Cookie Policy and Customer Information

PRIVACY & COOKIE POLICY FOR VISITORS OF THE SDF STORE WEBSITE

(pursuant to Article 13 of Regulation (EU) 2016/679)

Dear User,

Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 concerning the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter “GDPR” or the “Regulation”), we hereby inform you that the personal data you provide as a user (hereinafter the “User” or “Data Subject”) while browsing this website will be processed by Same Deutz-Fahr Italia S.p.A. (hereinafter also the “Company” or “Data Controller”), in its capacity as Data Controller, in compliance with the above-mentioned legislation and in accordance with the confidentiality obligations that inspire our company’s activities.

In particular, we inform you as follows:

1. Data Controller Information

The Data Controller is Same Deutz-Fahr Italia S.p.A., with registered office at Viale Francesco Cassani, 15 – 24047 Treviglio (BG), Italy.

The Data Controller has appointed a Data Protection Officer (DPO), who can be contacted at: dpo.sdfitalia@sdfgroup.com

2. Types of Data Processed, Purposes of Processing and Legal Basis

Browsing Data.
The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category includes IP addresses or domain names of the computers and devices used by users, URI/URL (Uniform Resource Identifier/Locator) addresses of requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.), and other parameters relating to the User’s operating system and IT environment.

These data are used solely for the purpose of obtaining anonymous statistical information on website use and to ensure the proper functioning of the services offered.

3. Cookies

Cookies are small text files sent to the User’s browser by a web server and subsequently stored on the User’s computer hard drive. They are mainly used to enable websites to function, to operate efficiently, and to provide information to the website operator.

This website uses technical session cookies strictly limited to what is necessary for safe and efficient website navigation.

Such cookies are not stored permanently on the User’s computer and disappear when the browser is closed. Their use is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow the use of a specific service and secure and efficient browsing of the Site.

The session cookies used on this Site avoid the use of other IT techniques potentially prejudicial to the confidentiality of users’ browsing and do not allow the acquisition of personal identifying data of the User.

Cookies will be stored in order to adapt the Site to visitors’ individual needs, create visit statistics, and maintain the User’s session. Changes to cookie settings can be made at any time.

The legal basis for processing carried out through the installation of cookies is the legitimate interest of the Data Controller (Art. 6(1)(f) GDPR), which is fairly balanced against the legitimate interest of the User, since the processing is limited to what is strictly necessary for the proper use of the website.

List of Cookies

Below is a list of the cookies that may be installed on this website:

Cookie Name

Description

Duration

.Nop.Customer, .Nop.RecentlyViewedProducts

These cookies are necessary for the operation of the website and cannot be disabled in our systems.

Session

_ga*,

_gcl*,

__utma,

__utmb,

__utmz,

ar_debug,

DSIS,

IDE

This website uses Google Analytics services provided by Google Ireland Inc. We use Google Analytics to obtain information about the use of our website. For this integration, no third-party cookies are installed. The user ID of interest to us is not accessible through cookies, but through the user’s browser storage (local storage). The collected information (including the user ID) is processed only anonymously, so that the data cannot be attributed to the user. Only anonymized data are transmitted to Google.

Persistent

For users of the sdfstore.de website (Germany), we inform you that we process non-personal data pursuant to Article 25 (2)(2) TDDDG (Telekommunikation-Digitale-Dienste-Datenschutzgesetz), as analyzing the number of page views and the time users spend on our website is absolutely necessary to provide you with a user-friendly and attractive online store.

4. Links to Other Websites

This website contains links to other websites. The presence of such links may result in the collection of data to and from websites operated by third parties. The management of information collected by such “third parties” is governed by their respective privacy policies, which we invite you to consult.

5. Sharing, Communication and Disclosure of Data

Processing related to browsing this website is carried out by personnel expressly authorized by the Data Controller. Furthermore, data may be communicated to third parties acting on our behalf and, as Data Processors, providing specific services strictly functional to the operation of the website.

No personal data will be transferred to countries outside the EU.

No personal data deriving from browsing this website are disclosed.

6. Rights of the Data Subject

With regard to your personal data, we inform you that you may exercise the rights provided for by Articles 15 et seq. of Regulation (EU) 2016/679, including:

Right of access;
Right to rectification;
Right to erasure or “right to be forgotten”;
Right to restriction of processing;
Right to receive notification in the event of rectification, erasure or restriction of processing;
Right to data portability;
Right to object to processing.

To exercise your rights under data protection legislation, or if you require further information, wish to submit suggestions, complaints or objections regarding privacy policies and the way our Company processes personal data, you may contact the Data Controller by writing to SAME DEUTZ-FAHR Italia S.p.A., Viale Francesco Cassani, 15 – 24047 Treviglio (BG), Italy, or by email at privacy@sdfgroup.com.

7. Right to Lodge a Complaint

If you believe that the processing of personal data relating to you carried out through SDF Store violates the GDPR, you have the right to lodge a complaint with the competent Data Protection Authority (Art. 77 GDPR) or alternatively to bring proceedings before the competent judicial authorities (Art. 79 GDPR).

Last updated: May 2026

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

PRIVACY NOTICE FOR CUSTOMERS REGISTERING ON THE SDF STORE WEBSITE

(pursuant to Article 13 of Regulation (EU) 2016/679)

Dear Customer,

Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 concerning the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter also “GDPR” or the “Regulation”), we inform you that, upon registration on our website, the personal data you provide as a Customer (hereinafter also the “Data Subject”) will be processed in compliance with the above-mentioned legislation and in accordance with the confidentiality obligations that inspire our activities.

In particular, we inform you as follows.

1. Data Controller

The Data Controller is Same Deutz-Fahr Italia S.p.A., with registered office at Viale F. Cassani, 15 – 24047 Treviglio (BG), Italy.

The company has appointed a DPO who can be contacted at dpo.sdfitalia@sdfgroup.com (hereinafter the “Data Controller”).

2. Purposes of Processing, Data Processed, Legal Basis and Retention Periods

The following table outlines the purposes of the processing, the data processed, the legal basis for the processing, and the data retention period:

Purpose	Personal Data	Legal Basis	Retention Period
Account registration	• First name • Last name • Date of birth • Email address • Phone number • Password	Performance of a contract to which the data subject is party or pre-contractual measures taken at the request of the data subject pursuant to Art. 6(1)(b) GDPR	For as long as the service remains active
Management of requests for information or support	• First name • Last name • Date of birth • Phone number • Email address	Performance of a contract to which the data subject is party or pre-contractual measures taken at the request of the data subject pursuant to Art. 6(1)(b) GDPR	For the time necessary to manage the requests
Litigation management	• Potentially all collected Data	Legitimate interest of the Data Controller pursuant to Art. 6(1)(f) GDPR	For the time necessary to manage litigation and, in any event, within the applicable limitation periods
Sharing your data with the nearest SDF dealers and allowing them to contact you with services and promotions dedicated to you	• First name • Last name • Email address • Phone number	Consent of the Data Subject pursuant to Art. 6(1)(a) GDPR	Until the service remains active or consent is withdrawn

Please note that you will always have the possibility to withdraw your consent to the use of your data for the purposes for which such consent was requested. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

The collected personal data will be processed by personnel authorized by the Data Controller pursuant to Article 29 GDPR. Processing of the Data for these purposes will take place by electronic and manual means, according to logical criteria compatible with and functional to the purposes for which the data were collected, in compliance with the confidentiality and security rules established by law and company internal regulations.

3. Mandatory or Optional Nature of Data Provision and Consequences of Refusal

Provision of data is voluntary, except where necessary to comply with a legal obligation.

In any case, failure to provide data marked with “*” will prevent us from providing the requested service, such as responding to your requests for information or processing the requested order.

4. Communication of Data

In carrying out the activities related to the purposes indicated, the Data Controller may communicate and transfer your Data to third parties authorized to process the Data, insofar as they are entrusted with carrying out or providing specific services strictly functional to the pursued purpose.

Such third parties may act either as independent Data Controllers or as Data Processors. The complete list of Data Processors processing personal data on behalf of the Data Controller is available upon request.

Categories of recipients may include:

IT service providers;
Logistics service providers for goods delivery;
Banking institutions;
Dealers, where you have provided consent;
Call centers, where you have provided consent;
Public bodies and authorities, where required by law.

Your Data may also be communicated to other companies belonging to the SDF Group on the basis of legitimate interests; this may occur for economic or administrative purposes provided that your interests, rights and fundamental freedoms do not prevail.

In any case, your Data will not be disclosed.

5. Transfer of Personal Data to a Third Country

Your data will be processed within the EU. However, it cannot be excluded that data may be transferred to Third Countries, i.e. outside the EU, due to requirements related to the provision of specific services by the Data Controller, legal obligations, or explicit requests from the data subject.

In the event of transfer of data to Third Countries, the Data Controller guarantees compliance with Articles 44 et seq. of the GDPR.

6. Rights of Data Subjects

With regard to your personal data, we inform you that you may exercise the rights provided for by Articles 15 et seq. of Regulation (EU) 2016/679, including:

Right of access;
Right to rectification;
Right to erasure or “right to be forgotten”;
Right to restriction of processing;
Right to receive notification in the event of rectification, erasure or restriction of processing;
Right to data portability;
Right to object to processing.

To exercise your rights under personal data protection legislation, or if you require further information, wish to contribute suggestions, or raise complaints or objections regarding privacy policies and the way our Company processes personal data, you may contact the competent Data Controller using the contact details provided in Section 1 of this notice, or by email at privacy@sdfgroup.com.

7. Right to Lodge a Complaint

8. Changes to this Notice

We reserve the right to amend this data processing notice at any time. Any changes will be notified by publishing the updated notice on our website. Unless otherwise specified, such changes shall take effect immediately. Therefore, please check this document regularly to review the most updated version.

Last updated: May 2026