THIS WEBSITE’S PRIVACY POLICY

PERSONAL DATA PROCESSING NOTICE

In compliance with the provisions of European Regulation No. 679/2016 and Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018 and subsequent amendments and additions, ACR di Reggiani Albertino S.p.a., in its capacity as «Data Controller» for the processing of personal, sensitive and judicial data contained in the automated or paper databases of its facilities, and acknowledging that such data are processed for the pursuit of the Company's business purposes, hereby provides you with the following information regarding the processing of your personal data. The Data Protection Officer is: Dr. Bruno Scognamillo, Via La Spezia No. 287, Modena (MO) | e-mail: bruno.scognamillo@alice.it | Certified E-mail (PEC): bruno.scognamillo@arubapec.it

a. CATEGORIES OF PERSONAL DATA
The Company will process your personal identification data and data relating to your economic and commercial activities. Please note that all the data listed are necessary and functional to the management of the contractual relationship established between the parties and to compliance with the obligations arising therefrom, as well as with legal obligations.

b. PURPOSES AND METHODS OF DATA PROCESSING AND LEGAL BASIS FOR THE PROCESSING
The purposes of the processing of personal data are the performance of the contract entered into with you and the related obligations, the fulfilment of legal obligations connected with the contractual relationship, the organizational management of the contract, any external professional collaborations required for compliance with legal obligations, the protection of contractual rights and quality statistics. The provision of data is mandatory for all requirements arising from legal and contractual obligations and, therefore, any refusal to provide such data, in whole or in part, may result in the Company's inability to perform the contract or to properly fulfil all obligations. The personal data collected will be processed lawfully and fairly, collected and recorded for the specific, explicit and legitimate purposes indicated above and used in further processing operations that are compatible with such purposes.
The personal data collected will be recorded and stored in electronic and paper archives and safeguarded and monitored in such a way as to minimize the risks of destruction or loss, including accidental loss, unauthorized access and processing that is unauthorized or inconsistent with the purposes of collection, at the Company's registered office. The data will be processed by the Company's internal personnel, duly instructed for this purpose. All data relating to the Data Subject will also be archived in the event of termination/cessation of the contractual relationship, for the fulfilment of any obligations connected with or arising from the interruption of the relationship. The Data Controller will process the data until the termination of the relationship, without prejudice to the data that
must be retained even after its conclusion in order to comply with legal obligations and related business requirements.

c. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA
Your data may be disclosed to: the Company's authorized personnel, Public Authorities as required by law, entities designated by current legislation as recipients of mandatory communications, banking institutions for collection and payment activities, professionals operating individually, in partnerships or corporate forms, insurance companies, clients and companies or entities with which the Company has entered into contractual commitments whose execution requires such disclosure, and transport companies for activities related to the shipment of goods. The Company will not disclose your data in any way.

d. RIGHTS OF THE DATA SUBJECT
Pursuant to European Regulation 679/2016 (GDPR) and national legislation, the Data Subject may, within the limits and according to the procedures provided for by the
applicable legislation, exercise the following rights:
– request confirmation of the existence of personal data concerning him/her (right of access);
– obtain information regarding the origin of such data;
– receive such information in an intelligible form;
– obtain information regarding the logic, methods and purposes of the processing;
– request the updating, rectification, integration, erasure, anonymization or blocking of data processed in violation of the law, including data no longer necessary for the purposes for which they were collected; exercise the right to data portability – in cases where processing is based on consent, receive the data provided to the Data Controller in a structured, commonly used and machine-readable format;
– the right to lodge a complaint with the Supervisory Authority, namely the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), website:
www.garanteprivacy.it.

e. METHODS FOR EXERCISING YOUR RIGHTS
You may exercise your rights at any time by sending:
– a registered letter with return receipt to ACR DI REGGIANI ALBERTINO S.P.A. (VAT No. 03819031208, Tax Code No. 00778780361), with registered office in Mirandola (MO), Via Statale Nord, 162
– a certified e-mail (PEC) to acrspa@arubapec.it ACR di Reggiani Albertino S.p.A.

Last updated: May 2023