Privacy Policy EN | LH international

Last updated: September 2026

This Privacy Policy describes how the personal data of users visiting this website is processed, in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable data protection legislation.

1. Data Controller

The Data Controller is:

LH International S.p.A.
Registered office: Via Tri Plok 37, 24060 Gorlago (BG), Italy
VAT No.: 04832340162
Email: info@lhinternationalspa.it

2. Types of Data Collected

The following data may be processed through the website:

• browsing and technical data, such as IP address, device and browser type, pages visited and security-related data;
• preferences relating to cookies and consent choices;
• data and information voluntarily provided when users contact the company by email or telephone.

The website does not contain contact forms and does not directly collect the data entered for the purpose of making a reservation.

Buttons and links dedicated to reservations redirect users to the external TeamSystem Hospitality platform, where the processing of personal data is described in the privacy information provided during the booking process.

3. Purpose of Data Processing

Personal data is processed for the following purposes:

• to enable browsing and ensure the proper functioning and security of the website;
• to respond to requests for information received by email or telephone;
• to record and manage users’ cookie preferences;
• to compile statistics on website usage and improve its content, exclusively in accordance with the choices expressed by the user;
• to comply with legal obligations and protect the rights of the Data Controller.

The website does not contain registration forms, newsletters or its own systems for sending commercial communications.

4. Legal Basis for Processing

Processing is based on:

• the legitimate interest of the Data Controller in ensuring the proper functioning, security and protection of the website, pursuant to Article 6(1)(f) of the GDPR;
• taking steps at the request of the user prior to entering into a contract, when the user voluntarily contacts the company to request information, pursuant to Article 6(1)(b) of the GDPR;
• compliance with legal obligations, pursuant to Article 6(1)(c) of the GDPR;
• the user’s consent for non-essential cookies and tools, where required, pursuant to Article 6(1)(a) of the GDPR. Consent may be withdrawn at any time.

5. Methods of Processing

Personal data is processed using electronic and organisational measures designed to ensure its security, confidentiality and integrity.

The Data Controller adopts appropriate technical and organisational measures to prevent unauthorised access, loss or unlawful disclosure of personal data.

6. Data Retention

Browsing and security data is retained for the period technically necessary for the operation and protection of the website, in accordance with the settings and retention periods applied by the relevant technical service providers.

Cookie preferences are retained for the period indicated in the consent management panel.

Data voluntarily provided by email or telephone is retained for the time necessary to respond to the request and manage any subsequent relationship, unless longer retention periods are required by law or necessary to protect the rights of the Data Controller.

At the end of the applicable retention periods, personal data is deleted or anonymised.

7. Disclosure and Processing of Data by Third Parties

Personal data may be processed, to the extent necessary for their respective functions, by:

• personnel authorised by the Data Controller;
• Wix and other technical service providers used for hosting, security and operation of the website;
• Usercentrics, used to manage users’ cookie preferences;
• consultants and service providers acting on behalf of the Data Controller in accordance with applicable legislation;
• public authorities or other parties where disclosure is required by law.

Data entered on the external TeamSystem Hospitality platform is provided directly by the user and is processed in accordance with the privacy information displayed during the booking process.

Some technical service providers may process data outside the European Economic Area. In such cases, transfers are carried out on the basis of an adequacy decision or other safeguards provided for under Articles 45 and 46 of the GDPR.

Personal data is not sold or publicly disclosed.

8. User Rights

Where applicable under Articles 15–22 of the GDPR, users have the right to:

• obtain confirmation as to whether personal data concerning them is being processed and access such data;
• request rectification, erasure or restriction of processing;
• object to processing where provided for by law;
• receive their personal data in a structured format and request data portability, where applicable;
• withdraw consent at any time, without affecting the lawfulness of processing carried out before consent was withdrawn.

Requests may be sent to: info@lhinternationalspa.it.

Users also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) in accordance with the procedures established by the Authority.

9. Cookies

The website uses technical cookies that are necessary for its operation and, only with the user’s prior consent, may use non-essential cookies or similar technologies.

Up-to-date information concerning cookie categories, providers, purposes and duration is available in the Cookie Policy and in the cookie preference management panel.

Users may change their preferences at any time using the relevant link or control available on the website.

10. Changes to this Privacy Policy

This Privacy Policy may be updated to reflect changes in legislation, technical developments or changes to the services used by the website.

The most recent version is always available on this page and is identified by the date shown at the beginning of this document.