Privacy notice issued by Cattani S.p.A. pursuant to Article 13 of EU Regulation 2016/679

DOWNLOAD: INFORMATION AND CONSENT FOR MARKETING 2018

Whereas 1) following your visits to this website, filling out of forms, receipt of your requests/questions, preliminary contact, surveys and market research, or the establishment of any commercial relations, our company shall collect and process your personal data; 2) for the sake of clarity, we shall specify the following definitions given in EU Regulation 2016/679: Personal data: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; Processing: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. In consideration of the above, pursuant to Article 13 of EU Regulation 2016/679, we inform you that the collection and processing of personal data shall be carried out by our company in accordance with the following: a) general purposes: the data shall be processed in order to respond to your requests/questions, for the correct fulfilment of bureaucratic, accounting, fiscal, commercial and technical requirements, and for corporate activities that are compulsory by law and in any case strictly pertain to the relations in place; b) “direct marketing” purposes: your data may also be used, only and exclusively with your free, optional, specific and explicit consent, which may be revoked at any time, to send advertising material/communications by post, email, phone, fax, SMS, MMS or similar means; after having expressed consent, you shall be entitled to object, at any time and free of charge, to the processing of your data for these purposes; c) procedures: the data shall be processed using both paper and electronic/computerised/automated tools/means, in full compliance with the applicable legislation, in accordance with the principles of lawfulness and integrity, and in such a way as to protect your privacy; d) optional provision of data: the provision of your data is optional and not compulsory; e) consequences of refusal: refusal to provide your data or total objection to the processing of your data for the purposes set out under point a) may make it impossible to satisfy some of your requests; denial of permission to use your data for the purposes set out under point b), however, shall not have any consequences on the granting of advantages linked to promotions or on the relations in place between us; f) persons or categories of persons (recipients) to whom the data may be communicated or disseminated: the data may be communicated to third parties only in order to fulfil legal or contractual obligations. The data shall not under any circumstances be disseminated; g) persons authorised to process the data: the data shall be processed exclusively by a restricted number of company employees in the administrative, marketing and commercial departments and the data processing centre who are specifically authorised to do so; h) automated decision-making processes (e.g. profiling): no automated decision-making processes are used to process your data; i) rights of the data subject: you have all the rights enshrined in EU Regulation 2016/679, such as the rights to access and rectification of the data, erasure, restriction of processing, objection to processing, and data portability. You also have the right to file a complaint with the supervisory Authority; j) transfer of data to third countries: any transfer of personal data to a third country outside of the European Union or to an international organisation shall take place on the basis of an adequacy decision by the Commission or, in the case of transfers pursuant to Articles 46, 47 or 49, paragraph 2, of the EU Regulation, on the basis of appropriate and suitable guarantees; k) data storage period: the data shall be stored for the period of time strictly necessary to respond to the data subject's requests or in accordance with the regulations in force or any contractual clauses; l) data controller: the data controller is Cattani S.p.A., whose registered offices are in Parma (PR), at Via Natta no. 6/A, in the person of its pro tempore legal representative; m) data protection officer: the data protection officer is Mr Juri Torreggiani, whose office is located in Reggio Emilia, at Via Piccard no. 16/G, tel. 0522/30.11.69, fax 0522/38.79.96: any request for clarification or information can be addressed to him. This privacy notice may be supplemented, either verbally or in writing, with additional elements and indications, in order to better meet your need to be familiar with our privacy policy or in response to regulatory changes. Data: 2 October 2018 The data controller: Cattani S.p.A.

Consent issued to Cattani S.p.A. pursuant to Articles 7, 8 and 9 of EU Regulation 2016/679