Privacy Policy
1. Data Controller
Lindhaus S.r.l.
Via Belgio 22
Email: vacuum@lindhaus.it
VAT number: 02151740285
For any requests regarding the protection of personal data, you can contact the Data Controller at the email address indicated above.
2. Data voluntarily provided by the user
The website collects personal data exclusively through the voluntary completion of forms in the various sections. Details for each form are provided below.
2.1 Newsletter
Data Collected: email address, type of use (domestic/professional).
Purpose: sending commercial communications and updates on Lindhaus products.
Legal basis: explicit consent (Article 6(1)(a) of the GDPR).
Third-party recipient: data is transmitted to Brevo (Sendinblue SAS, France) for mailing list management. Brevo acts as data processor pursuant to Article 28 of the GDPR.
2.2 Product information request
Data collected: first name, last name, email address, telephone number (optional), user type (company/private individual), company name and website (if a company), country, address, city, postal code, products of interest, message (optional), marketing consent (optional).
Purpose: management of commercial requests and forwarding to the distributor responsible for the geographical area.
Legal basis: implementation of pre-contractual measures at the request of the data subject (Article 6(1)(b) of the GDPR); legitimate interest in marketing consent (Article 6(1)(f) of the GDPR).
2.3 Become a dealer
Data collected: first name, last name, email address, telephone number (optional), company name, country, address, city, postal code, website, message, company presentation (PDF/DOC/DOCX file, max 10 MB).
Purpose: evaluation of your application as a Lindhaus distributor.
Legal basis: performance of pre-contractual measures (Article 6(1)(b) of the GDPR).
Note on attached files: the company presentation is temporarily uploaded to the server, attached to the internal notification email, and immediately deleted. The file is not stored in the system.
2.4 Warranty registration
Data collected: first name, last name, date of birth (optional), email address, telephone number (optional), company name (optional), country, address, city, postal code, machine type, model, serial number, date of purchase, dealer name, marketing consent (optional).
Purpose: registration and management of the warranty for the purchased product.
Legal basis: performance of the warranty agreement (Article 6(1)(b) of the GDPR).
2.5 Lindhaus in the world
Data collected: first name, last name, date of birth (optional), email address, telephone number (optional), company name (optional), country, address, city, postal code, machine type, model, serial number, date of purchase, dealer name, marketing consent (optional).
Purpose: to put the user in contact with the Lindhaus distributor in their geographical area.
Legal basis: performance of pre-contractual measures (Article 6(1)(b) of the GDPR).
2.6 Work with us
Data collected: location of interest, first name, last name, email address, telephone number (optional), country, address, city, postal code, message (optional), resume (PDF/DOC/DOCX file, max 10 MB).
Purpose: management of the personnel selection process.
Legal basis: performance of pre-contractual measures (Article 6(1)(b) of the GDPR); explicit consent for any special categories of data contained in the CV (Article 9(2)(a) of the GDPR).
Note on attached files: your resume is temporarily uploaded to the server, attached to the internal notification email, and immediately deleted. The file is not stored in the system.
2.7 Product configurator
The product configurator is hosted on an external platform (lindhaus.ottimis.com) and integrated via iframe. Any data collected by the configurator is managed in accordance with the privacy policy of that platform.
3. Cookies and tracking technologies
The site uses the following categories of cookies and technologies:
3.1 technical cookie (necessaries)
| Cookie | Purpose | Duration |
|---|---|---|
| WordPress session cookie | User session management and CMS functionality | Session |
geo | User geolocation to determine the target market (US/rest of the world), set by AWS CloudFront | Session |
lh_geo_pref | Storing the user’s chosen language preference | 30 days |
Legal basis: legitimate interest of the Data Controller in the proper functioning of the website (Article 6(1)(f) of the GDPR). These cookies are strictly necessary and do not require the user’s consent.
3.2 LocalStorage
| Chiave | Purpose | Duration |
|---|---|---|
lh_geo_dismissed | Saving the closure of the language suggestion banner | Persistent (until manually deleted) |
3.3 Cookie analitici e di profilazione (terze parti)
| Service | Supplier | Purpose |
|---|---|---|
| Google Analytics 4 | Google LLC (USA) | Anonymized statistical analysis of traffic and user behavior on the website |
| Google Tag Manager | Google LLC (USA) | Centralized management of tags and tracking scripts |
Legal basis: user consent (Art. 6, para. 1, letter a of the GDPR), collected via the cookie banner before the activation of these services.
3.4 Contents
YouTube videos: Some pages include videos embedded from YouTube (Google LLC). Embedding may result in Google setting cookies. We recommend consulting the privacy policy of Google.
Feed Instagram: homepage can show contents from Lindhaus Instagram profile through Instagram API IGraph (Meta Platforms Inc.). See Instagram privacy policy.
4. Data processing and storage methods
The data collected through the forms on the website are processed in the following ways:
- The data contained in the forms (with the exception of the newsletter) is sent by email to the relevant departments and is not stored in any database on the website.
- Attached files (company presentation, CV) are temporarily uploaded to the server for the time necessary to send the email and are then automatically deleted.
- Newsletter data (email and preferences) are stored by Brevo until the data subject withdraws their consent (unsubscribes).
- The data collected by Google Analytics is stored in accordance with the policies a9> retention configured in the service (default: 14 months).
5. Services provided by third parties and transfers outside the EU
| Service | Supplier | Headquarter | Transfer guarantee |
|---|---|---|---|
| Brevo (newsletter) | Sendinblue SAS | France (UE) | Any transfer extra-UE |
| Google Analytics 4 | Google LLC | USA | EU-U.S. Data Privacy Framework (DPF) |
| Google Tag Manager | Google LLC | USA | EU-U.S. Data Privacy Framework (DPF) |
| YouTube | Google LLC | USA | EU-U.S. Data Privacy Framework (DPF) |
| Meta Platforms Inc. | USA | EU-U.S. Data Privacy Framework (DPF) | |
| AWS CloudFront (CDN) | Amazon Web Services Inc. | USA | EU-U.S. Data Privacy Framework (DPF) |
6. Rights of the data subject
Pursuant to Articles 15-22 of the GDPR, you have the right to:
- Access (Art. 15): obtain confirmation of the existence of a processing and access to their personal data .
- Rectification (Art. 16): obtain the correction of personal data that is inaccurate or the integration of data that is incomplete.
- Deletion (Art. 17): obtain the deletion of your personal data in cases in the cases provided for by law.
- Restriction (Art. 18): obtain the restriction of the processing in the cases provided for by the law.
- Portability (Art. 20): receive one’s own data in a structured, commonly used and readable format. of common use and readable by automated device.
- Objection (Art. 21): object to the processing of a7> one’s own personal data based on legitimate interest.
- Withdrawal of consent (Art. 7): withdraw consent at any time, without prejudice to the lawfulness of processing based on consent given prior to withdrawal.
To exercise your rights, you may send a request to vacuum@lindhaus.it.
The user also has the right to lodge a complaint with the Data Protection Authority. Garante for the protection of personal data (www.garanteprivacy.it).
7. Changes to this policy
The Data Controller reserves the right to make changes to this policy at any time. We recommend that you consult this page periodically. The date of the last update is indicated below.
Last update: 25/02/2026
This policy has been drafted as a guideline and does not replace the advice of a legal professional specialising in personal data protection. It is recommended that the text be validated by a legal advisor prior to publication.