PRIVACY DISCLAIMER

PURSUANT TO REGULATION (EU) 2016/679 ("GDPR") ARTICLES 13 AND 14 AND SUBSEQUENT NATIONAL ADJUSTMENT RULES This document ("Information") intends to provide you with information on the processing of information, as specified below, which will be provided by you or otherwise available at our facility and which will be processed by the same and / or by other subjects identified for purposes indicated below. The information, in particular, is provided pursuant to EU Regulation no. 679/2016 ("GDPR") and subsequent national adaptation rules (together with the GDPR hereinafter "Applicable Law"). 1. Identity and contact details of the data controller The data controller, pursuant to art. 4 and 24 of the EU Reg. 2016/679, is La Spiaggia Srl "under the name Fratino Pigro" - Via Toscana 8, 64011 Alba Adriatica (TE), VAT number 00633030671, Tel. 0861 188 6454, info@fratinopigro.it, in the person of the pro-tempore legal representative (hereinafter the "Owner"). 2. Contact details of the Data Protection Officer (so-called "RPD-DPO") The Data Controller does not carry out activities that require the designation of the Personal Data Protection Officer. 3. Purpose and legal basis of the processing The Personal Data collected will be processed for the purposes and by virtue of the legal bases set out below: point 3, lett. a): for the management of your contractual relationship or to execute pre-contractual measures (such as, for example, the request for information or that of a quote). In this case, you are free to provide your personal data, even particular ones; however, failure to provide it will not allow you to establish the aforementioned relationship and satisfy your request. LEGAL BASIS OF THE PROCESSING: the processing is necessary in relation to the execution of a contract to which you are a party 4. Categories of personal data processed (pursuant to Article 14) Within the limits of the purposes and methods described in this Notice, information that can be considered as "Personal data", which includes your general information, may be processed Your contact details (such as, for example, mobile number, e-mail address, etc.). 5. Recipients and categories of recipients Personal data will not be disseminated, or will not be disclosed to undetermined subjects. Instead, they may be communicated to well-defined subjects, in full compliance with the provisions of the law, for purposes strictly related to those previously indicated. Any access to your personal data is limited to the subjects authorized by the Data Controller. The communication to the identified recipients, only if involved and functional, is linked to the achievement of the purposes referred to in point 3 above, therefore the personal data collected and processed may be: a) used anonymously for statistical purposes; b) made available to the Data Controller's collaborators, as managers or persons authorized to process data personal; c) communicated to third parties, natural or legal, public administrations, professionals, law enforcement agencies, government bodies, regulatory bodies, courts or other public authorities authorized by law; d) if necessary, transferred to another Data Controller in accordance with the provisions of the GDPR, also with regard to the right to data portability. The information may also be communicated whenever the communication may be necessary to comply with requests from the Judicial or Public Security Authorities. The collected data will in no case be disclosed. The list of personal data processing managers is available at the headquarters of the Data Controller. 6. Transfer of data abroad The data will not be transferred outside the European Union. 7. Data retention period (determination criteria) Below is a table containing the indications of the retention times (or determination criteria) of the Personal Data: PURPOSE point 3, lett. a): contract management STORAGE TIMES For the entire duration of the relationship and subsequently for 10 years (ordinary prescription). 8. Methods of data processing The processing of Personal Data will take place using manual, computerized or telematic tools, suitable for guaranteeing their security and confidentiality and will be carried out by personnel duly trained in compliance with the Applicable Regulations. There is no automated decision-making process. In cases where it is necessary to contact you for needs related to the management of your position, you can be contacted by e-mail, text message, or through any equivalent electronic tool or by paper mail or call through an operator at all the addresses provided. If you prefer to be contacted only at one or some of these addresses, you can make an express written request addressed to the Data Controller without formalities. 9. Rights recognized to you We inform you that you may exercise the rights recognized by the Applicable Law including, by way of example, the right: a) to access their Personal Data and to know the origin, the purposes and purposes of the processing, the data of the subjects to whom they the data retention period or the criteria useful to determine it are communicated (Article 15); b) to request its rectification (Article 16); c) cancellation ("oblivion"), if no longer necessary, incomplete, erroneous or collected in violation of the law (Article 17); d) to request that the processing be limited to a part of the information concerning you (Article 18); e) to the extent technically possible, to receive in a structured format or to transmit to you or to third parties from you indicated the information concerning you (so-called "portability") or those that have been voluntarily provided by you (Article 20); f) to oppose their treatment based on legitimate interest (Article 21); g) as well as to withdraw their consent at any time, in the event that this constitutes the basis of the processing (the withdrawal of consent in any case does not affect the lawfulness of the processing based on the consent given before the withdrawal itself). The aforementioned rights may be exercised by means of a written request addressed without formalities to the Data Controller at the contacts indicated in point 1. The owner must proceed in this sense without delay and, in any case, at the latest within one month of receiving the request. The deadline can be extended by two months, if necessary, taking into account the complexity and number of requests received by the Data Controller. In such cases, the Data Controller will inform you within one month of receiving your request and will inform you of the reasons for the extension. Reminds you that, if the response to your requests has not been satisfactory in your opinion, you can contact and lodge a complaint with the Authority for the Protection of Personal Data (http://www.garanteprivacy.it/) in the ways provided for by the Law. Applicable. Last Revision: May 2018