DISCLOSURE FOR THE PROCESSING OF PERSONAL DATA PROVIDED BY CONTACTS

In implementation of the New EU Regulation no. 679/2016, we hereby inform you that:

The Data Controller is Molino Spadoni Spa, with registered office on Via Ravegnana, 746 – 48125 Coccolia (RA) – VAT number 00529220394 – Telephone 0039 0544.569056 – e-mail: info@molinospadoni.it – PEC: molinospadoni@legalmail.it

The aforementioned Regulation provides for a series of requirements applicable to persons in charge of processing natural persons’ personal data, (i.e., data collection, recording, processing, storage, communication and other operations detailed in Article 4 of the Regulation).

Purposes of processing and legal basis

Your personal data will be processed exclusively for the:

• evaluation and management of your requests submitted via web, on the “Contacts” page

The provision of information is optional. Nonetheless, failure to provide all or some data may prevent the Data Controller from taking your requests into consideration.

Your consent, which can be given by ticking the dedicated box found on the “Contacts” page, is a necessary condition for such processing.

We remind you that consent can be freely revoked at any time, without prejudice to any processing that took place before the revocation.

Processing modalities

Processing will be carried out on paper documents, as well as IT and telematic tools and supports, in compliance with the provisions of the law, and corporate regulation and policies whose purpose is to ensure data safety, confidentiality, availability and integrity, as well as that your data are accurate, updated and relevant to the purposes stated below. Processing will take place in compliance with the principles of fairness, lawfulness and transparency.

Your data will be processed by specifically authorized and trained internal staff, and in the event that an external subject is engaged to process some of the data, such subject will be appointed Data Processor by means of a duly executed agreement, as required by Art. 28 of the Regulation.

Recipients of data

Your personal data may be disclosed:

• to companies of the Group and to the following public and private bodies, also following inspections or due diligence operations: Financial Administration, Tax Police bodies, Judicial Authorities, Chamber of Commerce, Accounting and/or Professional Office, Hardware and software maintenance and management companies where any relevant work is provided, Public and local authorities, Banks or Credit Institutions
• to subjects who can access your data by law, or secondary or EU legislation;

Your personal data will not be transferred to a third country or to any international organization.

Storage period of personal data

Your data are kept for the time strictly necessary to reply to messages. In the event that a commercial relationship is established, your data will be kept at minimum for the duration of the relationship.

Rights of the data subject

In relation to the aforementioned processing and any data existing in our archives, you can exercise the rights referred to in Chapter III, Arts. 15 to 22 of Regulation (EU) 2016/679, and specifically:

• right to access (Art. 15); right to rectification (Art.16); right to erase (so-called right to be forgotten, Art.17); right to restriction of processing (Art. 18); right to data portability (Art. 20); right to object (Art.21);

In order to exercise your rights, you can contact the Undersigned by telephone, regular post or e-mail using the contact information provided at the top of this Disclosure.

Right to lodge a complaint with the Supervisory Authority

Pursuant to Art. 13, paragraph 2 d), you have the right to lodge a complaint with the Personal Data Protection Supervisor should you find that your rights as data subject have been violated, or simply for any question you may have concerning the processing of your personal data.