PRIVACY POLICY PURSUANT TO ART. 13 OF EUROPEAN REGULATION NO. 679/2016 - CUSTOMERS

The "Data Controller"

Pursuant to art. 13 of EU Regulation no. 679/2016, Accurat S.r.l., (hereafter “the Company”), VAT no.

07455930961, with Headquarters in Milan, Via Benedetto Marcello 38, is the Data Controller, pursuant to

art. 24 of EU Regulation no. 679/2016, for the processing of your personal data. The same informs you

therefore that the personal data acquired, also with reference to the existing legal relationships (Customer /

interested party), are subject to processing in compliance with the above-mentioned legislation. In relation

to the aforementioned processing, the Data Controller provides, among other things, the following

information.

“Processing" (ex art. 4 of Regulation no. 679/2016) shall mean any operation or set of operations, carried out

even without the aid of electronic means, concerning the collection, recording, organisation, storage,

consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking,

communication, dissemination, cancellation and destruction of data, even if not recorded in a database.

This treatment must be carried out in accordance with Article 1 of Legislative Decree no. 196/2003 and

subsequent amendments and additions as amended by Legislative Decree no. 101/2018 and based on

principles of correctness, lawfulness, transparency while protecting your privacy and your rights.

Personal data collected

The personal data collected are essentially related to:

- Identifying data (name or company name, or name and surname of natural persons, address,

telephone, fax, e-mail, tax data, etc.);

- Data relating to economic and commercial activity (e.g.: order collection, contracts, solvency,

banking and financial data, accounting and tax data, etc.). The same are provided by the Customer /

Interested party directly or can be collected from independent third parties Owners and / or external

managers of the treatment, such as: agents, representatives, brokers and reporters of merits, or from

commercial information companies or registers, lists or public databases for data relating to financial

solvency, or by companies, Italian and foreign, providing services for and on behalf of the Controller,

as well as subsidiaries or parent companies.

Purpose of treatment

The purposes of the processing of personal data are as follows:

1. Execution of contracts with you and related commitments;

2. Fulfilment of legal obligations related to the existing contractual relationship;

3. Organisational management of the contract;

4. Any external professional collaboration for the fulfilment of legal obligations;

5. Protection of contractual rights;

6. Internal statistical analysis.

Nature of data provision

The provision of data and its processing are required in relation to the purposes n. 1, 2, 3, 4 and 5 relating to

the fulfillment of contractual obligations: the provision must also be considered mandatory in relation to the

purposes referred to in paragraph 6 that relate to the performance of all activities of the Controller necessary

and functional, it follows that any refusal to provide data for these purposes will make it impossible for the

Controller to continue the contractual relationship and the obligations of law.

Methods of treatment

Personal data will be processed in paper, computerized and telematic form and entered in the relevant

databases (customers, suppliers, administration, etc..) which can be accessed, and then learn about it,

employees expressly designated by the Controller as authorized / designated to process personal data, which

may carry out operations of consultation, use, processing, comparison and any other appropriate operation,

including automated in accordance with the provisions of the law necessary to ensure, among other things,

the confidentiality and security of data as well as the accuracy, updating and relevance of data in relation to

the purposes declared.

Duration of treatment

The data will be processed for as long as is necessary for the development of the existing legal relationship

and for a period of ten years, following, from the date of acquisition of the same, for administrative,

accounting and fiscal purposes. For newsletter purposes the data will be processed for 36 months from their

registration.

Scope of communication and dissemination of data

In relation to the purposes indicated, the data may be communicated to the following subjects and/or

categories of subjects indicated below or may be communicated to companies and/or persons, both in Italy

and abroad, which provide services, including external services, on behalf of the Controller. For the sake of

clarity, their different types are indicated:

- Technicians/Specialists in the sector;

- Consultancy firms;

- Professional firms;

- Competent authorities and/or supervisory bodies for the fulfilment of legal obligations;

- Public administrations for their institutional purposes;

- Professionals qualified for the purpose of the study and resolution of any legal and contractual problems;

The list of External Processors, including further data useful for identification, is available at the registered

office of the Controller.

The data communication outside the Company is provided exclusively for the purposes indicated above.

Personal data will not be disclosed.

The data transmission to third Countries or non-EU Countries is not foreseen.

Rights of data subjects

In relation to the aforesaid processing, you may exercise the rights referred to in Chapter III of EU Regulation

no. 679/2016 in art. 15 - 22, which include:

- obtain confirmation of the existence or otherwise of data concerning you;

- know the origin of the data, the logic and the purpose on which the processing is based;

- obtain access, cancellation, transformation into anonymous form or blocking of data processed

unlawfully, updating, limitation, rectification, revocation, portability and integration of data;

- oppose, for legitimate reasons, the processing of data;

- lodge a complaint with a supervisory authority pursuant to art. 77 of EU Regulation no. 679/2016

(http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524),

by contacting Accurat S.r.l. with Headquarters in Milan, Via Benedetto Marcello 38, sending an email to: [email protected] .

Further information regarding the processing and communication of data provided directly or otherwise

acquired may be requested at the address above.

The Data Protection Officer (DPO) can be contacted sending an email to [email protected].

Further information about the processing of data may also be communicated verbally.