Acciugha srl Unipersonale Viale Mantova, 88 – 47924 Rimini ITALY P.IVA IT03514730401 – R.E.A RN295980 Information on the processing of personal data pursuant to articles. 13-14 EU Regulation 2016/679 The company Acciugha srl ​​Unipersonale, in its capacity as Data Controller of your personal data, pursuant to and for the purposes of EU Regulation 2016/679, hereinafter “GDPR”, hereby informs you that the aforementioned legislation provides for the protection of interested parties with respect to the processing of personal data and that such processing will be based on the principles of correctness, lawfulness, transparency, proportionality and protection of your privacy and your rights. Your personal data, subject to your consent, will be processed in accordance with the legislative provisions referred to in the aforementioned legislation and the confidentiality obligations set out therein. Purpose and legal basis of the processing: execution of the requested service, in implementation of legislative or contractual obligations. Data processing methods: Your data may be processed using electronic calculators. All processing takes place in compliance with the methods set out in the articles. 6 and 32 of the GDPR and through the adoption of the appropriate security measures provided therein. Communication: your data will be communicated exclusively to competent and duly appointed data controllers for the performance of the services necessary for the correct management of the relationship, with a guarantee of protection of the rights of the interested party. The processing of your data will take place exclusively by persons authorized for this purpose and duly trained by the Data Controller. Dissemination: your personal data will not be disclosed in any way. Retention period: We inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the GDPR, the retention period of your data is:

• established for a period of time not exceeding the achievement of the purposes for which they are collected and processed for the execution and fulfillment of the contractual purposes;
• established for a period of time not exceeding the completion of the services provided;
• established for a period of time not exceeding the achievement of the purposes for which they are collected and processed and in compliance with the mandatory times prescribed by law.

The Data Controller, pursuant to the Law, is the company Acciugha srl ​​Unipersonale (Viale Mantova 88, 47924 Rimini ITALY, VAT number IT03514730401 – R.E.A RN295980) You have the right to obtain from the Data Controller the cancellation (right to be forgotten), limitation, updating, rectification, portability, opposition to the processing of personal data concerning you, and in general you can exercise all rights provided by the articles. 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR. Rights of the interested party:

1. The interested party has the right to obtain confirmation of the existence or otherwise of personal data concerning him, even if not yet registered, and their communication in an intelligible form.
2. The interested party has the right to obtain the following information:

• purposes of the processing;
• categories of personal data in question;
• recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients are from third countries or international organisations;
• when possible, the expected retention period of personal data or, if this is not possible, the criteria used to determine this period;
• existence of the interested party’s right to ask the data controller to rectify or delete personal data or limit the processing of personal data concerning him or her or to oppose their processing;
• right to lodge a complaint with a supervisory authority;
• if the data are not collected from the interested party, all available information on their origin;
• existence of an automated decision-making process, including profiling referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and envisaged consequences of such processing for the interested party ;
• if personal data are transferred to a third country or to an international organisation, the interested party has the right to be informed of the existence of adequate guarantees pursuant to article 46 relating to the transfer.3. The data controller provides a copy of the personal data being processed. In case of further copies requested by the interested party, the data controller may charge a reasonable fee based on administrative costs. If the interested party submits the request by electronic means, and unless the interested party indicates otherwise, the information is provided in a commonly used electronic format.4. The right to obtain a copy referred to in paragraph 3 must not adversely affect the rights and freedoms of others.

3. The interested party has the right to obtain:

• updating, rectification or, when interested, integration of data;
• the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
• the certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves the use of means that are manifestly disproportionate to the protected right;
• data portability.

4. The interested party has the right to object, in whole or in part:

• for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
• to the processing of personal data concerning him for the purposes of sending advertising material or direct sales or for carrying out market research or commercial communication.

For an exhaustive list of the rights of the interested party, please refer in any case to the text of the articles. 15-22 of the GDPR.