Privacy - Information on the processing of personal data

The undersigned Company Maticorp Italia s.r.l., with registered office at Via Gaetano Scirea N.11/A 43122 Parma (IT), informs you that, for the data provided by you through this website, Maticorp Italia s.r.l. is the data controller of your data qualified as personal data in accordance with EU Regulation 2016/679 of 27 April 2016 (hereinafter GDPR). In accordance with the provisions of the aforementioned Regulation, we hereby provide the information, in compliance with Articles 13 and 14 of the aforementioned EU Regulation. The information and data provided by you or otherwise acquired in the context of the use of the services of Maticorp Italia s.r.l. will be processed in compliance with the provisions of the Regulation and the confidentiality obligations that inspire the activities of Maticorp Italia s.r.l. According to the rules of the Regulation, the processing carried out by Maticorp Italia s.r.l. will be based on the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, integrity, and confidentiality.

1. Purpose and methods of processing - Maticorp Italia s.r.l processes the personal data of Users for the following purposes:

a. to proceed with the purchase of goods or services from Maticorp Italia s.r.l through the Website and, therefore, to carry out any activity related to the selection of products or services, the sending of orders and/or their acceptance, shipping, delivery and/or any exercise of the right of withdrawal and the consequent return of goods or any other obligation provided for in the general terms and conditions of sale of Maticorp Italia s.r.l;

b. for the performance of any administrative and accounting activity related to the purchase made through the Website as well as to comply with legal obligations.

c. for responding to requests sent through the contact forms available on the website. Personal data is processed using manual and electronic tools and stored in the designated electronic database. The personal data contained in the aforementioned automated information system, as well as those stored in the electronic archives of the Data Controller, are processed in accordance with the provisions of the current regulations and the GDPR concerning security measures, in order to minimize the risks of destruction, loss, alteration, unauthorized disclosure or access, whether accidental or unlawful, or processing not compliant with the purposes of the collection.

2. Legal basis of the Processing. The processing of personal data for points a. and b. of Article 1 is necessary for the performance of a contract and related legal obligations for the specific purposes of selling products (Art. 6, paragraph 1, letters b and c). The processing of personal data for point c. of the previous article is necessary for handling the request (Art. 6, paragraph 1, letter b). Consent to the processing of personal data for the aforementioned purposes is not required.

3. Refusal of Consent to Processing: Failure to provide personal data as referred to in points (a) and (b) of Article 1 will result in the User's inability to conclude purchase, sale, delivery, and/or return procedures, to enjoy services reserved for registered Users or requested by them from time to time as indicated in the terms of use of the Website, as well as the performance of administrative and accounting activities by Maticorp Italia s.r.l. With regard to the processing purpose referred to in point (c), the provision of personal data is purely optional, provided that its non-provision will make it impossible for Maticorp Italia s.r.l to receive and process the User's request.

4. Data Retention Periods: Personal data is kept for the time necessary to achieve the purposes set out above, as well as to comply with legal obligations imposed for the same purposes.

5. Types of Personal Data Processed: Maticorp Italia s.r.l processes personal data freely entered by the User on the Website (such as, in particular, personal information, contact details, phone and/or fax numbers, email addresses, data contained in comments or reviews, etc.), as well as technical data autonomously generated (in particular, IP addresses, log files related to browsing on the Website, purchases made, etc.). Maticorp Italia s.r.l will retain, within the terms of the law, log files and IP addresses used during online purchases, in order to prevent and detect any fraud in online transactions. 5. Scope of Data Disclosure: The personal data provided by the User for the purposes described in Article 2 above may be disclosed to or communicated to the following recipients: - Employees and/or collaborators in any capacity of Maticorp Italia s.r.l for the performance of administrative, accounting, and IT and logistical support activities; - Public and/or private entities, individuals and/or legal entities (legal, administrative and tax consultancy firms, freight forwarders and couriers, any IT companies and any other entities) used by Maticorp Italia s.r.l in the performance of the activities referred to in points (a) and/or (b) of Article 1; - All those subjects (including Public Authorities) who have access to the data by virtue of regulatory or administrative provisions. The processed data will not be communicated to unauthorized parties, except for the communication or dissemination of data required by law, by police forces, judicial authorities, information and security agencies, or other public entities for purposes of defense or state security, prevention, investigation, or repression of crimes.

6. Rights of the Data Subjects: In accordance with Articles 15 and subsequent of the GDPR and the current regulations, the User has the right, in addition to lodging a complaint with the Italian Data Protection Authority and withdrawing consent at any time, to: - Obtain confirmation of the existence of personal data concerning them and their communication in an intelligible form, receiving them in a structured, commonly used, and machine-readable format with the possibility of transmitting them to another data controller ("Right to Data Portability"); - Obtain information: (i) on the origin of personal data, on the purposes and methods of the processing, on the logic applied in case of processing carried out with the aid of electronic tools; (ii) on the identification details of the Data Controller, of the Data Processors, and of the Data Protection Officer; (iii) on the subjects or categories of subjects to whom the data may be communicated or who may become aware of it as designated representatives in the territory of the State, as Data Processors or designated persons. - Obtain: (i) the updating, rectification, or integration of the data concerning them or, in case of disputes about the accuracy of the data, the limitation of the processing thereof for the time necessary for the appropriate checks, (ii) the transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is necessary for the purposes for which the data were collected or subsequently processed, (iii) certification that the operations referred to in the preceding points have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared to the protected right. - Object, in whole or in part: (i) to the processing of data concerning them, even if pertinent to the purpose of the collection, (ii) to the processing of personal data concerning them for the purpose of commercial information or sending advertising or direct sales material or for carrying out market research or commercial communication. - Obtain erasure without undue delay ("Right to be Forgotten") where the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, have been unlawfully processed, or where the User (i) requests it or (ii) objects in whole or in part to the processing. - Obtain the restriction of processing where the data (i) have been unlawfully processed but the User opposes the deletion of the same, (ii) are necessary for the User for the establishment, exercise, or defense of a right, (iii) the evaluation of the legitimate reasons for processing by the Controller is pending. The above rights may be exercised by making a request to the Data Controller.

7. Data Controller: The Data Controller is Maticorp Italia s.r.l, with registered office at Via Gaetano Scirea N.11/A 43122 Parma (IT), VAT/CF 02942030343 – REA PR – 270100, tel. +39 0521 261490, email [email protected] (the "Data Controller"). At any time, you may request the updated list of subjects who may become aware of the data processed by the Data Controller.