Privacy Policy

This Privacy Policy describes how N.B.C. S.a.s. di A. Barbagallo & Co. processes the personal data of users who visit the website www.nbc-filters.com and use the services available through the website, such as contact forms, information requests, e-mail communications and, where available, newsletter subscription.

This notice is provided pursuant to Articles 13 and 14 of Regulation EU 2016/679, the General Data Protection Regulation, or GDPR, and Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018.

1. Data Controller

The Data Controller is:

N.B.C. S.a.s. di A. Barbagallo & Co.
V Strada Zona Industriale, corner of Stradale Primosole
95121 Catania, Italy
Tel: +39 095 591220
E-mail: nbc@nbc-filters.com

For any request concerning the processing of personal data or the exercise of the rights provided by applicable law, users may contact the Data Controller using the contact details above.

2. Categories of personal data processed

The website may process the following categories of personal data.

Data voluntarily provided by the user

This includes data voluntarily sent by the user through contact forms, e-mail requests or other tools available on the website. Such data may include, by way of example:

  • first name and last name;
  • company name or business affiliation;
  • e-mail address;
  • telephone number;
  • message or request submitted by the user;
  • any other data freely included by the user in the communication.

Users are invited not to include unnecessary data, special categories of personal data pursuant to Article 9 GDPR, such as health data, political opinions, religious beliefs or trade union membership, or judicial data, unless strictly necessary for the request.

Navigation data

The IT systems and software procedures used to operate the website acquire, during their normal operation, certain technical data whose transmission is implicit in the use of Internet communication protocols.

This category may include, for example, IP addresses, browser type, operating system, domain name and addresses of websites from which access was made, information on the pages visited, access time and time spent on the pages.

This data is used only to ensure the correct functioning of the website, improve the quality of the service, obtain aggregate and anonymous statistical information, and ascertain responsibility in the event of cybercrimes or attacks against the website.

Cookies and tracking tools

The website may use technical cookies necessary for the functioning of the pages and, where present and subject to the user’s consent when required, analytical, profiling or third-party cookies.

For further information on the use of cookies, the categories used, their purposes and how to manage consent, users are invited to consult the Cookie Policy.

3. Purposes of processing and legal bases

Personal data is processed for the following purposes:

  • To respond to user requests, such as requests for information, quotations, product availability, assistance or commercial contacts. The legal basis is the performance of pre-contractual or contractual measures requested by the data subject.
  • To manage administrative, technical or commercial communications relating to requests already sent by the user. The legal basis is the performance of a contract or the legitimate interest of the Data Controller in following up on communications received.
  • To ensure the functioning and security of the website, prevent abuse, fraud, unauthorized access or harmful activities. The legal basis is the legitimate interest of the Data Controller in IT security and the protection of its systems.
  • To comply with legal obligations, regulations, tax or administrative provisions or requests from competent authorities. The legal basis is compliance with a legal obligation.
  • To send promotional communications or newsletters, only where the user has given specific consent and where this service is active on the website. The legal basis is the consent of the data subject.
  • To analyse website usage through aggregate or anonymized statistical tools, where present. The legal basis may be the legitimate interest of the Data Controller, where the tools are configured to reduce their identifying power, or the user’s consent where required by law.

4. Nature of data provision

Providing data through contact forms or e-mail communications is optional. However, failure to provide the necessary data, such as name, contact details and the content of the request, may prevent the Data Controller from replying or providing the requested service.

Consent for promotional purposes, newsletters or non-technical cookies is always optional. Failure to provide such consent does not prevent browsing the website or using essential services.

5. Processing methods

Personal data is processed using electronic, telematic and, where necessary, paper-based tools, in accordance with the principles of lawfulness, fairness, transparency, data minimization, accuracy, storage limitation, integrity and confidentiality.

The Data Controller adopts appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, disclosure, alteration or misuse.

6. Recipients of personal data

Personal data may be processed by personnel authorized by the Data Controller and by external parties providing services necessary for the operation of the website or the management of requests, including, by way of example:

  • website hosting and technical maintenance providers;
  • e-mail and electronic communication service providers;
  • administrative, tax or legal consultants, where necessary;
  • newsletter or communication service providers, where used;
  • public authorities or legally authorized entities, where required by law.

Among the external parties that may process personal data on behalf of the Data Controller is Net.Service S.r.l., as technical provider in charge of the management, maintenance, assistance and IT support of the website. Where necessary, this party acts as Data Processor pursuant to Article 28 GDPR.

7. Disclosure and dissemination of data

Personal data will not be disseminated. It may be communicated to third parties only where necessary for the purposes indicated in this Privacy Policy, to comply with legal obligations or to protect the rights of the Data Controller.

8. Transfer of data outside the European Economic Area

As a general rule, personal data is processed within the European Union or the European Economic Area.

If certain technical providers, e-mail services, newsletter platforms, statistical tools, maps, embedded videos or other third-party services involve the transfer of data to countries outside the EU/EEA, such transfer will take place in compliance with Articles 44 et seq. of the GDPR, on the basis of adequacy decisions, standard contractual clauses or other safeguards provided by applicable law.

9. Data retention period

Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected.

  • Data sent through contact forms or e-mail is retained for the time necessary to manage the request and, subsequently, for the period necessary to protect the rights of the Data Controller.
  • Data connected to commercial, administrative or tax relationships is retained for the periods required by applicable law.
  • Data processed for newsletter or promotional communication purposes is retained until consent is withdrawn or deletion is requested.
  • Technical navigation data is retained for the time necessary to ensure the functioning and security of the website, unless it is required for the investigation of unlawful activities.
  • Cookie retention periods are indicated in the Cookie Policy.

10. Newsletter and promotional communications

If the newsletter service is active, users may voluntarily subscribe by entering their e-mail address and giving the relevant consent.

Consent may be withdrawn at any time by using the unsubscribe link included in each communication or by writing to the Data Controller at nbc@nbc-filters.com.

Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

11. Rights of the data subject

Users, as data subjects, may exercise at any time the rights provided by Articles 15-22 of the GDPR, where applicable.

In particular, the data subject has the right to:

  • obtain confirmation as to whether or not personal data concerning them is being processed;
  • access their personal data;
  • request the rectification of inaccurate data or the completion of incomplete data;
  • request the erasure of data, in the cases provided by law;
  • request restriction of processing;
  • object to processing, in the cases provided by law;
  • receive data in a structured, commonly used and machine-readable format, where applicable;
  • withdraw consent, without affecting the lawfulness of processing based on consent before its withdrawal;
  • lodge a complaint with the Italian Data Protection Authority.

Requests may be sent to the Data Controller using the contact details provided in this Privacy Policy.

12. Complaint to the supervisory authority

Users who believe that the processing of their personal data is carried out in breach of applicable law have the right to lodge a complaint with the Italian Data Protection Authority, according to the procedures indicated on the Authority’s official website.

13. Data security

The Data Controller adopts appropriate security measures to protect personal data processed through the website. However, no data transmission over the Internet can be considered completely secure. Users are therefore invited to use updated devices, secure browsers and reliable connections.

14. Links to external websites and third-party services

The website may contain links to external websites, maps, embedded videos, social networks or other third-party services. The Data Controller is not responsible for the personal data processing methods adopted by such third parties. Users are invited to consult their respective privacy policies.

15. Changes to this Privacy Policy

The Data Controller reserves the right to amend or update this Privacy Policy at any time, including as a result of regulatory, technical or organizational changes.

Any changes will be published on this page. Users are therefore invited to consult this Privacy Policy periodically.

Last updated: 7 July 2026