INFORMATION ON DATA PROCESSING - art. 13 EU Regulation 679/2016

1. DATA CONTROLLER

The Data Controller of Personal Data is Amedeo Ferrante s.r.l. (hereinafter the "Data Controller"), with registered office in San Giovanni Teatino (CH), Via Po', 40, in the person of its legal representative.

2. PERSONAL DATA PROCESSED FOR REGISTRATION ON THE E-COMMERCE SITE

Personal data (name, surname)

Contact data (e-mail, telephone)

If a request is sent through the "Contact us" section of the www.ferrante.it website, the provision of certain Personal Data is necessary for Amedeo Ferrante s.r.l. to be able to meet the requests, so the relevant fields of the registration form are marked as mandatory.

3. PURPOSE AND LEGAL BASIS OF THE PROCESSING

According to the requirements related to the access to the various sections of the Website (and except for single initiatives involving the conferment of specific Personal Data, for which specific information will be published from time to time), the purposes of the processing of Personal Data and the relevant legal basis are indicated below:

Registration to the Website: the procedure of registration to our Website, through the creation of an account or the use of an existing social network account, is aimed at allowing you to use the Website as a "Registered User", and to access a series of exclusive services offered through it. The provision of data is optional. The legal basis of the processing is the execution of pre-contractual measures to which the interested party is a party.

Access through the use of social networks may involve the need to have access to additional personal data to that provided during registration with our portal, based on the permissions you provide to the social network itself and to which you should refer for policies on the management of your privacy.

Purchase of products: by using our website you may purchase Amedeo Ferrante s.r.l. products either as a Registered User (in which case you must re-enter all your Personal Data for each purchase) or as a Non-Registered User (by re-entering the data required to complete the purchase). Both cases will involve the processing of your Personal Data.

Your Personal Data will be processed in order to manage orders and payments and to carry out the consequent administrative-accounting fulfilments as well as to contact you for any communications concerning the purchases themselves. The provision of data is optional, but necessary to complete the purchase order. The legal basis of such processing is the execution of the Contract to which the interested party is a party.

Management of requests: Personal Data shall be collected for the purpose of managing and responding to requests in relation to products and initiatives of Amedeo Ferrante s.r.l.. The legal basis for such processing is the execution of pre-contractual measures to which the data subject is a party.

Marketing: subject to your express consent, we may process your Personal Data in order to send you commercial communications, as well as to invite you to take part in our promotional initiatives, participate in our events, subscribe to our newsletter. The legal basis for such processing is the consent of the data subject, which may be revoked at any time.

Profiling: subject to your express consent, we may process your Personal Data for profiling purposes, i.e. to analyse or predict your tastes, potential habits, and consumption choices, in order to be able to offer you products, services, promotions and personalised commercial communications. The legal basis for such processing is the consent of the data subject, which may be revoked at any time.

The profiling activity could also be carried out through the use of proprietary and third party cookies. We therefore invite you to read our Cookie Policy. Such processing may be carried out on condition that you provide us with additional specific and optional consent.

4. NATURE OF THE PROVISION

The provision of your Personal Data is optional. However, failure to provide it may prevent you from benefiting from certain services.

The compulsory or optional nature of the provision will be indicated from time to time by the use of symbols (e.g. "*") placed next to the information whose provision is compulsory to pursue the respective purpose.

5. METHODS OF DATA PROCESSING

Your Personal Data shall be processed in compliance with the provisions of the Privacy Law in force, both with the help of electronic and automated means and manually, according to logics that are strictly correlated to the purposes of processing, by means of databases, electronic platforms managed by Amedeo Ferrante s.r.l. or by third parties (appointed as Data Processors), the integrated IT systems of Amedeo Ferrante s.r.l. and of the above-mentioned third parties, and/or websites owned by or used by Amedeo Ferrante s.r.l.

Your Personal Data shall be processed in such a way as to guarantee maximum security and confidentiality and only by persons trained and authorised to process them. The Data Controller adopts adequate technical and organisational measures to ensure a level of security appropriate to the risk of processing.

Personal Data are mainly processed at the Data Controller's premises and in the places where the Data Processors are located.

6. RECIPIENTS OF THE DATA

Your Personal Data may be made accessible, for the above purposes, to employees and collaborators of Amedeo Ferrante s.r.l. in Italy and abroad.

The Personal Data you provide may be communicated to companies belonging to the group and/or third party companies that carry out activities in Italy or abroad on behalf of the Data Controller, in their capacity as data processors.

The Data Controller has drawn up a list of Data Processors, which is constantly updated and which it makes available to you by contacting the addresses given in point 11 of this Information Notice.

Finally, your Personal Data may be transmitted to the judicial authorities where necessary and in the cases provided for by law.

7. DATA RETENTION PERIOD

In order to ensure compliance with the principles of necessity and proportionality of the processing, different retention periods have been identified for Personal Data in relation to the individual purposes pursued:

Website Registration: the Personal Data you provide to register on the Website will be kept for the duration of your registration on the Website. In case of inactivity for 24 months your Account will be deleted.

Invoicing data will be kept for a period of time to ensure the proper execution of the contract and in any case for a further 10 years for the purpose of fulfilling the related administrative and tax obligations.

Data collected for profiling purposes and for the purpose of sending promotional/advertising material, for which you have given your consent to processing, will be kept for a period of time not exceeding 12 or 24 months respectively, or such other period as may be indicated by the supervisory authorities. Where you have not provided such consent, your Personal Data will be anonymised and used for statistical analysis.

Data collected for the purpose of managing and replying to requests concerning products and initiatives of Amedeo Ferrante s.r.l. and data provided during interaction with the Amedeo Ferrante s.r.l. world shall be stored for the period necessary to fulfil your requests and subsequently deleted if no further contact is made.

If a further relationship is established, Personal Data shall be processed for the period of time indicated in relation to the purchase of products as far as Customers are concerned, for the duration of the working relationship, and for the fulfilment of legal obligations connected to the working relationship as far as agents are concerned.

8. DATA OF MINORS

Amedeo Ferrante s.r.l. does not normally intend to collect Personal Data of minors, nor to deliberately establish communication with them. For this reason, we invite parents to actively monitor the online activities of their children under the age of sixteen.

However, in the event that we need to contact a child under the age of 16, the consent of his or her parents or guardians will be required, except in the case of answering a question from the child or resolving a request from the child.

9. RIGHTS OF THE INTERESTED PARTY

You may at any time exercise the rights provided for in Articles 15 et seq. of the Regulation in relation to the Data Controller, including :

the right to obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and their communication in intelligible form ;

the right to revoke at any time the consent given by you in relation to the purposes of the processing ;

the right to obtain access, rectification, erasure, restriction of processing and portability of Personal Data ;

the right to object to the processing at any time you wish;

the right to appeal to the competent supervisory authority, if you believe that the processing of your Personal Data is contrary to the legislation in force.

10. METHODS OF EXERCISING RIGHTS - CONTACTS OF THE DATA CONTROLLER

If you wish to exercise the aforementioned rights, or if you wish to receive further clarification regarding the processing of your Personal Data, you may write to the e-mail address e-store@ferrante.it or to the address of the registered office of the Data Controller, located in San Giovanni Teatino (CH), Via Po, 40.

11. APPLICABLE LAW

Data processing is governed by Italian law and in particular by the Code, which regulates the processing of personal data carried out by anyone who is resident or based in Italy or by means of instruments located in Italy.

The Code guarantees that the processing of personal data is carried out in compliance with the fundamental rights and freedoms, as well as the dignity of the person concerned, with particular reference to confidentiality, personal identity and the right to protection of personal data.