Personal Data Processing Information

(Italian Law - Legislative Decree 196/2003­ -­­ Article 13 Reg. UE 679/2016 - Article 13)

Pursuant to Legislative Decree 196/03 (Italian law), EU Reg. 2016/679 and Legislative Decree 101/2018 (Italian Law) concerning the protection of persons and other subjects concerning personal data processing, we inform you that the personal data you provided will be processed in compliance with the aforementioned legislation.

1. Data Controller

The Data Controller is Piusi S.p.A. with registered office in Via Pacinotti 16/A, 46029, Suzzara (MN), Italy. The updated list of data processors can be requested by letter or email to marketing@piusi.com.

2. Processed Data

The Data Controller processes the personal data you provide (e.g. company name, address, telephone number, e-mail address, bank and payment references, names of legal representatives, attorneys or your employees for processing) - hereinafter, "personal data" or simply "data".

3. Purpose of the Processing

The data are collected and processed to fulfil the compulsory administrative and fiscal obligations related to the management of our contractual relationship or to reply to your requests.

Providing the data is compulsory to comply with the law and to fulfil contractual obligations. Therefore, failure to provide such data may prevent the establishment, continuation or total or partial fulfilment of pre-contractual or contractual relations and, in any case, will not allow us to reply to your requests. Other data include commercial and judicial information provided to/by leading specialised companies, with particular reference to the reliability rating for payments and commercial transactions.

4. Data Processing Methods

Your data are processed lawfully and according to rules of correctness and confidentiality, in full compliance with Legislative Decree 196/2003 and EU Reg. 679/2016 using computerised and paper-based tools in all cases suitable to guarantee security and confidentiality. Please note that, in accordance with the principles of lawfulness, purpose restriction and minimisation of data processing, pursuant to Article 5 of GDPR 679/2016, your personal data will be retained for up to ten years.

5. Scope of communication and disclosure

We also inform you that the collected data will never be disclosed and will not be communicated without your explicit consent. The data may be communicated to all the members of our internal organisation (administrative, commercial, marketing, central and peripheral, etc.) and also to subjects outside our organisation, such as subsidiary or associated companies or other firms performing tasks on our behalf (e.g. tax-related, sales network, shipping, archiving, IT, external consultancy, transport and communication services, etc.) as required or authorised by law. The data will also be transmitted to commercial information companies to assess creditworthiness and payment habits.

6. Transfer of personal data

No data will be transferred outside the EU. Should the need to transfer personal data abroad arise, the Data Controller shall ensure that adequate guarantees are in place for the protection and security of personal data under current law.

7. Existence of automated decision-making, including profiling

No automated decision-making, including profiling, as mentioned Article 22(1) and (4) of EU Reg. 679/2016 is used.

8. Rights of the Data Subjects

You may exercise the following rights pursuant to Legislative Decree 196/2003 and Articles 15 to 22 of EU Reg. 679/2016 at any time. More in detail, you may:

1. a) ask for confirmation of whether personal data which concerns you exists or not;
2. b) obtain information about the purposes of the processing, the data categories, the recipients or categories of recipients to whom the personal data have been or will be communicated and, where possible, the retention time;
3. c) obtain the data rectification and erasure;
4. d) obtain the restriction of processing;
5. e) obtain the data portability, i.e. receive the data from a data controller, in a structured, commonly used format readable by an automatic device, and transmit the data to another data controller without hindrance;
6. f) object to the processing at any time and also in the case of processing for direct marketing purposes;
7. g) oppose to automated individual decision-making, including profiling;
8. h) ask the data controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to the processing as well as the right to data portability;
9. i) withdraw your consent at any time without affecting the lawfulness of the processing based on the consent you gave before withdrawing;
10. j) ask to lodge a complaint with a supervisory authority.

You may exercise your rights by sending a request to marketing@piusi.com.

Suzzara, 20 July 2021

PIUSI S.p.A.

via Pacinotti n. 16/A,

46029 Suzzara (MN),

Italy.

VAT No. 01869920205