[Versione italiana - clicca qui]

PRIVACY NOTICE ACCORDING TO ART. 13 OF THE LEGISLATIVE DECREE 196/2003

We inform you hereby that the Legislative Decree no. 196 of June 30, 2003 (“Personal Data Protection Code”)
provides for the protection of persons and other entities regarding the processing of personal data.
In compliance with the aforesaid regulation, your personal data shall be processed following principles of fairness,
lawfulness and clarity in order to safeguard your privacy and your rights.
According to art. 13 of Legislative Decree no. 196 of June 30, 2003, we inform you as follows.

1. Purposes and methods of data processing
The personal data collected from you shall only be used to respond to an inquiry you make as well as to comply with
law provisions, contractual provisions and regulations regarding the employment and the coordinated services,
particularly:
- to be entered in our personal data base;
- to provide you with the information you request;
- to keep the accounts;
- to manage cash holdings and payments;
- to comply with an obligation imposed by a law, regulations or EU provisions.
The data controller, the data processor and the persons in charge of the processing shall carry out the data
processing by electronic and manual means and by such means the data shall be collected, registered, organized,
kept, processed, amended, selected, drawn, compared, used, linked, cancelled, removed taking care of any
protecting measure which guarantees the relevant privacy and security.

2. Nature of the collected data and consequences in case of failing to reply
The providing of your personal data is mandatory in order to fulfil your request and to comply with the provisions
regarding the employment and the coordinated services and, generally, with the legal provisions.
Any refusal to supply the data may prevent us to fulfil your request and to comply with the any agreement or law
provision.

3. Communications and spreading of personal data
In order to reach the aforesaid purposes, your personal data may be communicated:
- to individuals and entities (i.e. law, tax, administrative, labour firms, data processing centre, companies
register, Trade Union Headquarters and Labour Exchange, social insurance funds, trade unions, etc.);
- to banks in order to make and to collect payments;
- to our employee and workers in charge of the processing.
The personal data collected from you shall not be spread.

4. Data subject’s rights
At any time you are entitled to exercise your right by making a proper request to the data controller according to
art. 7 of Legislative Decree no. 196 of June 30, 2003, as hereinafter specified.
1. A data subject shall have the right to obtain confirmation as to whether or not the relevant personal data exist,
regardless of their being recorded, and communication of such data in intelligible form.
2. A data subject shall have the right to be informed:
a) of the source of the personal data;
b) of the purpose and methods of the processing;
c) of the logic applied to the processing, if the latter is carried out with the help of electronic means;
d) of the identification data concerning data controller, data processors and the representative appointed
according to art. 5, paragraph 2;
e) of the entities or categories of entity to whom or which the personal data may be communicated and who or
which may become aware of said data in their capacity as appointed representative(s) in the State’s territory, data
processor(s) or person(s) in charge of the processing.
3. A data subject shall have the right to obtain:
a) updating, amendment or, where interested, integration of the data;
b) erasure, transformation into an anonymous form or blocking of data that have been processed unlawfully,
including data whose keeping is unnecessary for the purposes for which they have been collected or subsequently
processed;
c) a certification to the effect that the operations under aforesaid letters a) and b) have been notified, as also
related to their content, to the entities to whom or which the data were communicated or spread, unless this
requirement is impossible or involves a manifestly disproportionate effort compared with the right that is to be
protected.
4. A data subject shall have the right to object, in whole or in part:
a) on rightful grounds, to the processing of personal data even though they are relevant to the purpose of the
collection;
b) to the processing of personal data where it is carried out for the purpose of sending advertising materials or direct
sale or for the performance of market or commercial communication surveys.
The rights referred to in article 7 may be exercised by making a request to the data controller or processor without
any formality, also by means of a person in charge of the processing. A suitable response shall be provided to said
request without delay .
The request shall be made to the data controller or processor also by registered letter, fax or e-mail.

5. Data controller
The data controller is MIRAGLIO SPA, registered office in Rivoli(TO), Italy, Corso P.Levi , 35/F.