Imhoff SRL , with registered office in Viale Primo Maggio n.14/16/18 CAP 71122 Foggia (FG) , VAT number IT04063460713, hereinafter the “ Owner ”, is responsible for the processing of personal data of users who browse the website www.imhoffsrl.it (www.imhoffsrl.it )(hereinafter, the “ Site ”). Contact details: Email: info@imhoffsrl.it

The Data Controller processes personal data provided directly by the user or collected automatically during navigation, including: • Identification and contact data: name, surname, email address, telephone number, other data voluntarily communicated via contact forms or newsletter subscription. • Browsing and technical data: IP address, log data, information collected through cookies or other tracking technologies, browser type, pages visited, access times, data relating to the device used.

Personal data is processed for the following purposes and on the following legal bases: Purpose: • Management of requests for information and contacts • Sending promotional communications and newsletters • Technical management, security and improvement of the Site • Compliance with legal obligations Legal basis: • Execution of pre-contractual measures (art. 6.1.b GDPR) • Explicit consent of the interested party (art. 6.1.a GDPR) • Legitimate interest of the Data Controller (art. 6.1.f GDPR) • Fulfilment of regulatory obligations (art. 6.1.c GDPR)

Personal data is processed using manual, computerized, and electronic means, in accordance with the principles of lawfulness, fairness, and transparency, ensuring adequate security measures to prevent unauthorized access, loss, modification, or unauthorized disclosure. The data is retained for the time strictly necessary to pursue the purposes indicated above and in any case for the terms established by current legislation.

Personal data may be communicated to: • Companies and suppliers that provide services connected and instrumental to the functioning of the Site (e.g. hosting, maintenance, IT services). • Public and judicial authorities in compliance with legal obligations. The data will not be disclosed publicly without the express consent of the interested party.

The data will not be transferred outside the European Union unless this is done in compliance with the guarantees provided by the GDPR and after specific information has been provided to the interested party.

The interested party has the right to exercise at any time the rights recognized by Articles 15-22 of the GDPR, including: • Access to personal data and request for a copy. • Correction of inaccurate data or integration of incomplete data. • Cancellation (“right to be forgotten”) in the cases provided for. • Limitation of processing in the cases provided for. • Objection to processing for legitimate reasons. • Portability of data provided in a structured and commonly used format. • Withdrawal of consent where the processing is based on consent. To exercise these rights, you can send a written request to the Data Controller using the contact details indicated in point 1.

The Site uses technical cookies and, with your consent, profiling and analytical cookies. For further information, please refer to the Cookie Policy available on the Site and the cookie banner active during access.

The Data Controller reserves the right to update or modify this policy at any time. The updated version will always be available on the Website, indicating the date of the last revision.