Guidelines processing WEBSITE DATA

TOSA SPA, as (owner) data controller pursuant to articles 13 and 14 of EU Regulation 679/2016 — General Data Protection Regulation («RGPD»), in compliance with the obligations required by the legislator for the protection of privacy , hereby wish to inform you, as a precautionary measure both of the use of your personal data and of your rights, communicating the following:

a) HOLDER AND OTHER PERSONS RESPONSIBLE
The data controller is TOSA SPA, C.F. 02081560043, email TOSA@ESSETREPEC.IT, with head office in 109/11 NOVEMBER STREET- 12058 — Santo Stefano Belbo (CN) — Italy. The updated list of the persons in charge for processing data, with the relating areas of competence, is:
· Data controller — TOSA SPA

b) PERSONAL DATA SUBJECT TO TREATMENT
· Non-specific personal data (identification, accounting, financial, etc.) — Duration: the data is kept for the time strictly necessary for the purposes related to the processing and to the legal obligations.

c) PURPOSE, LEGAL BASIS AND MANDATORY OR OPTIONAL NATURE OF THE PROCESSSING
The source of the data referred to in point b is: Data provided by the Data Subject
Main Purpose: The Data are collected to allow the Data Controller to provide its Services, as well as for the following purposes: Contacting the visitor.
Legal basis: the processing is necessary for the execution of a contract of which the Data Subject is a part or for the execution of pre-contractual measures adopted at the request of the same

d) RECIPIENTS
Exclusively for the aforementioned purposes, the data will be made available, as well as to the internal staff units competent at this regard, also to external collaborators in charge of their processing, whose list is available at the Data controller’s office.

e) TRANSFERS
There are no transfers of Personal Data to Recipients outside the European Union

f) DATA STORAGE
All personal data provided will be treated in accordance with the principles of lawfulness, correctness, relevance and proportionality, only with the procedures, including computerized and online, strictly necessary to pursue the purposes above mentioned. In any case, personal data will be stored for a period of time not exceeding that strictly necessary to achieve the indicated purposes. The personal data for which storage is not necessary or for which storage is not required by current legislation, in relation to the stated purposes, will be deleted or transformed into an anonymous form. It should be noted that the information systems used to manage the information collected are configured, originally, in order to minimize the use of the data.

g) YOUR RIGHTS
Please note that the Data Subject has the right to access the data concerning him / her at any time, by sending his/her request to our designated data processor for feedback, using the contact details below:
· Data Controller — TOSA SPA – 109, NOVEMBER STREET — 12058 — Santo Stefano Belbo (CN) — Italy — 0141841000 — TOSA@ESSETREPEC.IT

In the same way, regarding to the processing in question, you can exercise the following rights: Information, Data correction, Data deletion