of the safeguards Chapter V GDPR requires: an adequacy decision of the European Commission — including the EU–US Data Privacy Framework, where the recipient is certified under it — or the European Commission's standard contractual clauses, supplemented where necessary by additional technical and organisational measures. You may request a copy of the safeguards applied to a particular transfer at privacy@semacint.com; we may redact commercially confidential terms before sending it.

9. How we protect your data

The whole site is served over HTTPS, so what you type into the form is encrypted in transit.
Enquiry records are held in an access-controlled system; only authenticated members of our team can read them, and only those who need to.
Our providers are chosen on the basis of, among other things, their security posture, and are bound by written data processing agreements.
We keep the amount of data we hold small on purpose. Fewer fields and shorter retention are the most reliable security measures there are.

No system is perfect. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Commissioner within 72 hours of becoming aware of it as Article 33 GDPR requires, and we will inform you directly where Article 34 requires it.

10. Your rights

Under the GDPR you have the right to:

Access — obtain confirmation of whether we hold data about you, and a copy of it (Art. 15).
Rectification — have inaccurate data corrected and incomplete data completed (Art. 16).
Erasure — have data deleted where there is no longer a lawful reason to keep it (Art. 17). This does not extend to records we are legally obliged to retain, such as invoices.
Restriction — have processing paused while a dispute about accuracy or lawfulness is resolved (Art. 18).
Portability — receive data you gave us in a structured, machine-readable format (Art. 20).
Object — object to processing based on our legitimate interests (Art. 21). We stop unless we can demonstrate compelling grounds that override your interests.
Withdraw consent at any time, without giving a reason (Art. 7(3)). Withdrawal does not affect processing that already took place lawfully. For analytics, the shield button at the bottom of any page is the fastest way.
Not be subject to automated decision-making (Art. 22). This is straightforward here: we take no automated decisions with legal or similarly significant effects, and we do no profiling.

How to exercise them: write to privacy@semacint.com, or by post to the address in section 2. Tell us which right you are exercising; if you can, tell us roughly when you contacted us, which helps us find the record.

We answer within one month. For a complex or multiple request we may extend that by two further months, in which case we tell you within the first month and explain why (Art. 12(3)).

Identification is proportionate. As a rule it is enough that your request comes from the email address we already hold, or that you confirm a detail we already have. We do not ask for a copy of an identity document as a matter of routine. Exercising these rights is free; we may charge a reasonable fee only for a manifestly excessive or repetitive request (Art. 12(5)).

11. Complaints

If you think we have handled your data wrongly, please tell us first — most issues are a misunderstanding we can resolve in a day. But that is not a precondition, and you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

The competent authority for us is the Cypriot one:

Office of the Commissioner for Personal Data Protection (Cyprus)
Website: www.dataprotection.gov.cy
Email: commissioner@dataprotection.gov.cy · Telephone: +357 22 818 456

You may also complain to the supervisory authority of the EU or EEA country where you live or work, or where you believe the infringement took place — and you have the right to an effective judicial remedy against us or against a decision of a supervisory authority (Arts. 78 and 79 GDPR).

12. Links to other sites

Our product pages link to manufacturers' datasheets and websites. Those are independent third parties: we do not control what they collect and we are not responsible for their privacy practices. When you follow such a link you leave semacint.com, and their privacy policy takes over from this one. It is worth reading — some of them embed considerably more tracking than we do.

We embed no social-media buttons, no chat widgets and no third-party video players, so nothing on our pages reports your visit to a third party unless you accept analytics.

13. Children

This site addresses industrial and commercial professionals. It is not directed at children, and we do not knowingly collect data about anyone under 18 through it. If you believe a child has sent us personal data, write to privacy@semacint.com and we will delete it.

14. Changes to this Policy

We update this Policy when what we do changes — a new tool, a new purpose, a new recipient — or when the law does. The version number and date at the top always identify the text you are reading.

For a material change — a new purpose, a new category of recipient, a new legal basis — we publish the new version with a visible notice at least 30 days before it takes effect, so that you can read it and object before it applies. Where the change concerns something you consented to, we ask for your consent again rather than assuming the old one carries over. Minor corrections — a clarified sentence, a corrected typo, an updated telephone number — take effect on publication.

Previous versions are available on request at privacy@semacint.com.

15. How to contact us

For anything in this Policy, for a data subject request, or simply to ask what we hold about you:

Email: privacy@semacint.com
Post: Semac International Ltd, Alamanas 3, Flat 103, Lakatamia, 2310 Nicosia, Cyprus
Telephone: (+357) 222-62316

For commercial enquiries that have nothing to do with data protection, sales@semacint.com reaches our team faster.

Version 1.0 — the first version of this Policy, published 20 August 2026. Future versions will list their changes here.