Dear Customer

We inform you that the EU Regulation 2016/679 recognizes every natural person the protection of their personal data that are processed by third parties. On the basis of the provisions of the Regulation, the data processing will be carried out in full compliance with the principles established by art. 5 c1 lett. a) b) c) d) e) f).

By processing of personal data we mean any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization, structuring, conservation , adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.

Based on the provisions of article 13 of the GDPR, the writer provides the following information:

Object of the treatment: The Data Controller processes the personal data communicated by you when concluding contracts for the products requested from the Data Controller

Purpose of the processing and legal basis: Your personal data are processed without your express consent (Article 6, letter b), and c) of the GDPR), for the following purposes:

• conclude contracts with the data controller;

• fulfill the pre-contractual, contractual and tax obligations deriving from existing relationships with you;

• fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority.

Type of data processed: The Data Controller processes the following personal data (name, surname, address, telephone, e-mail, tax code, VAT number, bank and payment references).

Methods of treatment: The processing and storage of your data will be carried out with the aid of IT and/or paper means and tools, according to the most suitable methods to guarantee their integrity, security and confidentiality.

Duration of treatment: The Data Controller will process your personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship as required by civil/tax legislation.

Data communication: Your data may be communicated for the purposes indicated in the Purposes of processing field to:

• Internal staff of our company appointed authorized to process; All subjects are duly informed and educated about the fulfilments and measures to be adopted in matters of privacy;

• Subjects external to our company (credit institutions, professionals, operators and companies that deal with the maintenance of IT systems and applications, insert any other subjects), with whom we have entered into precise agreements regarding the measures to be taken to guarantee security of the data entrusted to them, in any case the data will be processed exclusively for the pursuit of the purposes indicated above;

• To the judicial authorities as well as to those subjects to whom the communication is mandatory by law.

Data dissemination Your information will not be disseminated.

Data transfer: Your personal data will not be transferred to non-EU countries.

Data Controller: the data controller is ALLEGRA SRLS with registered office in Venafro (IS) at SS 85 Venafrana Km. 230 and operational headquarters in Venafro (IS) at Via Colonia Giulia n. 33.

Nature of data provision and consequences of refusal to respond: The provision of data for the purposes highlighted in the Purposes of processing field is mandatory. In their absence, we will not be able to provide you with our products.

Rights of the interested party: The GDPR provides for a series of rights for the interested party and precisely the right of access to personal data, the right to obtain the rectification or cancellation of the same or the limitation of the treatment that concern him, the right to oppose the treatment, the right to data portability, the right to withdraw consent, where provided: the withdrawal of consent does not affect the lawfulness of the processing based on the consent given before the revocation; the right to lodge a complaint with the Data Protection Authority.

How to exercise rights: You can exercise your rights at any time by sending:

• a registered letter to ALLEGRA SRLS Via Colonia Giulia n. 33 – 86079 Venafro (IS)

• an email to the address allegrasrls2018@gmail.com