PRIVACY DISCLAIMER

pursuant to and for the purposes of art. 13, of the EU Regulation 2016/679
relating to the protection of individuals with regard to the processing of personal data,
as well as the free circulation of such data and repealing Directive 95/46 / EC

Roberto Cavagnini e c sas - Piva/Vat : 04415880980 - REA: BS613122

Via Nazario Sauro,9 - 25016 - Ghedi (BS)

Dear Sir / Madam
We wish to inform you that the European Regulation n. 679 of 27 April 2016 on the processing of personal data provides for the protection of individuals with regard to the processing of personal data.
Under Article 13 of the REG. EU 2016/679, we invite you, therefore, to take note of the information and to express your consent to the processing of the data, signing and returning the attached card.
1. Identification details of the Holder (and of any other subjects)

The Data Controller is the Roberto Cavagnini company based in GHEDI (BS) Italy
Indicate any other subjects: external managers where existing, DPO where appointed, internal contact person where present1

2. Purpose of the processing

The processing of personal data provided is aimed solely at
(the list is merely an example):
a) execution of the contract;

b) fulfillment of obligations under laws related to the contractual relationship;

c) management of the contract, for example, relations with agents, representatives, clients and / or contractors;

d) any external professional collaborations for the fulfillment of legal obligations;

e) protection of contractual rights;

f) internal statistical analysis;

g) marketing activities through the sending of promotional and advertising material regarding products or services similar to those covered by the existing commercial relationship;

The legal basis for processing is the contract, as well as explicit consent.

3. Processing methods

Personal data will be processed in paper, computerized and telematic form and inserted into the relevant databases which the persons in charge of data processing may access.
The processing may also be carried out by third parties who provide specific processing, administrative or instrumental services necessary to achieve the aforementioned purposes.
All data processing operations are implemented in order to guarantee the integrity, confidentiality and availability of personal data.
4. Data retention period

The data provided will be kept for the duration of the contractual relationship.

5. Rights pursuant to articles 15, 16, 17 18, 20, 21 and 22 of the REG. EU 2016/679

We inform you that, as an interested party, you have the right to file a complaint with the supervisory authority, the rights listed below, which you can enforce by making a request to the data controller and / or the controller, as indicated in the point 1.
(the list can also be simplified to the articles of the Regulation only)
Art. 15 - Right of access
The interested party has the right to obtain from the data controller the confirmation that the processing of personal data concerning him is being carried out and, in this case, to obtain access to personal data and information regarding the processing.
Art. 16 - Right of correction
The interested party has the right to obtain from the data controller the rectification of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration. 3

Art. 17 - Right to cancellation (right to oblivion)
The interested party has the right to obtain from the data controller the deletion of personal data concerning him without unjustified delay and the data controller has the obligation to delete personal data without undue delay.
Art. 18 - Right to limit the processing
The interested party has the right to obtain the treatment limitation from the data controller when one of the following hypotheses occurs:
a) the data subject disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is unlawful and the data subject opposes the deletion of personal data and requests instead that its use be limited;
c) although the data controller no longer needs it for the purposes of processing, personal data is necessary for the data subject to ascertain, exercise or defend a right in court;
d) the data subject has opposed the processing pursuant to Article 21, paragraph 1, pending verification regarding the possible prevalence of the legitimate reasons of the data controller with respect to those of the data subject.
Art. 20 - Right to data portability
The interested party has the right to receive in a structured format, commonly used and readable by automatic device, the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without hindrance by part of the data controller to whom it has supplied them.
In exercising their rights with respect to data portability pursuant to paragraph 1, the data subject has the right to obtain direct transmission of personal data from one data controller to another, if technically feasible.
Art. 21 - Right of opposition
The interested party has the right to object at any time, for reasons related to his particular situation, to the processing of personal data concerning him pursuant to Article 6, paragraph 1, letters e) of), including profiling on the basis of these provisions.
Art. 22 - Right not to be subjected to automated decision-making, including profiling
The data subject has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects that concern him or that significantly affects his person.
Place and date
Ghedi 2019