Personal data processing inventory

Data category

Name, email, phone, company and role

Purpose

Create accounts, connect quote requests to users, send notifications and provide support

Lawful basis

Contract performance, legitimate interest

Retention approach

While the account is active; afterwards for dispute and record periods

Sharing / access

Authorized Uretyco teams and identity/authentication infrastructure providers

Data category

Session, preference and security verification records

Purpose

Account security, abuse prevention and session continuity

Lawful basis

Legitimate interest, legal obligation

Retention approach

Usually 6-24 months depending on risk level

Sharing / access

Security, hosting and logging infrastructure

Data category

CAD/STL/STEP files, drawings, project notes and part notes

Purpose

Manufacturability review, cost estimation, supplier matching and post-order project tracking

Lawful basis

Contract performance, legitimate interest

Retention approach

During the project lifecycle; archived or deleted according to legal and technical needs

Sharing / access

Authorized technical teams and, where needed, manufacturing partners under confidentiality duties

Data category

Material, process, tolerance, finish, quantity and quality preferences

Purpose

Define quote scope, production planning and quality control criteria

Lawful basis

Contract performance

Retention approach

Together with quote, order and quality records

Sharing / access

Authorized parties in technical review, production and logistics workflows

Data category

Delivery address, billing profile, tax details and quote/order references

Purpose

Quote registration, invoicing, accounting, shipment and customer service

Lawful basis

Contract performance, legal obligation

Retention approach

For statutory tax and commercial record periods, commonly 10 years

Sharing / access

Accounting, e-invoice/e-archive, logistics providers and competent authorities

Data category

Payment preference, payment provider reference, card summary or bank transfer selection

Purpose

Payment confirmation, reconciliation, fraud prevention and order status updates

Lawful basis

Contract performance, legal obligation, legitimate interest

Retention approach

As needed for accounting and transaction security

Sharing / access

PCI-DSS scoped payment providers, banks and accounting infrastructure

Data category

IP address, device/browser data, error logs and security events

Purpose

System security, troubleshooting, abuse detection and unauthorized access prevention

Lawful basis

Legitimate interest, legal obligation

Retention approach

Usually 6-24 months depending on log type

Sharing / access

Hosting, security, monitoring and incident response tools

Data category

Cookie preferences, consent records, support messages and communication history

Purpose

Apply cookie preferences, respond to support requests and improve service quality

Lawful basis

Consent, contract performance, legitimate interest

Retention approach

According to Cookie Policy and the nature of the support record

Sharing / access

Support, analytics and communication infrastructure; marketing consent is managed separately