Privacy notice

Privacy notice in accordance with article 13 of EU Regulation 2016/679 on data protection

OMFB S.p.a. – HYDRAULIC COMPONENTS with registered office in Via Cave 7/9 , Provaglio di Iseo (BS), Italy (hereafter referred to as “O.M.F.B.” and/or the “Controller”) wishes to inform the users of its website (hereafter referred to as “Users” or, in the singular, “User”) about the processing of the data provided by them, on a voluntary basis, during their registration on the website and/or within a contact request, through the relevant function available on www.omfb.com website (hereafter referred to as “Site”) and/or while sending a purchase order concerning O.M.F.B.’s products, through the Site.
In particular, O.M.F.B. informs the Users that, according to article 13 of the EU Regulation 2016/679 adopted by the European Parliament and Council on 27 April 2016 concerning the protection of natural persons with regard to the processing of personal data, as well as the free circulation of such data and that repeals the EC Directive 95/46/EC (hereafter referred to as the “GDPR”), the personal data provided to O.M.F.B. can be processed according to the terms and methods specified hereinbelow.

Data subject to processing
The Controller shall process the following data:

• access and browsing data on the Site: information relating to the manner in which the User uses the Site, the user’s IP address, as well as information collected through tracking tools, as further specified in O.M.F.B. Cookie Policy;
• personal data, contact details, tax code, address and place of birth of the User, company of affiliation, customer code, provided to the Controller by the user itself by filling in the forms available on the Site
  (hereinafter collectively, the “Personal Data”).

Purposes of the processing – Legal basis
Personal Data shall be processed for the following purposes:

1. to receive and manage the purchase orders sent through the Site;
2. to manage and respond to contact requests sent by Users through the dedicated form made available on the Site;
3. administrative, accounting and tax purposes related to purchase orders;
4. to improve the services offered through the Site;
5. to inform Users about new O.M.F.B. products through access to the relevant reserved areas of the Site;
6. to send Users communications concerning the products and services offered by O.M.F.B., using the contact details provided;
7. to ensure the proper use of the Site;
8. to manage the applications received and carry out personnel selection activities;
9. to manage registration requests, scheduling of meetings at trade fairs, as well as create and administer the User’s account;
10. to allow access to the reserved areas of the Site and/or to the connected web-apps.

The processing activities are therefore carried out, with regard to the purposes indicated in points a), b), h), i) and j) above, in order to perform contractual and/or pre-contractual measures adopted at the request of the user itself or of the data subject, pursuant to Article 6(1)(b) of the GDPR.
The processing activities referred to in point c) above are carried out in order to comply with the legal obligations to which the Controller is subject, pursuant to Article 6(1)(c) of the GDPR.
The processing activities referred to in points d), e) and g) above are carried out in pursuit of a legitimate interest of the Controller, pursuant to Article 6(1)(f) of the GDPR.
Finally, the processing referred to in point f) is based on the explicit consent given by the data subject, pursuant to Article 6(1)(a) of the GDPR.

Modality of the processing
The data processing shall be performed in compliance with the principles of necessity and relevance, using procedures, including computerised procedures, in the ways and within the limits necessary to pursue the aforementioned purposes.
The processing shall be carried out by means of paper and electronic tools suitable to ensure security and confidentiality and may also be carried out through automated tools capable of storing, managing and transmitting the data.
They shall be stored at OMFB as well as at third parties specifically appointed as Data Processors pursuant to Article 28 of the GDPR.

Consequences of the refusal to provide Personal Data
Your Personal Data are necessary to enable O.M.F.B. to receive and manage purchase orders submitted through the Site, comply with the related administrative, accounting and tax obligations, communicate with Users regarding the products and services offered, as well as manage and respond to contact requests sent through the dedicated form made available on the Site. Failure to provide the necessary data may make it impossible, in whole or in part, to process the purchase order, contact request or communication submitted by the User.

Parties to whom Personal Data may be communicated
The Personal Data, within the scope of our Company’s activities, may be communicated to:

1. external consultants who handle O.M.F.B.’s accounting and/or tax matters;
2. external consultants appointed to carry out specific processing activities on behalf of OMFB or for the protection of its rights;
3. parent companies, subsidiaries or investee companies, where necessary to follow up on the data subject’s requests.

The processing of Personal Data may be carried out by O.M.F.B.’s internal staff authorised and appointed to carry out the processing, pursuant to Article 29 of the GDPR, identified by means of specific appointment letters.

Personal Data transfer
Your Personal Data shall not be transferred to non-EU countries: where this is necessary, the Controller undertakes to adopt appropriate safeguards aimed at ensuring the protection of the data and the security of the transfers in accordance with the provisions of Articles 44 et seq. of the GDPR. Further information may be requested by writing to privacy@omfb.it. It remains understood that, where the data are transferred by O.M.F.B. to its branches and/or foreign subsidiaries located in non-EU countries, the latter shall act in accordance with the provisions of the GDPR for the purposes referred to in the preceding paragraphs of this privacy notice. In the event of transfer of data to third parties, O.M.F.B. undertakes, where possible, to enter into specific agreements adopting standard data protection clauses adopted by the European Commission in order to ensure greater protection and safeguarding of Your Personal Data throughout the entire processing and to provide the appropriate safeguards referred to in Article 46 of the GDPR.

Storage period of the Personal Data
The Controller shall process the personal data for the time necessary to fulfil the above purposes pursuant to law and, where Your consent is required, until such consent is withdrawn.

Rights of the Data Subject
Pursuant to Article 15 of the GDPR, you, as data subject, have the right to obtain from the Controller confirmation as to whether or not personal data concerning You are being processed and, where that is the case, to obtain access to the personal data and to the following information:

1. the purposes of the processing;
2. the categories of personal data concerned;
3. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
4. where possible, the envisaged period for which the personal data will be stored or, where this is not possible, the criteria used to determine that period;
5. he existence of the right of the data subject to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning him or her, or to object to such processing;
6. where the data are not collected from the data subject, any available information as to their source;
7. the existence of automated decision-making, including profiling referred to in Article 22(1) and (4), and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.

Where applicable, the data subject also has the rights referred to in Articles 16-21 GDPR (right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Italian Data Protection Authority.

Furthermore, we inform you that you shall have the right to withdraw consent, where required and given, to the processing of Personal Data at any time, without affecting the lawfulness of processing based on consent given before its withdrawal, as provided for by Article 13(2)(c) of the GDPR.

To exercise the rights provided for by Article 15 GDPR, the data subject must send a specific written request by e-mail to privacy@omfb.it.

Finally, we inform you that you have the right to lodge a complaint with the Italian Data Protection Authority for the exercise of your rights, in the manner indicated on the Authority’s website (www.garanteprivacy.it).

Data Protection Officer
O.M.F.B. has appointed a Data Protection Officer (also known as “Data Protection Officer” or “DPO”). The DPO may be contacted through the following communication channel: dpo@omfb.it.

The Controller is: OMFB S.P.A. HYDRAULIC COMPONENTS, Via Cave 7/9 – Provaglio di Iseo (BS), Tax Code and VAT No. 06226910963, privacy@omfb.it.

O.M.F.B. S.p.a.

Last updated June 2026