Privacy Policy www.lbfgroupitalia.com

This website collects certain Personal Data from its Users.

Data Controller LBF Group Italia Srl – Via Luigi Einaudi 29 – Moncalieri 10024 (TO) – Tel. +39 0141 21 78 46 – VAT No. IT11519200015 – Email: info@lbfgroupitalia.com

Types of Data Collected

Among the Personal Data collected by this website, either independently or through third parties, are: Cookies, Usage Data, first name, last name, company name, country, address, and email address.

Complete details on each type of Personal Data collected are provided in the relevant sections of this privacy policy or through specific notices displayed before the data is collected.

Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this website.

Unless otherwise specified, all Data requested by this website is mandatory. Failure to provide such Data may make it impossible for this website to provide its Services. Where this website specifically states that some Data is optional, Users are free not to provide it without affecting the availability or functionality of the Service.

Users who are uncertain about which Personal Data is mandatory are encouraged to contact the Data Controller.

Any use of Cookies or other tracking tools by this website or by the third-party service providers used by this website, unless otherwise stated, is intended to provide the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy, if available.

Users are responsible for any third-party Personal Data obtained, published, or shared through this website and confirm that they have the right to communicate or disclose such Data, releasing the Data Controller from any liability towards third parties.

Methods and Location of Data Processing

Processing Methods

The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.

Data processing is carried out using computers and/or IT-enabled tools, following organizational procedures and methods strictly related to the purposes indicated.

In addition to the Data Controller, in some cases the Data may be accessible to certain persons involved in the operation of this website (administrative, commercial, marketing, legal personnel, system administrators) or external parties (such as third-party technical service providers, couriers, hosting providers, IT companies, and communication agencies), appointed where necessary as Data Processors by the Data Controller.

An updated list of Data Processors may be requested at any time from the Data Controller.

Legal Basis of Processing

The Data Controller processes Personal Data relating to the User if one of the following conditions applies:

• the User has given consent for one or more specific purposes;
• processing is necessary for the performance of a contract with the User and/or for pre-contractual obligations;
• processing is necessary to comply with a legal obligation to which the Data Controller is subject;
• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
• processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.

Users may always request clarification from the Data Controller regarding the specific legal basis applicable to each processing activity, and in particular whether the processing is based on law, contract, or contractual requirements.

Location

The Data is processed at the operating offices of the Data Controller and in any other locations where the parties involved in the processing are located.

Depending on the User’s location, data transfers may involve the transfer of the User’s Data to a country other than their own. Users may contact the Data Controller for further information regarding the location of processing.

Users also have the right to obtain information regarding the legal basis of Data transfers outside the European Union or to any international organization governed by public international law, as well as regarding the security measures adopted by the Data Controller to safeguard their Data.

Retention Period

Personal Data shall be processed and stored for as long as required by the purpose for which it has been collected.

Therefore:

• Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User shall be retained until such contract has been fully performed.
• Personal Data collected for the purposes of the legitimate interests of the Data Controller shall be retained as long as necessary to fulfill those purposes.
• Where processing is based on the User’s consent, the Data Controller may retain Personal Data until such consent is withdrawn.
• The Data Controller may also be required to retain Personal Data for a longer period whenever required by law or by order of an authority.

Once the retention period expires, Personal Data shall be deleted. Therefore, after such period, the rights of access, erasure, rectification, and data portability can no longer be exercised.

Purposes of Processing

User Data is collected to allow the Data Controller to:

• provide its Services;
• comply with legal obligations;
• respond to requests or enforcement actions;
• protect its rights and interests (or those of Users or third parties);
• detect malicious or fraudulent activities.

In addition, Data may be collected for the following purposes:

• contacting the User;
• session management;
• user database management.

User Rights

Users may exercise certain rights regarding their Data processed by the Data Controller.

In particular, Users have the right to:

• withdraw consent at any time;
• object to the processing of their Data;
• access their Personal Data;
• verify and request rectification of their Personal Data;
• obtain restriction of processing;
• request erasure of their Personal Data;
• receive their Data and transfer it to another controller;
• lodge a complaint with the competent data protection authority.

Right to Object

Where Personal Data is processed for a public interest, in the exercise of official authority vested in the Data Controller, or for the purposes of the legitimate interests pursued by the Data Controller, Users may object to such processing for reasons related to their particular situation.

Where Personal Data is processed for direct marketing purposes, Users may object to such processing at any time without providing any justification.

How to Exercise Rights

Users may exercise their rights by contacting the Data Controller using the contact details provided in this document.

Requests are submitted free of charge and will be processed by the Data Controller as soon as possible, and always within one month.

Further Information About Data Processing

Legal Defense

The User’s Personal Data may be used by the Data Controller for legal purposes in court or in the stages leading to possible legal action arising from improper use of this website or related Services.

The User acknowledges that the Data Controller may be required to disclose Personal Data upon request of public authorities.

Additional Information

Upon request, this website may provide Users with additional and contextual information concerning specific Services or the collection and processing of Personal Data.

System Logs and Maintenance

For operational and maintenance purposes, this website and any third-party services may collect system logs, which may contain Personal Data such as the User’s IP address.

Changes to This Privacy Policy

The Data Controller reserves the right to amend this privacy policy at any time by notifying Users on this page and, where technically and legally feasible, by sending a notification through any contact information available to the Data Controller.

Users are strongly advised to check this page regularly, referring to the date of the latest modification listed below.

Where changes affect processing activities based on User consent, the Data Controller shall collect new consent where required.

Last updated: May 27, 2026.