Subject: information art.13 of the European Regulation 2016/679 for the processing of personal data.

Dear Mr./Mrs,

EUROPEAN REGULATION 2016/679 and the current “CODE IN THE MATTER OF PROTECTION OF PERSONAL DATA” referred to in Legislative Decree 196/2003, impose the observance of strict rules to protect all personal data, both at the stage of their processing and their dissemination during administrative -accounting activities. In compliance with this legislation, we inform you that the processing of all data will be based on the principles of fairness, lawfulness, transparency and protection of the confidentiality of his rights. Therefore, in your capacity as a “data subject” to be understood as “natural person, legal person, entity or association to whom the personal data refer,” I inform you of the following:

1)PURPOSE.

The personal data you provide will be processed only for the purposes necessary to conclude the requested supply. The provision of the requested data is mandatory as it is necessary for the conclusion of the contract. Refusal to process such data could result in failure to complete administrative-accounting paperwork. Personal data will be processed for administrative-accounting purposes only. Data may be sent to outside companies only for the purposes previously stated.

2)DATA PROCESSING

Your personal data will be processed in the manner and with the precautions provided for in current regulations, respecting the prerequisites of legitimacy of each data request, following principles of fairness, transparency, protection of your dignity and confidentiality. The processing may be carried out in paper form, or by means of computer and telematic tools, and the relevant data will be kept not only in the archives present at the company, but also at the companies that take care of the administrative-accounting part on our behalf. The data will be kept for the time period stipulated by tax regulations. Processing includes as main steps: collection, recording, organization, storage, processing, communication, dissemination, and deletion of data when they cease to be necessary.

3)DATA COMMUNICATION AND DISSEMINATION

The individuals to whom personal data may be disclosed in the course of work activities are: External data processors and the authorized persons of internal administrative processing. Personal data, may be disclosed to other public or private entities exclusively in cases provided for by laws and regulations (for example:, INAIL, competent ASL, Software house, Municipality, Province, Guardia di finanza, and others ). Only the data stipulated in the regulations and strictly in the cases specified therein may be disseminated. Strictly in relation to the purposes stated above, your personal data may come to the attention of data processors and/or appointees as designated by the Data Controller by means of regularly recorded and archived measures. The same may be disseminated anonymously and, in any case, such that the person concerned cannot be identified;

4)DATA ACQUISITION AND PROCESSING METHODS

4a) The processing of your personal data will be based on the principles of lawfulness, transparency and fairness;

4b) The data you provide will be used exclusively to fulfill administrative, social security, insurance and tax obligations contemplated in our legal system;

4c) The data will be recorded and stored in the employer’s paper and electronic archives, in compliance with the minimum security measures dictated by current regulations;

4d) The provision of data is essential for the establishment and continuation of the supply contract;

As an interested party, you may:

(a) obtain confirmation of the existence or non-existence of your data with the Data Controller;

(b) know its content and origin;

(c) verify its accuracy or request that it be supplemented or updated or rectified;

d) request cancellation, transformation into anonymous form or blocking of data processed in violation of the law;

e) to object, for legitimate reasons, to the processing as well as, in general, to exercise all the rights recognized by Art. 15-22 of Regulation 679/16.

5)DATA CONTROLLER

The data controller is the owner of the company in the person of Mery Mazzoni

Email: info@mazzoni-group.it / Tel. 0735-703902

You may apply to the Data Controller without special formalities in order to assert your rights, as provided for in Article from Chapter III of the Regulations.

The updated list of authorized and responsible persons is available at the Company’s offices.