Privacy Policy

1. Data controller

The controller of personal data is RTIndustry.
For any request concerning the processing of personal data, you can contact us at:

2. Data collected

2.1 Website (rtindustry.it)

The website does not collect personal data automatically. No analytics tools (Google Analytics or similar), tracking pixels or profiling cookies are installed.

The only personal data that may be processed is the data provided voluntarily by users through email messages to demo@rtindustry.it (demo requests and sales information) and assistenza@rtindustry.it (customer support), for example name, email address and message content.

2.2 RTIndustry product (software installed at the customer's site)

The RTIndustry software, installed at customers' premises, sends the following data to the Site Manager (the online license management service):

Category	Data	Purpose
Machine telemetry	OEE, machine state, shift, energy consumption	Production monitoring and technical support
Installation data	Hostname, serial number, hardware fingerprint, IP address	License validation and device identification
Contact data	Email, contact person's name, phone, reseller code	Sales communications and technical support

Contact data is entered, optionally, in the software's setup wizard (License step).

Operators' personal accounts and the activity log (who did what and when) are kept in the database installed on the customer's PC, who is their controller, and are not sent to the Site Manager.

2.3 Site Manager (online license management service)

The Site Manager is the online service, available at licenze.rtindustry.it, through which RTIndustry verifies licenses and customers and resellers consult their installations. It processes the following data:

• User credentials: username and password (the latter stored as a bcrypt hash)
• Event log: records of system activity (license validation, heartbeat, errors)
• License data: license key, status, expiry date, maximum number of machines

3. Legal basis for processing

The processing of personal data is based on the following legal bases (Art. 6 GDPR):

• Consent (Art. 6(1)(a)): for communications sent voluntarily by email and for the optional contact data entered in the software's setup wizard
• Performance of a contract (Art. 6(1)(b)): for license validation, production telemetry and provision of the service
• Legitimate interest (Art. 6(1)(f)): for system security, debugging and product improvement

4. Purposes of processing

Personal data is processed for the following purposes:

• License validation: checking the validity of the software license and managing its life cycle (trial, renewal, expiry)
• Production telemetry: collecting machine operating data for OEE monitoring, diagnostics and remote technical support
• Technical support: use of contact data and logs for assistance and problem solving
• Sales communications: sending information about updates and offers, only with the data subject's consent

5. Data retention

Type of data	Retention period
Machine telemetry (heartbeat)	Duration of the contract + 12 months
Contact data	Until consent is withdrawn
Event log	24 months
Site Manager user credentials	Until the account is deleted
License data	Duration of the contract + 12 months

Once these periods have elapsed, the data is deleted or irreversibly anonymized.

6. Sharing with third parties

RTIndustry does not sell or transfer users' personal data to third parties.

The data may be processed by the following parties, acting as data processors:

• GitHub, Inc. (website hosting via GitHub Pages) — servers located in the United States, with appropriate safeguards under Art. 46 GDPR (Standard Contractual Clauses)
• Cloud infrastructure provider (Site Manager hosting) — data centers located in the European Union
• Email service provider (@rtindustry.it mailboxes) — servers located in the European Union
• Authorized resellers — they can access the data of the installations assigned to them through the Site Manager, limited to support and license management

Production data (work orders, full telemetry, reports, operator accounts and activity log) stays in the database installed on the customer's PC. Only the data listed in section 2.2, needed for license management and support, reaches the Site Manager. RTIndustry accesses the data on the customer's PC only at the customer's request, for support interventions.

7. Rights of the data subject

Under Articles 15-22 GDPR, the data subject has the right to:

• Access — obtain confirmation of the existence of personal data and receive a copy of it
• Rectification — ask for inaccurate or incomplete data to be corrected
• Erasure — request the deletion of the data ("right to be forgotten")
• Portability — receive their data in a structured, machine-readable format
• Objection — object to processing on legitimate grounds
• Restriction — obtain the restriction of processing in the cases provided for by law

To exercise these rights, simply send a request to assistenza@rtindustry.it. We will reply within 30 days of receiving the request.

The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

8. Data security

RTIndustry adopts appropriate technical and organizational measures to protect personal data, including:

• HTTPS — the website and communications with the Site Manager are encrypted with TLS
• Password hashing — user credentials are stored with the bcrypt algorithm
• Encryption on the workstation — the installed program and the saved credentials (machine, proxy, database) are encrypted with a key tied to the PC's hardware
• Personal accounts — on the workstation each operator signs in with their own account and operations are recorded in the activity log
• JWT authentication — access to the Site Manager protected by tokens with an expiry
• Access control (RBAC) — differentiated roles (admin, reseller, viewer) with granular permissions

9. Changes to this policy

RTIndustry reserves the right to update this Privacy Policy at any time. Any changes will be published on this page, with the revision date at the top updated. We recommend checking this page periodically to stay informed about how data is processed.