Information pursuant to art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data, as well as on the free movement of such data

Dear Customer/Supplier,

in compliance with the obligations set out in the Regulation in question (hereinafter referred to as the "Regulation"), we inform you that the undersigned submits and will submit to processing the personal data concerning you that have been and will come from you or by third parties communicated. By virtue of the aforementioned processing carried out by us, we wish to provide you with the following information.

1. TYPE OF DATA COLLECTED AND PROCESSED

The undersigned will collect and process only the personal data that identifies your company or your internal contacts (or external contacts who have authorized you to transmit the data). The data referred to in the art. are not collected and processed. 9, belonging to particular categories of data, and those referred to in art. 10, personal data relating to criminal convictions and crimes, of the Regulation.

2. IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER AND HIS RESPONSIBLE

The data controller is the undersigned company, with registered office and contact details at the bottom.

The data responsible is the legal representative, Mr. Enrico Piatti, domiciled for the office at the office indicated above.

3. CONTACT DETAILS OF THE DATA PROTECTION RESPONSIBLE

The analysis of the treatments carried out excludes the applicability of the art. 37 of the Regulation in relation to the non-public nature of the undersigned, the activity (main and ancillary) carried out by the undersigned, the absence of regular and systematic monitoring of the interested parties on a large scale.

4. PURPOSE OF THE PROCESSING FOR WHICH THE PERSONAL DATA ARE INTENDED AS WELL AS THE LEGAL BASIS OF THE PROCESSING

The processing of the data referred to in point 1 is aimed exclusively at achieving the following purposes, whose regulatory framework also constitutes the legal basis of the processing itself (in particular points a and b):

• for preliminary and/or contextual needs and aimed at the execution of the obligations deriving from the contract concluded with you;
• to fulfill any type of obligation established by current laws or regulations;
• for operational and management needs related to the management of sales or purchase orders.

The processing is also carried out with the aid of electronic or automated means and is carried out in such a way as to guarantee the security and confidentiality of the data themselves.

5. LEGITIMATE INTERESTS PURSUED BY THE DATA CONTROLLER

The following constitute legitimate interests of the Data Controller, who can proceed with the processing even in the absence of consent from the interested party:

• those indicated in the previous point;
• specific treatments related to debt collection or legal defense;
• the prevention of fraud and crime.

6. RECIPIENTS OF PERSONAL DATA

The personal data referred to in point 1 collected to achieve the purposes indicated in point 4 may be communicated and/or disseminated, to the extent of their specific competence, to public and private entities, natural and/or legal persons and having commercial purposes. (e.g. communication of the name of the contact person to another person interested in the commercial practice) and/or management of information systems (e.g. maintenance of our information systems), including external parties who carry out specific tasks on behalf of the undersigned (e.g. . financial advisor).

Within the limits strictly pertinent to the execution of the obligations deriving from the relationships with you, the data may be communicated to subjects located in the territory of the European Union (e.g. communication of the name of the contact person to another person interested in the commercial practice).

7. TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANIZATION

The personal data referred to in point 1 collected to achieve the purposes indicated in point 4 will not be transferred to third countries or to international bodies for which it is necessary to report on the existence or absence of an adequacy decision by the Commission or, in the case of transfers referred to in articles 46, 47, 49 paragraph 2 of the Regulation, report on appropriate or appropriate guarantees and the means to obtain a copy of such data or the place where they were made available.

8. PERIOD OF CONSERVATION OF PERSONAL DATA

The personal data referred to in point 1 collected to achieve the purposes indicated in point 4 will be kept until the end of the existing relationship and/or that required for the conservation of the accounting records.

9. EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS, INCLUDING PROFILING

The processing of personal data referred to in point 1 does not involve "profiling" understood as "any form of automated processing of personal data consisting in the use of such data to evaluate certain personal aspects relating to a natural person, in particular to analyze or provide for aspects concerning the professional performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements of said natural person" (see art. 4 Regulation).

10. RIGHTS OF THE INTERESTED PARTY

You can contact the data controller to assert your rights as provided for in the articles. 15 (access), 16 (rectification), 17 (cancellation), 18 (limitation), 20 (portability), 21 (opposition), to which please refer in full.

In summary:
1. The interested party has the right to obtain confirmation of the existence or otherwise of personal data concerning him, even if not yet registered, and a copy of the same.

2. The interested party has the right to obtain the indication:

• the origin of the personal data;
• of the purposes and methods of processing;
• of the logic applied in case of processing carried out with the aid of electronic instruments;
• the identification details of the owner, managers and those in charge of processing;
• of the subjects or categories of subjects to whom the personal data may be communicated.

3. The interested party has the right to obtain:

• updating, rectification or, when interested, integration of data, limitation of data;
• the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
• data portability (only on the basis of a contract stipulated with the interested party and does not apply to data whose processing is based on the legitimate interest of the owner);
• the attestation that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves the use of means that are manifestly disproportionate to the protected right;
• the limitation of processing.

4. The interested party has the right to object, in whole or in part:

• for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
• to the processing of personal data concerning him for the purposes of sending advertising material or direct sales or for carrying out market research or commercial communication.

5. The interested party has the right to lodge a complaint with a supervisory authority.

11. PROVISION OF DATA AND CONSEQUENCES OF ANY REFUSAL TO RESPOND

The provision of data is:

• mandatory to achieve the purposes related to the obligations established by laws or other binding regulations;
• necessary for the correct establishment or continuation of the relationship established with you.

Any refusal to provide the above data, although certainly legitimate, could compromise the smooth running of the relationship.

We remind you that, without prejudice to what is indicated above in points 4, 5 and 11 of this information, pursuant to art. 7 of the Regulation, the processing of your data is permitted only with express consent through a declaration or unequivocal positive action, but not necessarily in written form provided, however, for particular categories of data and for personal data relating to criminal convictions and crimes of referred to in the articles 9 and 10 of the Regulations.

The voluntary nature with which you have provided us with your data or have made them available to the same subjects who reported them to us constitutes in itself an unequivocal positive action; In any case, we ask you to inform us of any objections to the processing referred to in point 10 of the information and the absence of which will be interpreted by us as an expression of consent to the continuation of the processing.