Agreement for use of personal data *

INFORMATIVE REPORT – IN COMPLIANCE WITH THE CODE REGARDING PRIVACY PROTECTION IN RESPECT OF PERSONAL DATA (Art. 13 Legislative Decree 196, 30 June 2003) Please be informed that in terms of the Legislative Decree 196/2003, which ensures the protection of individuals and other subjects with regard to the processing of personal data, such processing shall be carried lawfully and fairly and by respecting Your rights and Your privacy. In terms of article 13 of the aforementioned Decree, we inform you that the personal data furnished by you, or acquired within a scope of your specific request for registration to the Company portal www.erestrade.com, will be processed in compliance with the legislation under discussion. 1. The processing of your data, freely supplied by you, is aimed at fulfilling your request to receive information of commercial, promotional and technical nature, etc, as well as at sending you advertising materials exclusively concerning the products and services handled by our Company. 2. The processing of personal data freely furnished by you in writing shall be carried out with the aid of paper, electronic and /or automated METHODS, and of any other technological instruments as provided for by law, in compliance with the provisions of Art 11 of the Code. To this aim safety measures will be taken capable of: a) ensuring data privacy and security; b) keeping data and integrity of the involved data subject; c) re-constructing and recovering the same data; d) preventing unauthorised persons from having access to data; e) implementing the aforesaid safety measures. 3. He data supplied will be entered into our databanks and the processing of data will include all the operations or set of operations, carried out also without the aid of electronic instruments, regarding the collection, registration, organisation, keeping, reading, modification, selection, comparison, use, interconnection, blocking, dissemination, cancellation and deletion of data, even of data that are not recorded in our data bank, as provided for by Art. 4, sub-sec. 1, letter a) of Legislative Decree196/2003. 4. The collected personal data shall not be DISSEMINATED, but they may be COMMUNICATED to the subsidiary or connected companies of ERESTRADE S.A.S., for purposes strictly connected or auxiliary to the service offered to our customers. We also advise you that personal data will be handled by our personnel specifically entrusted with the processing for their pertaining activities: Image &Marketing Department, Sales Department Italy and Abroad, Technical Assistance, Purchasing Office, Research & Development, as well as the Company owners. 5. Though facultative, the SUPPLY of personal data is essential to satisfy your request. Therefore, failing the necessary authorisation, we will not be in the position to supply you with the information required neither to execute your specific requests. 6. The DATA PROCESSING CONTROLLER is ERESTRADE S.A.S., with registered office in via S.Agata 9, Biella (BI) Italy. The Person Responsible for the Data Processing is the pro-tempore Legal Representative, with chosen address for this office at the seat of ERESTRADE S.A.S., who may be contacted at the following e-mail address: info@erestrade.com or at the company address and numbers. Upon specific request, the organisation chart relating to the company privacy management is at disposal. 7. RIGHTS OF THE DATA SUBJECT: In your capacity as data subject, you shall have the right to obtain from the Controller at any time the updating, erasure, rectification and/or completion of incomplete or incorrect data as well as to have your rights asserted as provided for by Art. 7 of Legislative Decree 196/2003 Legislative Decree 196/2003 - Right to access to personal data and other rights 1. The data subject shall have the right to obtain confirmation as to whether or not personal data relating to him exist, regardless of their being already recorded, and the intelligible communication of such data. 2. The data subject shall have the right to be informed of: o the source of personal data; o the purposes and modalities of the processing; o the logic applied to the processing when carried without the aid of electronic instruments; o the data identifying the controller, the processors and the representative appointed in compliance with art. 5, sub-sec. 2; o the subjects or categories of subjects to whom the data may be communicated or who may get acquainted with in their capacity as representative appointed in the State territory, or as responsible or appointed persons. 3. The data subject shall have the right to obtain: o the updating, rectification or, where interested therein, the completion of the data; o the erasure, blocking or transformation into an anonymous form of data which have been processed unlawfully, including those whose keeping is not necessary for the purposes for which they were collected or subsequently processed; o he statement that the operations as per letters a) and b) have been notified, also with regard to their contents, to the subjects to whom the data were communicated or disseminated, except when the provision of such information proves to be impossible or implies a manifestly disproportionate effort compared with the right to be protected. 4. The data subject shall have the right to object, in whole or in part: o on legitimate grounds, to the processing of personal data relating to him, even though relevant to the purpose of the collection; o to the processing of personal data relating to him, which is carried out for purposes of commercial information or advertising or direct marketing, or for the performance of market or commercial communication surveys. Informative report on the processing of personal data in accordance with art. 13 of Legislative Decree 196, 30 June 2003. Agreement for use of personal data *