PROCESSING OF PERSONAL DATA
INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13, PARAGRAPH 1, OF EU REGULATION 2016/679

This Policy governs the methods by which Nuova Lofra srl, with registered office in Torreglia, Via Montegrotto 125, collects, stores, uses, communicates, or otherwise processes personal data collected from users of this website.

DATA COLLECTION
Your personal data may be collected by Lofra in various ways, namely:

Data provided directly by the User

The processing of the personal data you provide on the form on the website www.lofra.it, which you may update if necessary, is carried out solely to allow Lofra to provide the services on the website and requested by you (particularly the e-commerce service), as well as to fulfill specific obligations required by EU legislation, laws, or regulations. Any refusal to provide such data would make it impossible to manage this relationship, resulting in the inability to provide the requested services and proceed with the purchase of Lofra products. Submitting the form does NOT entail subscribing to any newsletter or receiving promotional material.

Data collected automatically

The Personal Data collected automatically through, but not limited to, the so-called "cookies" (as better specified in the following section), are – as a rule – data relating to the User's navigation.
The computer systems and software procedures used to operate the Site acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of internet communication protocols. This information is generally not collected to be associated with identified data subjects, but by its very nature, it could, through processing and association with data held by third parties, allow users to be identified.
This category of Personal Data includes the IP addresses or domain names of the computers used by Users who connect to the Site, the URI (uniform resource identifier) addresses of the requested resources, the time of the request, the method used to submit the request, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the User's operating system and IT environment.
This data is mainly used to obtain statistical information on the use of the Site and to check its correct functioning.
The Data may also be used to ascertain responsibility in the event of hypothetical computer crimes against the Site.

HYPERLINKS
The Site may contain links to other third-party sites ("Links"), deemed of interest to the User. By connecting to such sites, you freely leave this Site and access a site owned by a third party. The information contained on such sites is independent and beyond the control of Lofra, which assumes no responsibility in this regard, nor in relation to any processing of Personal Data that may occur in such circumstances. Consequently: (i) Lofra assumes no responsibility, nor provides any guarantee regarding the nature and content of any third-party websites connected to this Site via Links; (ii) this Policy does not apply to or relate to the processing of data by other websites, even if consulted by the User via Links; (iii) connections to third-party sites are the sole responsibility of the Users.

DATA CONTROLLER AND DATA PROCESSOR
The data controller is Nuova Lofra srl, with registered office at Via Montegrotto 125, Torreglia (PD), VAT number 04433800283, certified email: nuovalofra@legalmail.it.
The complete contact details of the data controllers appointed by Nuova Lofra srl are available upon written request sent to the email address privacy@lofra.it.

PLACE, METHODS OF DATA PROCESSING AND SUBJECTS TO WHOM THE DATA MAY BE COMMUNICATED
Data processing generally takes place at the site owner's headquarters.
In addition to data controllers, if appointed to manage specific data provided, your data may be disclosed to:
a) collaborators, employees, and suppliers of Nuova Lofra srl, within the scope of their respective duties and/or any contractual obligations with them;
b) subcontractors and/or suppliers engaged in activities related to the performance of the services and products offered by Nuova Lofra srl;
c) legal, administrative, and tax consultants to the extent necessary and/or functional to the performance of Nuova Lofra srl's business;
d) banking institutions for the management of collections and payments deriving from the execution of the interested party's contract;
e) public authorities for the purposes of fulfilling obligations set forth by Community legislation, laws or regulations.
The data will be communicated to third parties solely for the fulfillment of the contract being or being established with Nuova Lofra srl or to fulfill the obligations imposed by EU legislation, laws, or regulations.
Upon your request, Nuova Lofra srl undertakes to provide all the information and policies used by third parties in relation to the processing of the data provided.
Under no circumstances will the data you provide be sold to third parties.

METHODS OF TREATMENT
The data may be processed using both paper and electronic archives (including portable devices and cloud systems located within the European Economic Area or in a country for which an adequacy decision has been issued) and processed in a manner strictly necessary to fulfill the purposes indicated above. If it is necessary to process the data outside the EEA and in a country for which no adequacy decision has been issued by the European Commission, the Data Controller undertakes to ensure that the transfer occurs based on one of the mechanisms set forth in Chapter V of the GDPR, in particular the stipulation of Standard Contractual Clauses with the identification of appropriate technical or organizational measures, and in any case, you will be notified of this. In any case, the processing will be carried out in compliance with the security measures set forth in EU Regulation 2016/679 (Article 32), by specifically appointed persons (Article 29 GDPR). In any case, Nuova Lofra srl has studied the available technology, implementation costs, as well as the nature, scope, and purposes of the processing, thoroughly assessed the risk to the rights and freedoms of the natural persons involved, both in terms of likelihood and severity, and implemented technical and organizational measures to ensure a level of security most appropriate to protect your data from the risks presented by processing, particularly from accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed. Nuova Lofra srl undertakes to ensure that any person acting under its authority who has access to personal data does not process such data unless instructed to do so, unless required to do so by Union or Member State law.

DATA RETENTION
In compliance with the principles of lawfulness, purpose limitation, and data minimization, pursuant to Article 5 of EU Regulation 2016/679, in the event of non-compliance with the contract or its termination (for whatever reason), all data provided by you will be completely deleted within six months, except for data expressly required to be retained pursuant to explicit provisions of EU legislation, laws, regulations, or that may protect a legitimate interest of Nuova Lofra srl, for which retention is required for ten years.

PURPOSE OF THE PROCESSING AND NATURE OF CONSENT
Lofra processes Personal Data exclusively for the following purposes:
– purposes related to the use of Lofra's services and fulfilling any contractual obligations established with the User. Consent is not required.
– statistical and market research purposes; in this case, the data collected will be anonymous. Consent is provided by using the appropriate banner that appears when entering the site.

USER RIGHTS
At any time, you may exercise the following rights, provided the conditions are met and by contacting the data controller at privacy@lofra.it, pursuant to Articles 15 to 22 of EU Regulation 2016/679:
a. request confirmation of the existence or otherwise of your personal data and obtain information regarding the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed and, where possible, the retention period;
b. obtain the rectification and deletion of data;
c. obtain restriction of processing when one of the hypotheses provided for by art. 18 of EU Regulation 2016/679 applies;
d. obtain data portability, i.e., receive the data from a data controller in a structured, commonly used, and machine-readable format and transmit it to another data controller without hindrance;
e. where the processing is based on consent, withdraw it at any time without affecting the lawfulness of the processing based on the consent given before its withdrawal;
f. lodge a complaint with the Data Protection Authority;
g. object to automated individual decision-making, including profiling.
If necessary, a specific form will be provided upon request.
You will receive written feedback within one month of your request. The response time may be longer in particularly complex cases, but in any case, it will not exceed three months.
The exercise of these rights is, in principle, free of charge, but there may be exceptions: in cases of particularly complex processing, if the requests are manifestly unfounded, excessive, or repetitive (Article 12, paragraph 5), or if multiple copies of personal data are requested in the case of the right of access (Article 15, paragraph 3). In the latter case, the administrative costs incurred will be taken into account.

COOKIES
regarding cookies and navigation data collected on the LOFRA.IT website, please refer to the relevant page Click here.

CLARIFICATIONS
For any clarification or doubt regarding Lofra's data processing policy and this information, please contact the data controller at the email address privacy@lofra.it.
Finally, it is specified that Lofra may periodically modify, integrate, or update this Policy, in light of any changes to applicable legislation or provisions of the Guarantor for the Protection of Personal Data (“Guarantor”) or to the services offered on the Site.
Changes and updates to the Privacy Policy will be applied and brought to the attention of all interested parties as soon as they are adopted, by publishing them on the Site. Consequently, each User is invited to periodically access the Site to review this Privacy Policy, as it may be updated.