1. INTRODUCTION

LHEVO Srl is committed to privacy protection.
We want users to browse our web pages safely, without any concerns about security issues. You can use most of our website without the need to provide any personal information. The privacy statement below provides an overview of how LHEVO Srl guarantees the protection of user’s privacy. It also shows which types of data are collected and why.
Specific privacy information will be provided when you register on the website (where required) or when you subscribe to our newsletter (where available).
LHEVO Srl, headquartered in 21, Stradone San Fermo – Verona (VR) 37121, is the data controller responsible for processing users’ personal data.

2. IP ADDRESS

Some personal data are acquired by computer systems and software procedures responsible for the functioning of this Website over the course of their operation. Data transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties. Through their processing and association with data held by third parties, the nature of this data itself could allow users’ identification.
This category of data includes IP addresses or the domain names of the computers used by users who connect to the Website, addresses in URI (Uniform Resource Identifier) notation for resources requested, the time of the request, the method of submission of the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the
server (successful, error, etc.), and other parameters related to your operating system and system environment.
The IP address is transmitted whenever a request is submitted to the server in order to allow the server itself to correctly address the response. When the user connects, the Internet Service Provider (ISP) assigns an IP address to the user. At any given time, the ISP is able to track the specific customer to whom a particular IP address has been assigned. In theory, as long as the IP address remains stored, it is possible to identify the owner of the Internet connection via the ISP. For this reason, neither our company nor our providers of statistical services store user’s IP address permanently. The IP address is just temporarily stored for the recognition of the session and for security reasons (e.g. to prevent any potential cyber-attack). The IP address is then deleted immediately, thus transforming any data collected into anonymous form. After that, it will no longer be possible to identify the user, not even through the Internet Service Provider.
Except as provided for paragraph 3 below in relation to the use of cookies on the Website, browsing data are used for the sole purpose of obtaining anonymous statistical information on the use of the Website and to check its correct functioning, and they are deleted immediately after processing. Data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the Website. Browsing data are processed for our legitimate interest to ensure the security of the Website, to check its correct functioning and to obtain statistics in relation to its use (art. 6, co. 1, let. f) of the Guidelines).

3. COOKIES

This website uses cookies. Visit our Cookie Policy for further information concerning cookies and to manage your cookie preferences.

4. PRIVACY

The protection of user’s privacy and the security of their personal data are key aspects for LHEVO Srl.
Data usage by LHEVO Srl is done in compliance with the provisions of the General Data Protection Regulation (GDPR) issued by the European Union, and according to the other reference regulations, including national ones. On the basis of Article 5 of the GDPR, all employees are required to process users’ personal data lawfully, fairly and transparently in relation to the data subject and in compliance with confidentiality obligations.

4.1. Processing activities

In accordance with the provisions of Article 30 of the GDPR, LHEVO Srl keeps what is known as “Register of Processing Activities”, which documents the use of data by LHEVO Srl, as well as the related data-processing activities. This register will be constantly updated in accordance with the data protection provisions defined in Article 30 of the GDPR.

4.2. Special categories of personal data

LHEVO Srl does not process any particular category of personal data on its website, as defined by Article 9(1) of the GDPR.

4.3. Guarantee of Data Protection

In principle, our company will not process user’s personal data without their prior consent and data processing will take place within the limits of the existing contractual relationship and for the agreed purposes in any case.
In case you contact us using our contact details or through the contact forms available on the Website, we will collect and store your data for the sole purpose of responding to your requests (art. 6, co. 1, let. b) of the Regulations). You are free not to provide such data. However, not providing them may make it impossible for us to fulfil your request.
MARKETING: given the optional consent of the user (art. 130 of Legislative Decree 130/2003; art. 6, co. 1, let. a) of the Regulations), which can be expressed by checking the appropriate consent box at the bottom of the contact
form, we will process user’s personal data for marketing purposes (direct sales, sending of advertising material, market research, commercial communication, customer satisfaction surveys) and for sending advertising information, offers and promotions related to
our products and services to your mailbox, by e-mail, SMS/MMS, WhatsApp or through telephone operators. The lack of consent to the processing of personal data for marketing purposes will by no means affect your possibility to navigate the Website or to obtain the requested service. At any time, the user will be able to withdraw their consent to the processing of personal data for marketing purposes freely and without any charge, even in a selective manner (for example, by communicating their will to stop receiving e-mail communications, wanting to receive only communications via SMS/MMS or by other means) by making a request to us as indicated in paragraph 5.10 below. Moreover, in relation to promotional communications sent by e-mail, the user will be free to revoke their consent to the processing of their e-mail address for marketing purposes by clicking on the unsubscribe link that is possible to find in each promotional e-mail.

4.4. Transfer and assignment of data

Any transfer of user’s personal data to third parties will only take place with the prior consent of the user except for transfers of data required by law, for example when we have to disclose data about our users at the request of public authorities in conformity with the procedures prescribed by the law.
Our employees and workers in charge of the maintenance and management of the Website may have access to personal data. Our third-party providers may have access to personal data, too. Acting as data processors, they provide us with IT and consulting services, given that these subjects must provide sufficient guarantees for the implementation of appropriate technical and organizational measures so that the processing of personal data complies with the requirements of the GDPR and guarantees the protection of the rights of the data subject.

4.5. Data security

The technologies used by LHEVO Srl to process user’s personal data (hardware, software, network, infrastructure) are compliant with security’s state of the art. Appropriate technical and organisational measures have been taken for these procedures in order to ensure compliance with the requirements of the GDPR.

5. INFORMATION TO BE COMMUNICATED

In this section, we provide information on the personal data processed within this website and on user’s rights and requests regarding data protection.

5.1. Categories of personal data

Within this website, personal data provided on a voluntary basis are processed through the completion of “Information Request” and “Newsletter” forms.
LHEVO Srl will process user’s personal data exclusively for the purposes the data were voluntarily entered for by user their selves while exercising their own right of informative self-determination.
In case of optional, explicit and voluntary sending of your personal data to addresses, by e-mail or to the fax numbers published on the Website or in case you call our phone numbers and communicate your personal data, we will consequently acquire such data, which are necessary to reply to requests submitted by you in relation to the Website (art. 6, co. 1, let. b) of the Regulations).
You are free not to provide such data. However, the lack of provision of those data may affect your possibility to obtain the requested service.
Retention of personal data provided at the request time will not exceed the maximum period of 12 months.

5.2. Right of access to personal data

In accordance with the provisions of the GDPR, at any time the data subject has the right to receive information in relation to the data processed within LHEVO Srl, the origin of such data, and any recipients to whom the data may be disclosed, as well as the purposes of the processing. Following a written request by the user, the information will be received from the responsible office of LHEVO Srl, whose contact details are indicated in point 5.10.
We will comply with the request once all legal requirements for processing the request made by the user for accessing personal data have been met. The user will be granted a 30 days access to personal data.

5.3. Right to erasure

According to the provisions of the GDPR, at any time the data subject has the right to obtain the cancellation of their personal data subject to processing by LHEVO Srl, provided that the request for erasure is not in conflict with any retention period imposed by law or other legal obligations. Once all the necessary prerequisites for the acceptance of the erasure request submitted by the user are met, we will comply with your request and we will proceed to erase the data within 30 days.

5.4. Right of objection

In accordance with the provisions of the GDPR, at any time the data subject has the right to object on grounds relating to their particular situation to the processing of personal data concerning them pursuant to Article 6(1) (e) or (f) of the Regulation, including profiling on the basis of these provisions. Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to processing of personal data concerning them carried out for such purposes, including profiling when related to such direct marketing.

5.5. Right to limit data processing

According to the provisions of the GDPR, the data subject has the right to obtain the limitation of the processing of personal data when certain specific conditions are met. Once all legal requirements are met, we will restrict the processing of your personal data within a period of 30 days.

5.6. Categories of recipients

No provision has been made for transferring data to third country recipients (outside of the European Union) or to an international organization.
There is no automated decision-making process.

5.7. Right to data portability

No provision has been made for data portability.

5.8. Withdrawal of consent

In accordance with the provisions of the GDPR, the data subject has the right to withdraw their consent to the processing of their personal data at any time, without having the need to provide any reasons. In this instance, we will stop processing the data subject’s personal data and we will delete them within 30 days, taking into account any retention periods imposed by law.

5.9. Competent Authority Complaints

In accordance with the provisions on privacy and personal data protection of both the GDPR and the Italian law, the data subject has the right to file a complaint with the Data Protection Supervisor (www.garanteprivacy.it) or with the different Competent Authority of the Member State of the European Union where they live or work, if they consider that the processing of their personal data violates the GDPR or the Italian law on privacy and personal data protection.

5.10. Further information

For further questions regarding the processing of personal data by LHEVO Srl and for the exercise of the data subject rights please do not hesitate to contact LHEVO Srl in writing to the registered office in Stradone San Fermo 21 – 37121 Verona (VR) or by e-mail at info@lhevo.com.
We inform you that we have appointed a Data Protection Officer, who can be contacted at the registered office of LHEVO Srl, in Stradone San Fermo 21 – 37121 Verona (VR) or by e-mail at info@lhevo.com.