PRIVACY POLICY IN ACCORDANCE WITH ARTICLE 13 EU REGULATION 679/2016 ("PRIVACY REGULATION")

Protecting the security and privacy of your personal data is important to the Data Controller, which acts in accordance with the laws currently in effect regarding the protection and security of personal data. We trust that the information below will help you to understand what kind of data the Data Controller usually collects, how it uses and safeguards it, and with whom it shares it.
Pursuant to Art. 13 of EU Reg. 679/2016 ("Privacy Regulation"), we therefore wish to inform you that the processing of your personal data will be based on the principles of correctness, lawfulness and transparency, and protecting your confidentiality and your rights and in compliance with precisely the current legislation on security and protection of personal data.

In particular, we inform you the following:

a. Source of personal data
The personal data in our possession are those conferred by you at the time of your registration and/or at the time you submit a request for information about our products/services, by filling in the appropriate forms on the Site (First Name*, Last Name*, City*, Country*, E-mail*, Company, Telephone, Qualification*) and/or at the time of your request to subscribe to our newsletter service on the Site itself, or even any data conferred in the project registration area: First Name*, Last Name*, Select Sector...*, Prescriber (architect, designer, interior designer, lighting specialist), Company, Country, Telephone, Fax, E-mail*, Password*, for the creation of an account with username and password.
All personal data will be processed in accordance with the Privacy Code, the Privacy Regulations and the confidentiality obligations that have always inspired the Holder's activities.

b. Legal Basis and Purpose of Processing
The purposes in relation to which your data will be processed by us are as follows:

b.1) Purpose of handling your requests
By processing the data provided by you, we will be able to respond to your requests for information regarding the characteristics, nature of products/services in relation to which you have expressed your interest, or related products/services, in the event that those of your interest are not, momentarily or permanently, available, or any initiatives carried out by the Owner.
In this case, the legal basis for such processing is the execution of pre-contractual and/or contractual measures taken at your request.

b.2) Purposes of asserting or defending a right in court, including by a third party.
For this processing purpose, the legal basis is the legitimate interest of the Data Controller.

b.3) Purpose is to fulfill the specific obligations arising from the existing relationship or to handle everything arising from the agreement between the parties.
The legal basis for this purpose is the fulfillment of legal obligations.

b.4) Purposes of forwarding newsletters.
Upon collecting your consent in this regard, by processing the data you provide, we may also send you a periodic newsletter containing information regarding our business activities including our products/services.
Even in the case of consent, you may revoke it at any time by making a request to the Controller in the manner indicated in paragraph h below.
You can also easily object to further mailings by exercising your so-called right to opt-out, through the modalities found in each type of communication with which these newsletters are sent.
Upon making a revocation of consent, you will receive confirmation of receipt of such notice of revocation, from the Controller.
We inform you, however, about the fact that, even following the exercise of this right of revocation, it is possible that, for technical and operational reasons (e.g., the formation of contact lists already completed shortly before the Holder's receipt of the revocation itself), you will continue to receive some additional newsletters. Should you continue to receive newsletters since the exercise of the aforementioned right, please report the problem to the Controller using the contacts listed in section h below.
In this case, the legal basis of the above processing is the consent to the processing of your data, expressed by you at the time of your request to subscribe to our newsletter service, made by you in the dedicated section of the site.

b.5) Marketing and sending commercial communications.
Subject to the collection of your consent in this regard, by processing the data you provide, we may carry out market research, i.e., send you information regarding our business activities, including our products/services, or promotional material, offers related to our products/services, as well as invitations to industry trade fair events or business events in which we would like you to participate, all - including by automated means - via e-mail and/or via telephone and/or via instant messaging systems.
Even in the case of consent, you may revoke it at any time, by making a request to the Controller, in the manner indicated in paragraph h. below, both with regard to the forwarding of material through automated modes and with regard to the forwarding of material through traditional modes and even only with reference to one of the two listed modes.
Upon making a revocation of consent, you will receive confirmation of receipt of such notice of revocation, from the Controller.
The Controller informs you, however, about the fact that, even following the exercise of this right of revocation, it is possible that, for technical and operational reasons (e.g., the formation of contact lists already completed shortly before the
Holder's own receipt of the revocation in question), you will continue to receive some further commercial communications.
Should you continue to receive commercial communications since the exercise of the aforementioned right, please report the problem to the Controller, using the contact details set out in point h below.
In this case, the legal basis of the above processing is the consent to the processing of your data, expressed by you when filling in the forms in the appropriate sections of the Site.

c. Method of treatment
The data will be processed using manual or electronic methods, suitable to guarantee, in relation to the purposes for which they were communicated and collected, their security, as well as to prevent unauthorized access by third parties and, in any case, in compliance with what is indicated by national and European regulations.

d. Nature of conferment
The provision of data in relation to the purposes set out in point b.1), b.2), b.3) is mandatory as it is a necessary requirement in order to be able to proceed to respond to your requests, in case of failure to provide it, the consequences of your refusal will be that you will not be able to receive information regarding our products/services, for which you have expressed interest.
The provision of data in relation to the purpose referred to in point b.4) is optional, but is a necessary requirement in order to be able to receive newsletters from the Holder; in the event of lack of consent, the ability to browse the Site as well as to spontaneously address requests for information to the Holder will not be affected in any way, except that it will not be possible to receive said newsletters.
The provision of data in relation to the purpose referred to in point b.5) is optional, but it is a necessary requirement in order to be able to receive information regarding our business activities, including our products/services, or promotional material, offers related to our products/services, as well as invitations to trade fairs in the sector or company events; in the event of lack of consent, the possibility of browsing the Site as well as spontaneously addressing requests for information to the Holder will not be affected in any way, except that it will not be possible to be the recipient of marketing activities by our company.
Please do not give, while using the interactive services, any sensitive/particular data, that is, data from which racial or ethnic origin, religious beliefs, political opinions, membership in parties, trade unions, associations and organizations of a religious, philosophical, political or trade union nature, as well as state of health, may possibly be inferred. Any sensitive data provided will be immediately deleted.

e. Subjects of Data Processing and Communication
Your personal data may come to the attention of the employees and/or collaborators of the Controller appointed to carry out for the same activities necessary for the purpose of achieving the purposes of the above processing.
They may also come to the attention of providers of computer and logistical services functional to the operation of the Site, providers of outsourced services, professionals and consultants, companies in charge of sending promotional e-mails and text messages or commercial communications (where you have consented).
These individuals, formally appointed by the Data Controller as Data Processors, Data Processors and/or System Administrators, will process your data in accordance with and exclusively for the purposes set forth in this policy and under the control and supervision of the Data Controller.
Your data may also be communicated to third party suppliers, for example forwarding agents and/or agents, who will process them, either as Data Processors appointed by the Data Controller or, as the case may be, as Autonomous Data
Controllers, exclusively for the purpose of being able to contact you, where you have given your consent. A complete and updated list of the subjects to whom your data have been disclosed can be requested from the Data Controller, whom you can contact by writing to the e-mail address indicated in point h.

f. Data dissemination
The Data Controller will not carry out dissemination activities of your personal data.

g. Transfer of data abroad
Your personal data may be transferred to countries outside the EEA (European Union, Iceland, Liechtenstein and Norway).
In this case, the transfer will take place, for the purposes indicated, to countries considered appropriate by the European Commission, or by taking necessary measures to protect your personal data, in compliance with legal guarantees, in accordance with the applicable legislation and in particular articles 44, 45 and 46 GDPR. For any clarifications, you may request at any time from the Data Controller the list of suppliers that process your personal data, using the address indicated in paragraph h.

h. Rights of the data subject
Finally, we inform you of the possibility of exercising at any time the rights recognized to you by the law, which we set out below:

• Access the data provided;
• obtain the rectification of the data provided, their cancellation, transformation into anonymous form, the blocking of data processed in violation of the law, or the restriction of the processing of data concerning you;
• object to data processing;
• Revoke your consent, where given;
• Obtain portability of your data;
• obtain confirmation of the existence or non-existence of the same data, know its content and origin, verify its accuracy or request its integration or updating, know the purposes and methods of processing, the logic applied in case of processing carried out with electronic instruments, the identification details of the owner, managers, appointees and the DPO, if designated;
• Propose a complaint to the supervisory authority (Privacy Guarantor);
• Object to automated decision-making regarding natural persons, including profiling, where he or she has given consent; and
• To obtain, without undue delay, notice of a breach of your personal data.

• via e-mail, at: panzeri@panzeri.it
• by fax: +39 (039) 2497396
• or by mail, to the address: Via Padania 8, 20853 Biassono (MB)