Privacy policy

This information is provided to users (hereinafter “data subjects”) consulting the LIZARD website pursuant to and for the purposes of the provisions for the adaptation of the Privacy Code (as amended by Legislative Decree 101/2018) to the provisions of European Regulation 2016/679 on the protection of personal data (hereinafter “GDPR”). To immediately access the cookie policy, please click here.


The owner of the website, which can also be reached through the relevant aliases or third-level domains (hereinafter “web”) LIZARD S.R.L., with registered office in Via Antonio Detassis 23A – 38121 Trento (TN) – Tax code and VAT number 01867040220. The Data Protection Officer (DPO) is Uomo & Ambiente S.r.l. Benefit Company, whose contact person Ing. Gianluigi Carbone can be contacted at the e-mail address


The use of the website is subject to the acknowledgement, acceptance and compliance with the terms and conditions set out below. If you do not accept these terms and conditions, please do not use the website or download any material from it.


All material and contents of the website are the property of LIZARD and are protected by intellectual property rights, in accordance with current copyright laws. Documentation, images, content, software and any other element of the website are the exclusive property of LIZARD.

Access to the website does not give the user the right to appropriate, reproduce, modify, distribute, republish, in any form, in whole or in part, the information contained therein. This is without prejudice to the possibility of storing and printing this content for personal use only. The trademarks, logos and distinctive signs used on the website are the property of LIZARD and may not be used without the prior written consent of LIZARD. Other trademarks and logos of third parties used on the website are the exclusive property of their respective owners. Any use or reproduction in any form of these trademarks and logos is prohibited.


The contents of the website are published for informational purposes only about LIZARD’s activities and products; they do not constitute and cannot be considered an offer of sale, subscription or solicitation of any kind. Although the website has been created with the utmost care and attention, LIZARD assumes no guarantee as to the completeness and correctness of the information or for any material errors or omissions in the data it contains.

LIZARD disclaims any responsibility for any loss or damage due to or in connection with the use of the website, and also disclaims any responsibility for any temporary inaccessibility of the website or the presence of outdated information. LIZARD reserves the right to intervene at any time and without notice to make changes, corrections, updates and improvements to the structure of the website and the information/documents it contains.


LIZARD assumes no responsibility for information and/or documents published by third parties on sites with which the website has an interactive link (hyperlink) or for the technical-operational methods adopted by such sites with particular reference to aspects of computer security and privacy protection. Users who decide to visit a site linked to this website do so at their own risk, assuming the burden of taking all due precautions. In any case, the existence of the link does not imply any form of sponsorship/authorisation by LIZARD. Under no circumstances, therefore, can LIZARD be held liable for direct and/or indirect damage caused by the use and/or navigation of websites linked to this website.


This document describes how to manage the site in relation to the processing of personal data of those who interact with the services provided: the information is provided pursuant to art. 13 of the European Regulation (EU) 2016/679 (GDPR) only for the site in question and not for other sites that may be consulted by the user through links, for which LIZARD is in no way responsible. In order to offer the personalised and non-personalised services provided by its website, LIZARD S.R.L., in its capacity as Data Controller, processes the personal data necessary for the provision of such services and guarantees, within the framework of the regulatory provisions, that personal data are processed in compliance with the fundamental rights and freedoms, as well as the dignity of the data subject with particular reference to confidentiality, personal identity, right and protection of personal data. Specific additional and contextual information can be found on the pages of the site prepared for services on request that provide forms for data collection.


Personal data may be collected automatically during navigation and use of the site and the services it provides or may be entered voluntarily by the user. Among the personal data collected by the Owner autonomously or through third parties, there could be, by way of example but not limited to: IP address, date and time of visit, type of browser and device used, web page of origin and exit, etc.). Among the personal data transmitted by the user there could be, by way of example but not limited to: identification data (name, city, date of birth, generalities, i.e. first name and surname, etc.) and contact data (address or other personal identification elements, such as telephone number, e-mail address, etc.) or even registration data functional to the creation and activation of an account.

a) Navigation data and other data

The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment. These data, necessary for the use of web services, are processed in order to:

  • check the correct functioning of the site and the services offered
  • obtain statistical information on the use of the services (most visited pages, number of visitors per time slot or per day, geographical areas of origin, etc.).

Browsing data persist for a maximum duration from time to time identified within the “cookie policy” (without prejudice, however, to any need to ascertain crimes by the Judicial Authorities). Any use of cookies – or of other tracking tools – by this site or by the owners of any third party services used by it, unless otherwise specified, is aimed at identifying the user and recording his/her preferences for purposes strictly related to the provision of the service requested by the user.

b) Personal data provided voluntarily by the user

Personal data may be entered voluntarily by the user, in order to make his/her requests or to take advantage of the services provided by the website, by filling in forms or sending e-mail messages. The optional, explicit and voluntary sending of messages to contact addresses, messages sent by users to institutional profiles/pages on social media (where this option is available), as well as the completion and submission of forms on the website, entail the acquisition of the sender’s contact data, necessary to respond to requests, as well as all personal data included in the communications. Specific information is provided on the pages containing the forms provided for the provision of certain services. The user assumes responsibility for the personal data of third parties that may be published or shared through this website and guarantees that he/she has the right to communicate or disseminate them, releasing the Owner from any liability towards third parties.

c) Cookies and other tracking systems

No use is made of cookies for user profiling. The only processing carried out relates to the production of statistics, with pseudonymised data, on navigation on the site. The configuration adopted, so as to exclude the processing of identification data, collects the following information

  • IP address, which is masked by resetting some bytes;
  • operating system used;
  • type of browser;
  • type of device (PC, smartphone, etc.).

Use is made of session and/or persistent technical cookies, strictly limited to what is necessary for the safe and efficient navigation of the website.


The cookies used on the web have the purpose of performing computer authentication, session monitoring and storing technical information regarding the activities of users accessing a web page or the website. With this in mind, certain operations on the website could not be performed without the use of cookies, which are therefore technically necessary in such cases. These so-called technical cookies are useful because they can facilitate faster navigation and a more effective use of the website (for example, they facilitate certain procedures when shopping online, when authenticating to a restricted access area or when a website automatically recognises the language you intend to use). The website uses cookies to make the site’s services simpler, faster and more efficient for the user viewing the web pages. Users accessing the site will receive very small amounts of information in their devices in use, whether computers or mobile devices, in the form of small text files, “cookies” in fact, stored in directories used by their browser. The cookies used make it possible to:

  • store browsing preferences;
  • avoid re-entering the same information several times;
  • analyse the use of services and content provided by the site in order to optimise the browsing experience.


The personal data of users visiting the web pages of the website may be acquired through the use of cookies, for the purposes described above. The use of technical cookies consists in a processing carried out in the legitimate interest of the Owner; the lawfulness of processing attributable to the use of analytical or third-party cookies, on the other hand, is based on the provision of explicit and unequivocal consent by the user (at the first access to the website).

The personal data of users who access our website in order to avail themselves of the services it provides, are provided by the interested parties on a spontaneous and voluntary basis. In this context, the legal basis for the processing is the following:

  • performance of a contract to which the data subject is party or performance of pre-contractual measures taken at the data subject’s request (information and commercial offers)
  • pursuit of the legitimate interest of the data controller (promotion of commercial activity towards customers or
  • potential customers who explicitly request it);
    acquisition of consent.


The personal data collected by this website, either autonomously or through third parties, consist of navigation data and personal data freely provided by the user. Full details on each type of data collected are provided in the dedicated sections of this privacy policy or by means of specific information texts that can be viewed at the data collection forms.

The user may refuse to provide the Data Controller with his browsing data. To do so, he must disable cookies by following the instructions provided by the browser in use. Disabling cookies may make navigation worse and may limit and/or prevent the use of all or part of the site’s functionalities. With regard to the optional provision of data, more information is provided on the cookies present on the site in the “cookie policy” document that can be accessed both from this complete information notice and from the summary information notice contained in the banner published on the website.

The provision of data on the collection forms on this website is optional, except for those indicated as mandatory in order to allow the user to access the services offered. Failure on the part of the user to provide certain personal data may make it impossible to use all the functions and services provided by this website or to obtain replies to his/her requests. The processing of data provided voluntarily for the purposes just described is carried out in the absence of consent, since it is strictly necessary to carry out the processing operations and to activate the services requested by the user. In accordance with current legislation, the person concerned may also be asked to consent to the processing of his/her data (in cases where the stated purpose so requires) by ticking the appropriate box in the specific form. This is without prejudice to the fact that the data subject may revoke any consent given at any time, without this affecting the lawfulness of the processing based on the consent given prior to revocation.


Personal data shall be processed by electronic means, including by automated means, in compliance with the principles of lawfulness, necessity and relevance, adopting safeguards aimed at identifying adequate security measures at any stage of the processing, having regard to the specific purposes of the processing. In this context, personal data shall be anonymised and identification data removed if there is no need to process the data in an identifiable form for the aforementioned processing purposes and, in any case, upon expiry of the retention period indicated in the following paragraph. The Controller shall not carries out processing consisting of automated decision-making processes (such as profiling) on the data of users or those interacting with this website. The data may be accessed, incidentally, by ICT personnel and computer technicians (including outsourced) who supervise the operation of the computer system.


The Data Controller keeps the data for the time necessary to obtain anonymous statistical information on the use of the site and to check its correct functioning. Personal data will be kept for the period of time necessary to pursue the above-mentioned purposes; in particular, personal data collected for purposes that can be traced back to the legitimate interest of the Data Controller will be processed and kept until such interest is satisfied, without prejudice to a further retention period imposed by law or by an explicit request by the Authority. When the processing is based on the consent of the data subject, the Controller may keep the personal data for a longer period, until such consent is revoked (if requested by the data subject). Once the aforementioned retention period has expired and the purpose for which the data was collected has been fulfilled, the data will be deleted or made anonymous and processed solely for statistical analysis.


The Data Controller does not disclose any personally identifiable data or information to third parties except, if necessary and to the extent strictly necessary, to those who act as suppliers for the provision of services inherent to the management of the website and for the consequent management of the contractual relationship and related administrative fulfilments, as well as to those who provide IT services or commercial electronic communication services.

The Data Controller takes appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of personal data. In addition to the Data Controller, in some cases, other parties involved in the organisation of this website (sales/marketing personnel, system administrators, etc.) or external parties (technical service providers, hosting providers, IT service companies, companies specialising in the management, development and maintenance of websites, etc.) may have access to the data, which we use exclusively for the provision of services connected to the purpose pursued, and which our organisation, in order to ensure greater protection, has from time to time appointed as Data Processors (art. 28 of the GDPR) for the processing operations they put in place. The updated list of Data Processors can always be requested from the Data Controller.


There are no plans to transfer personal data to a third country or international organisation (art. 13(1)(f) of the GDPR) outside the European Union (or the European Economic Area). However, the Data Controller reserves the right to use cloud services, in which case, the service providers will be chosen from among those companies able to provide specific guarantees of third country suitability recognised by Commission decision European Union or, in the absence thereof, suitable contractual or covenant-based guarantees to be provided by the owners involved (including Binding Corporate Rules “BCRs” and model contract clauses). The Microsoft 365 Business solution, containing the email service adopting the “Office 365” software platform, is owned by Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland) residing within the European Union (EU).


The data subject, to whom the personal data refer, is entitled to exercise his or her rights at any time (pursuant to Articles 15-22 of the GDPR) in order to obtain:

  • confirmation as to whether or not personal data concerning him/her are being processed, as well as access to the data and to the following information (purpose of processing, categories of personal data, recipients and/or categories of recipients to whom the data have been and/or will be disclosed, storage period);
  • the rectification of inaccurate personal data concerning him/her and/or the integration of incomplete personal data, including by providing a supplementary declaration;
  • the cancellation of personal data or the restriction of the processing of personal data (as a means of reaction to unlawful or incorrect processing) in the cases provided for by current legislation;
  • opposition to the processing of personal data (as a manifestation of willingness to have a given data processing cease) in the cases provided for by the regulations in force (it is understood that this right does not exist where the legitimacy of the processing is based on consent since in this case the right to revocation prevails); it may extend to the processing of one’s own data for purposes related to marketing activities carried out by automated contact or through traditional means, being able to be exercised in whole or in part (e.g., to e-mail or telephone communications only or by objecting only to the sending of promotional communications carried out by automated means, etc.) or to processing that consists of automated decision-making processes (such as profiling, insofar as it is related to direct marketing purposes);
  • the portability of data, pertaining to the data subject and provided by the data subject, in order in particular to request from the data controller the personal data concerning him/her and/or to request from the data controller the direct transmission of his/her data to another data controller (it being understood that this right applies only if the processing is based on contract or consent and is carried out through electronic processing) in the cases provided for by the regulations in force.

Regarding the exercise of his or her rights, the data subject may address his or her requests through specific communication by mail addressed to the Data Controller (at the above address) or by sending communication to the e-mail address, specifying the subject of his or her request and the right that he or she legitimately intends to exercise.


Data subjects who believe that the processing of personal data relating to them occurs in violation of the provisions of the Regulations, have the right to lodge a complaint with the competent supervisory authority (Data Protection Authority) in the manner provided on the website (pursuant to Art. 77) or to take appropriate legal action pursuant to Art. 79 of the Regulations themselves (GDPR).


These conditions are governed by Italian law. Any dispute that may arise regarding the interpretation, application or enforcement of these conditions shall be referred to the exclusive jurisdiction of the Court of Trento.