PRIVACY POLICY

Last updated: 17 June 2026

This Privacy Policy describes how the personal data of users who visit and use the website https://lbz.srl are processed.

This notice is provided pursuant to Regulation (EU) 2016/679, the “General Data Protection Regulation” or “GDPR”, and the applicable national legislation on personal data protection.

1. Data Controller

The Data Controller is:

L.B.Z. Lavorazioni Meccaniche Srl
Via della Meccanica, 7
37139 Verona – Italy
VAT No. 02585700236
E-mail: info@lbz.srl
PEC: info@pec.lbzweb.it

The Data Controller processes users’ personal data in compliance with the principles of lawfulness, fairness, transparency, data minimisation, storage limitation, integrity and confidentiality.

2. Types of data processed

Through the website https://lbz.srl, the Data Controller may process different categories of personal data, depending on how the user uses the website.

2.1 Browsing data

The IT systems and software procedures used to operate the website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This category includes, by way of example:

• IP address;
• type of browser used;
• operating system;
• domain name and addresses of the websites from which access was made;
• pages visited within the website;
• date and time of access;
• time spent on the pages;
• other parameters relating to the user’s operating system and IT environment.

These data are used to ensure the proper functioning of the website, obtain anonymous statistical information on its use and monitor its security.

2.2 Data voluntarily provided by the user

The voluntary sending of messages to the contact addresses indicated on the website, or the completion of any contact forms, entails the acquisition of the personal data communicated by the user.

Such data may include, by way of example:

• name and surname;
• company name or company of affiliation;
• e-mail address;
• telephone number;
• content of the request sent;
• any further data voluntarily included in the message.

The user is invited not to include unnecessary data, special categories of data or sensitive information in forms or communications, unless strictly necessary for the management of the request.

2.3 Data relating to customers, suppliers and potential customers

The Data Controller may process personal data relating to customers, suppliers, company contacts, potential customers or parties interested in the services and activities of L.B.Z. Lavorazioni Meccaniche Srl.

Such data may include:

• identification data;
• contact details;
• company and professional data;
• data necessary for the management of commercial, administrative, technical or contractual relationships.

2.4 Data collected through cookies and tracking tools

The website may use technical, statistical or third-party cookies and tracking tools.

For more information on the types of cookies used, their purposes and how consent is managed, users are invited to consult the website’s Cookie Policy.

3. Purposes of processing

Personal data collected through the website may be processed for the following purposes:

• to allow browsing and the proper functioning of the website;
• to ensure website security and prevent any unlawful or fraudulent activities;
• to respond to requests sent by the user via e-mail, telephone or contact forms;
• to provide information on the company’s services, machining activities and operations;
• to manage commercial, technical, administrative and contractual relationships;
• to comply with legal, tax, accounting or administrative obligations;
• to establish, exercise or defend a right in judicial or extrajudicial proceedings;
• to carry out statistical analyses on the use of the website, where applicable and within the limits permitted by the applicable legislation;
• to send informative or commercial communications, only in cases permitted by law or with the user’s consent, where necessary.

4. Legal basis of processing

The processing of personal data is based on the following legal bases:

• performance of pre-contractual or contractual measures, when processing is necessary to respond to a user request or to manage a commercial or contractual relationship;
• compliance with legal obligations, when processing is necessary to comply with tax, accounting, administrative or regulatory obligations;
• legitimate interest of the Data Controller, for example to ensure website security, prevent abuse, protect its rights or manage relationships with customers and suppliers;
• user consent, where required, for example for the use of non-technical cookies or for sending promotional communications not covered by other legal bases.

5. Processing methods

Personal data are processed using IT, electronic and, where necessary, paper-based tools, according to logic strictly related to the purposes for which they were collected.

Processing is carried out by adopting appropriate technical and organisational measures to ensure the security, confidentiality, integrity and availability of personal data, in order to prevent unauthorised access, loss, destruction, disclosure or unlawful use of the data.

6. Nature of data provision

The provision of browsing data is necessary to allow the website to function properly.

The provision of data through contact forms, e-mails or other communications is optional, but failure to provide the necessary data may prevent the Data Controller from responding to the user’s requests or providing the requested information.

The provision of data for promotional purposes or for non-technical cookies is optional and subject to the user’s consent, where required.

7. Data retention

Personal data are retained for the time strictly necessary to achieve the purposes for which they were collected.

In particular:

• browsing data are retained for the time necessary to ensure the functioning and security of the website;
• data sent through contact forms or e-mail communications are retained for the time necessary to manage the request and any subsequent relationships;
• data relating to customers, suppliers and contractual relationships are retained for the period required by the applicable civil, tax and accounting legislation;
• data processed on the basis of consent are retained until consent is withdrawn, without prejudice to legal obligations or legitimate protection needs of the Data Controller;
• data necessary to protect the Data Controller’s rights may be retained for the period necessary to establish, exercise or defend a right.

8. Recipients of personal data

Personal data may be processed by persons authorised by the Data Controller and by external parties carrying out activities on behalf of the Data Controller, within the limits of the purposes indicated in this notice.

By way of example, data may be communicated to:

• providers of IT, hosting, maintenance and website management services;
• tax, administrative, legal or technical consultants;
• suppliers and partners involved in the management of requests, services or commercial relationships;
• public authorities, bodies or parties to whom communication is mandatory by law;
• parties responsible for IT security and the protection of company systems.

External parties that process personal data on behalf of the Data Controller are appointed, where necessary, as Data Processors pursuant to Article 28 of the GDPR.

9. Communication and disclosure of data

Personal data will not be indiscriminately disclosed.

Data may be communicated exclusively to parties entitled to receive them, within the limits necessary to pursue the purposes indicated in this notice and in compliance with the applicable legislation.

10. Transfer of data outside the European Economic Area

Some technical or digital services possibly used by the website may involve the transfer of personal data to countries located outside the European Economic Area.

In such cases, the transfer will take place in compliance with the safeguards provided for by the GDPR, including adequacy decisions, standard contractual clauses or other safeguards provided for by the applicable legislation.

11. Cookies and tracking tools

The website may use technical cookies necessary for the functioning of the pages and, subject to consent where required, analytics cookies, third-party cookies or other tracking tools.

To learn in detail about the types of cookies used, their purposes, duration and how to manage or withdraw consent, users may consult the Cookie Policy published on the website.

12. Links to external websites

The website may contain links to third-party websites, platforms or services.

The Data Controller is not responsible for the personal data processing methods adopted by such third parties. Users are invited to consult the respective privacy policies before interacting with such services or providing personal data.

13. Rights of the data subject

The user, as data subject, may exercise the rights provided for by Articles 15 et seq. of the GDPR.

In particular, the user has the right to:

• obtain confirmation as to whether or not personal data concerning them exist;
• obtain access to their personal data;
• request the rectification of inaccurate data or the completion of incomplete data;
• request the erasure of personal data, in the cases provided for by law;
• request the restriction of processing;
• object to the processing of personal data, in the cases provided for by law;
• receive personal data in a structured, commonly used and machine-readable format, where applicable;
• withdraw the consent given, without affecting the lawfulness of processing based on consent before its withdrawal;
• lodge a complaint with the Italian Data Protection Authority.

14. How to exercise rights

To exercise their rights or request information relating to the processing of personal data, users may contact the Data Controller at the following addresses:

E-mail: info@lbz.srl
PEC: info@pec.lbzweb.it

The Data Controller will respond to requests within the time limits provided for by the applicable legislation.

15. Minors

The website and the services offered through it are not specifically intended for minors.

The Data Controller does not knowingly collect personal data relating to minors through the website. If a minor provides personal data, the person exercising parental responsibility may request its erasure by contacting the Data Controller at the contact details indicated in this notice.

16. Data security

The Data Controller adopts appropriate technical and organisational measures to protect personal data processed through the website against unauthorised access, loss, destruction, alteration, disclosure or unlawful use.

However, no IT system can guarantee absolute security. Users are therefore invited to use secure devices and connections when browsing and sending personal data.

17. Changes to this Privacy Policy

This Privacy Policy may be updated at any time in the event of regulatory, technical or organisational changes or in the event of changes to the processing activities carried out through the website.

Users are invited to consult this page periodically to check for any updates.

18. Contact details

For any request relating to this Privacy Policy or the processing of personal data, please contact:

L.B.Z. Lavorazioni Meccaniche Srl
Via della Meccanica, 7
37139 Verona – Italy
E-mail: info@lbz.srl
PEC: info@pec.lbzweb.it