Click for English version

1. Which personal data do we save?

(Object of the treatment)

When you use our services or buy our products, you accept that our company collects some of your personal data.


1.1 The data provided by the user collected are as follows:


Name and surname
Civic address
Email address
Banking and payment references (PayPal, Credit Card)

You can also choose to provide the following data:

Telephone contact number
Possible account password
Preferences and food tastes
Information related to the condition of lactose intolerance

Third party data
If you provide personal data of third parties, such as those of your family or friends, you must be sure that these subjects have been adequately informed and have consented to their treatment in the manner described in this statement.

Data of minors under 16
If you are under 16 you cannot provide us with any personal data nor can you buy on our e-commerce. We take no responsibility for any false statements you provide. If we become aware of the existence of untruthful declarations, we will proceed with the immediate cancellation of any personal data acquired.



1.2 Data that we automatically collect


We collect the following data through the services you use:
Technical data: for example IP address, type of browser, information on your computer, data relating to the current (approximate) position of the instrument you are using;
Data collected using cookies or similar technologies: for more information, please visit the "Cookies in point 12" section.

2. Why do we ask for your personal data?

(Purpose of the treatment)

2.1. To guarantee access to our products, services and improve their delivery

We use your data to guarantee you the opportunity to purchase from e-commerce, for access to our services and their delivery.

Some of your personal data are processed without your express consent (art.24 lett. A), b), c) Privacy Code and art. 6 lett. b), e) GDPR), for the following Service Purposes:

    Communications related to the provision of the service and the sale of products;
    Communication with the Customer Center also through the Chat functionality;
    Registration and creation of the reserved area;
    Use of "favorite" features;
    Review of comments, moderation or removal of content;
    Fraud prevention;
    Administrative, financial or accounting activities, such as those relating to the purchase of paid services and any credit recovery
    Fulfillments of the obligations established by law, by a regulation, by community legislation or by an order of the Authority (such as for example in the matter of anti-money laundering);
    Exercise of the rights of the owner, for example the right to defense in court;

These treatments are necessary to correctly deliver the Lactosolution services to users who join it, such as the purchase of products for sale in e-commerce.

The data you decide to provide (point 1.1) are processed for the following Service Purposes:
    Communications related to the provision of the service and the sale of products;
    Communications with the Customer Center through email, voice, telephone, sms, instant messaging app and chat;
    Registration and creation of the reserved area;
    Use of "favorite" features;
    Review of comments, moderation or removal of content;
    Fraud prevention;
    Administrative, financial or accounting activities, such as those relating to the purchase of paid services and any credit recovery
    Fulfillments of the obligations established by law, by a regulation, by community legislation or by an order of the Authority (such as for example in the matter of anti-money laundering);
    Exercise of the rights of the owner, for example the right to defense in court;
    Order management;
    Preparation of the goods;
    Payment of purchased goods;
    Delivery of purchased goods;
    Delivery of the sample products;

We also use your data to improve and implement the service, through the following treatments:

Finding your current location (approximate)
    Market research
    Optional surveys
    Activities to detect the degree of customer satisfaction

These treatments are based on the legitimate interest of the Data Controller (The Data Controller is shown in point 10) and you can object at any time.

The use of the Messages, Chat and comments service on the pages or in the BLOG implies the possibility that the identity of the user (as indicated at the time of registration / provision of the services or products) and related contents are made known during the sessions of activity.

We reserve the right to exclude from the Messages, Chat and comments service, and more generally from the services offered by Lactosolution, all those who do not observe the rules and / or do not respect the purposes defined for the use of the aforementioned services, as well as all those that adopt incorrect and / or disrespectful behavior.

The information relating to the comments entered on will be visible in the searches carried out in the internal search engine and could be made available to third party search engines as the indexing of contents by third party engines is allowed.


2.2. To inform you about our commercial activities

We use the collected data, if you have expressly given us your consent, to inform you about promotional activities that may interest you.

In particular, we use them for:

Communicate promotional, commercial and advertising activities on Lactosolution events, initiatives or partnerships via e-mail, SMS or push notifications, for telephone calls via operator, customer care service consisting of offering dedicated services during sales and after-sales

perform analysis and reporting activities connected to promotional communication systems, such as detecting the number of open e-mails, clicks made on the links present in the communication, the type of device used to read the communication and the related operating system or the list of unsubscribed from the newsletter.

Marketing activities are therefore identified as activities carried out in the email, voice, telephone, sms, instant messaging and chat channels.

2.3. To offer you a personalized service


We process the data collected, if you have expressly given us your consent, to analyze your habits or consumption choices in order to offer you an increasingly personalized service in line with your interests and to improve our commercial offer.

In any case, these analyzes are not related to an automated decision-making process.

We use the data collected to offer you our products and services every day, to inform you about our commercial activities or to offer you a more personalized service in line with your interests.

We may ask you, while browsing, via e-mail or via call center, the availability to participate in targeted surveys in order to know your opinion and the degree of satisfaction with the services or products provided.

These surveys can be carried out directly on or through the help of the Google Forms platform (here the privacy policy).

Within the surveys, it may be required, optionally or not, to provide an e-mail address in order to receive news and information on Lactosolution services.

We remind you that participation in surveys or calls from the Customer Relationship Management Office is entirely optional and that you can always object to this treatment.


3. Are you obliged to communicate your data to us?

The provision of personal data is mandatory only for the treatments necessary for the provision of the services or products offered by Lactosolution (any refusal for the purpose of providing the product or service makes it impossible to use the product or service itself); on the other hand, it is optional for promotional and profiling purposes and any refusal to give consent does not have negative consequences on the provision of the service offered within the website and related applications.

4. How and for how long will your data be kept?

(Data retention)

The storage of personal data will take place in paper and / or electronic / IT form and for the time strictly necessary for the fulfillment of the purposes referred to in point 1, in compliance with your privacy and current regulations.

In the case of active users, the ads and user-generated content will be kept for 36 months for reasons of security, prevention and moderation of content and / or conduct contrary to the conditions of the service and the editorial rules of Lactosolution in order to ensure better quality of the same also in collaboration with the Authorities.

For analysis purposes aimed at the development and improvement of the service, the user's personal data may be subject to the same retention period.

For direct marketing and profiling purposes, we store your data for a maximum period equal to that provided for by the applicable legislation (respectively equal to 24 and 12 months).

Invoices, accounting documents and transaction data are kept for 11 years in accordance with the law (including tax obligations).

In the case of exercising the right to be forgotten through a request for express cancellation of personal data processed by the owner, we remind you that such data will be stored, in a protected form and with limited access, only for the purpose of ascertaining and suppressing crimes, for a period not more than 12 months from the date of the request and subsequently they will be securely canceled or irreversibly anonymised.

Finally, we remind you that for the same purposes, data relating to electronic traffic, however excluding the contents of communications, will be kept for a period not exceeding 6 years from the date of communication, pursuant to art. 24 of Law no. 167/2017, which transposed the EU Directive 2017/541 on anti-terrorism.

If you do not exercise any active action (e.g. browsing, research and / or any other way of using the service) on for a period of 27 months, you will be classified as an inactive user and your personal data will be automatically deleted.


5. To whom could your data be disclosed?

(Access, communication and data transfer)

The data collected as part of the provision of the service or in the sale of the product may be communicated to:

Employees and collaborators of the Data Controller, in their capacity as persons in charge and / or internal data processors and / or system administrators.

Companies that perform functions strictly connected and instrumental to the operation - also technical - of the Lactosolution services, such as suppliers that provide services aimed at reviewing and verifying advertisements, suppliers of direct marketing and customer care services, companies that provide archiving, administrative, payment and billing services, associated companies and / or part of Extra Sas that provide technical components for the provision of some features of the service.

Administrative and judicial bodies and authorities by virtue of legal obligations

Your personal data may be transferred to a new company which, due to mergers, entry of new partners or investment funds that believe in the Lactosolution project, takes the reins of the project and the business proposed with Lactosolution.

Your personal data may be transferred outside the European Union to be processed by some of our service providers. In this case, we make sure that this transfer takes place in compliance with current legislation and that an adequate level of protection of personal data is guaranteed based on an adequacy decision, on standard clauses defined by the European Commission or on Binding Corporate Rules.

In no case do we transfer or sell personal data to third parties.

This data may be communicated without the need for express consent (pursuant to art.24 lett. A), b), d) Privacy Code and art. 6 lett. b) and c) GDPR).

6. Your data are secure?

(Security and data usage)


The data are collected by the subjects indicated in point 10, according to the indications of the reference legislation, with particular regard to the security measures provided for by the GDPR (art.32) for their treatment using IT, manual and automated tools and with strictly related logic for the purposes indicated in point 2 and in any case in order to guarantee the security and confidentiality of the data.

The data are kept and controlled by adopting suitable preventive security measures, aimed at minimizing the risks of loss and destruction, of unauthorized access, of unauthorized treatment and different from the purposes for which the treatment is carried out.

The processing of your personal data is carried out by means of the operations indicated in art. 4 Privacy Code and art. 4 no. 2) GDPR and precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation, destruction.

Your personal data are subjected to both paper and electronic and / or automated processing.


7. Are you in control of your data? What can you intervene in?

(Rights of the interested party)

Any natural person who uses our services or purchases our products can:

a) obtain from the owner, at any time, information about the existence of their personal data, the origin of the same, the purposes and methods of treatment and, if present, to obtain access to personal data and information of referred to in Article 15 of the GDPR

b) request the updating, correction, integration, cancellation, limitation of data processing if one of the conditions set out in article 18 of the GDPR occurs, transformation into anonymous form or blocking of personal data, processed in violation of the law, including those whose retention is unnecessary for the purposes for which the data were collected and / or subsequently processed

c) object, in whole or in part, for legitimate reasons, to the processing of data, even if pertinent to the purpose of the collection and processing of personal data provided for the purposes of commercial information or for sending advertising materials or direct selling or for the carrying out market research or commercial communication. Each user also has the right to withdraw consent at any time without prejudice to the lawfulness of the treatment based on the consent given before the revocation

d) receive their personal data, knowingly and actively provided or through the use of the service, in a structured format, commonly used and readable by an automatic device, and to transmit them to another data controller without impediments

e) lodge a complaint with the Guarantor Authority for the protection of personal data in Italy

We remind you that for any question or request relating to your personal data and respect for your privacy you can write to

8. How can you contact us to request the modification of your data?

(How to exercise your rights)

You can at any time exercise your rights such as the export of your personal data (takeout) or request their cancellation, or any of the rights mentioned in point 8, by sending a communication:

1. by e-mail, at the address:
2. by traditional post (registered letter with return receipt), to: EXTRA S.A.S., Via della Pace, 277 - 62100 Macerata (MC)

In the case of an export request, your personal data will be exported within 30 days or, if the export becomes particularly complex, within three months.

9. Who is the data controller?

(Owner, manager and appointees)

The Data Controller is EXTRA S.A.S., with registered office in Via della Pace, 277, CAP 62100 Macerata (MC). VAT number 01754760435.

The person responsible for the protection of personal data (Data Protection Officer) pursuant to art. 37 of the GDPR and the updated list of data processors and appointees is kept and can be consulted at the aforementioned office.

We remind you that you can contact the DPO at any time and send any question or request regarding your personal data and respect for your privacy by writing to

10. Can the privacy policy change over time?

This information may be subject to changes. If substantial changes are made to the use of user data by the Owner, the latter will notify the user by publishing them with the utmost evidence on their pages or through alternative or similar means.


11. What are cookies?

The website uses "cookies". Cookies are electronic files that record information relating to the user's navigation on the site (pages consulted, date and time of the consultation, etc.) and which allow Lactosolution to offer a personalized service to its customers.

Lactosolution informs the user of the possibility to disable the creation of these files, by accessing their Internet configuration menu. It is understood that this will prevent the Customer from proceeding with the online purchase.

For more information and to view the Cookie Policy click here.




"Privacy Policy" document version: v EN 1.1
Valid from: 10/04/2019 To: valid