NOTICE ON THE PROCESSING OF PERSONAL DATA (Italian Legislative Decree No. 196/2003)

Dear Customer / Company, this notice is to inform you that the personal data relating to your company are processed at our Company's administrative offices, in full compliance with Italian Legislative Decree No. 196/03 (the “Personal Data Protection Code”).

The data are entered into our Company's databases and fall within the cases referred to in Article 24 of Legislative Decree No. 196/03.

The processing will not in any way involve “sensitive” data as defined in Article 4, paragraph 1, letter d), and Article 26 of Legislative Decree No. 196/2003, namely data “capable of revealing racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of political parties, trade unions, associations or organisations of a religious, philosophical, political or trade-union nature, as well as personal data capable of revealing health status and sex life”.

Under Legislative Decree No. 196 of 30 June 2003, the personal information relating to your company will be processed in accordance with the principles of fairness, lawfulness and transparency, and with protection of your privacy and rights. Under Article 13 of Legislative Decree No. 196/2003, and with regard to the personal data in our possession, we inform you of the following:

1. PURPOSES OF PROCESSING
The data are collected and processed in order to:
a) fulfil contractual obligations;
b) fulfil accounting and banking obligations;
c) fulfil obligations relating to occupational health and safety.
The data you provide are processed solely for the proper and complete fulfilment of the above obligations, or of any other legal obligations that cannot currently be foreseen.

2. METHODS OF PROCESSING
The data will be processed both electronically and on paper.

3. OPTIONAL PROVISION OF DATA AND CONSEQUENCES OF ANY REFUSAL TO PROVIDE THEM
Providing the data is optional. Refusal to provide them may make it impossible for us to properly fulfil our contractual obligations or carry out the activities you have requested.

4. SCOPE OF DISCLOSURE AND DISSEMINATION
The persons within the Company who are authorised to process the data may have access to your personal data. Your personal data will be disclosed outside the Company solely where required by law, to make payments due to you and for the related accounting activities. Your personal data will not be disclosed to other parties or disseminated.

5. IDENTIFICATION DETAILS OF THE DATA CONTROLLER AND THE DATA PROCESSOR
The data controller is the Legal Representative, Eng. Salvatore ARIGANELLO. He can be contacted:
Monday to Friday,
from 08:00 to 12:30,
at the following telephone number: 039.011.9593909.

6. RIGHTS OF THE DATA SUBJECT
You may exercise your rights against the data controller at any time under Article 7 of Legislative Decree No. 196/2003, which we reproduce in full below for your convenience:

Legislative Decree No. 196/2003 — Article 7 — Right of access to personal data and other rights

1. The data subject has the right to obtain confirmation as to whether personal data concerning them exist, even if not yet recorded, and to receive those data in an intelligible form.

2. The data subject has the right to be informed of:
a) the origin of the personal data;
b) the purposes and methods of processing;
c) the logic applied where the data are processed using electronic tools;
d) the identification details of the data controller, data processors and the representative designated under Article 5, paragraph 2;
e) the parties or categories of parties to whom the personal data may be disclosed, or who may have access to them as the designated representative within the territory of the State, as data processors or as persons authorised to process the data.

3. The data subject has the right to obtain:
a) the updating, rectification or, where they have an interest in doing so, supplementation of the data;
b) the erasure, anonymisation or blocking of data processed in breach of the law, including data that do not need to be retained for the purposes for which they were collected or subsequently processed;
c) confirmation that the operations referred to in letters a) and b), including their content, have been brought to the attention of the parties to whom the data were disclosed or disseminated, except where this proves impossible or involves an effort manifestly disproportionate to the right being protected.

4. The data subject has the right to object, in whole or in part:
a) on legitimate grounds, to the processing of personal data concerning them, even where those data are relevant to the purpose for which they were collected;
b) to the processing of personal data concerning them for the purpose of sending advertising material or direct selling, or for conducting market research or commercial communications.