Information to customers, potential customers and suppliers concerning the processing of personal data, in accordance with article 13 of Legislative Decree no. 196/2003

As set forth by the Italian Legislative Decree no. 196 of 30 June 2003 («Personal data protection code»), everyone has a right to protection of the personal data concerning him or her. The processing of personal data is carried out in compliance with the provisions of the above law and it is based on the principles of correctness, lawfulness and transparency, as well as protection of your confidentiality and of your rights.

Pursuant to art. 13 of Legislative Decree no. 196/2003, we provide following information:

1. The data supplied by you will be used in the course of our normal business activity: (i) for purposes related to and instrumental in the management of contractual relationships; (ii) for compliance with legal, regulatory and Community obligations and directives issued by legally empowered authorities and supervisory and oversight bodies; (iii) for any purposes connected with our activities, for which you may give or withhold your consent, i.e. for management, fiscal, administrative, accounting, as well as commercial, statistical and operational purposes.

2. Personal data will be processed both manually and by electronic means:

- the instruments used to process personal data are suitable to guarantee security and confidentiality; data processing may be carried out either manually or also through automated systems (both IT and online tools) for the storage, management and transmission of the information;

- furthermore, your personal data will be processed in conformity with the procedures set out by the Italian Legislative Decree no. 196/03.

3. Providing data is obligatory, inasmuch as it is needed to carry out supply and service activities; any failure to provide such data might result in the total or partial non-fulfillment of the contract, or in the interruption of the relationship.

4. Personal data may be communicated to the following third parties, which perform functions that are strictly related to or instrumental in our activities and that, therefore, are deemed essential for the Company's operations:

- banks and banking companies, in the context of the financial management of the Company;

- insurance companies;

- tax authorities;

- public safety authorities;

- social security and welfare institutions (if necessary);

- shipping companies or other subjects carrying out supply-related services;

- independent auditors; administrative, tax and contract consultants.

5. The Data Controller is: Carpenterie Metalliche di Colzate S.r.l. con unico socio - Via Rodigari, 10 - 24020 Colzate (Bg) - Italy, in the person of its legal representative Mr. Robert Raab.

6. The Data Processor is Mr. Robert Raab.

7. You may at any moment exercise your rights towards the Data Controller, pursuant to Art. 7 of the Italian Legislative Decree no. 196/2003, which, for your convenience, is reproduced in full here below.

Art. 7 - Right to Access Personal Data and Other Rights

1. A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form.

2. A data subject shall have the right to be informed:

a) of the source of the personal data;

b) of the purposes and methods of the processing;

c) of the logic applied to the processing, if the latter is carried out with the help of electronic means;

d) of the identification data concerning data controller, data processors and the representative designated as Section 5(2);

e) of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.

3. A data subject shall have the right to obtain:

a) updating, rectification or, where interested therein, integration of the data;

b) erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;

c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.

A data subject shall have the right to object, in whole or in part:

a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;

b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.

In view of the compulsory nature of data collection, no authorization for data processing is required; in fact, it is necessary for the continuation of the contractual relationship, as well as for the mandatory retention of fiscal documents.

Potential customers (i.e. subjects, for which no fiscal documents have been issued yet) may obtain the cancellation of the processed data with an informal request, by sending an e-mail or fax notice (fax number: +39 035 714449), indicating the name of the company and of the person in charge, and requiring the removal of all processed data: these will then be rendered anonymous.

Colzate, May 3, 2015

Carpenterie Metalliche di Colzate S.r.l. con unico socio