INFORMATIVA PRIVACY & COOKIES

INFORMATION ON THE PROCESSING OF PERSONAL DATA – CUSTOMERS / SUPPLIERS

pursuant to and for the purposes of art. 13 of EU Regulation 2016/679

(General Data Protection Regulation)

Dear Customer/Supplier, pursuant to Article 13 of EU Regulation 2016/679 hereinafter “Regulation” and in relation to personal data concerning you, Our company, as data controller, following the existing contracts wishes to provide you with the following information.

1. Identification details of the data controller

The data controller is SWEET.FIT srl with registered office in via Aldo Moro, 10 – 25124 Brescia (BS) and operational headquarters at the same address.

The contact details are as follows: Telephone (+39) 349 8564266

E-mail: amministrazione@sweetfitsrl.com.

It should be noted that in consideration of the fact that the data controller is established within the European Union, the appointment of the data controller’s representative is not necessary.

2. Contact details of the data protection officer

Following verification of the applicability of the provisions of art. 37 of the Regulation, the appointment of the Data Protection Manager has been excluded, as the company does not fall into any of the contemplated cases.

3. Purpose of the processing for which the data are intended and legal basis

The treatment is aimed at carrying out the following activities:

– Fulfillment of legal and/or contractual obligations, fulfillment of uses and customs, regarding the company’s commercial activity;

– Accounting and administrative processing;

– Management of legal obligations and disputes; Fulfillments related to current legislation on health and safety at work;

– Fulfillments related to the application of the internal Management System to the company – Sending communications relating to offers and promotions – user registration for e-commerce purposes.

The legal basis of the processing consists of the following elements: contract for the acquisition/supply of goods or services, Legislative Decree 81/2008 and subsequent amendments as regards the legislation in force on occupational health and safety and the regulations related to application of the Civil Code and Penal Code. The treatment is carried out by means of operations or complexes of operations and in particular: collection, registration, organization , conservation, processing, modification, comparison, interconnection; selection, extraction, consultation, communication, blocking, cancellation and destruction; is carried out with or without the aid of electronic means; is done by the organizationof the Owner and from trusted companies, whose list is available from the Owner, who are our direct collaborators and who operate in total autonomy as separate external owners of the processing of personal data, obliged to fulfill on their own and according to a contract with Our . company to the legislation on the protection of personal data. Personal data are not subject to disclosure.

4. Legitimate interests of the Data Controller

In case treatments are carried out pursuant to art. 6, paragraph 1, letter f), they will take place exclusively for the satisfaction of the legitimate interests of the data controller.

5. Recipients of personal data

The personal data collected may be communicated to: – all subjects to whom the right to access such data is recognized by virtue of regulatory provisions; – to our collaborators in the context of their respective duties; – to all those natural and/or legal, public and/or private persons when the communication is necessary or functional to the performance of our business and in the ways and for the purposes illustrated.

6. Transfer of personal data abroad

The data controller does not intend to transfer personal data to third countries or international organizations outside the European Union.

7. Retention period of personal data

The time limit for data retention for tax purposes currently in force (10 years) is assumed as a parameter.

8. Rights of the interested party

The interested party has the right (Chapter III Rights of the interested party) to ask the data controller for access to personal data and the rectification or cancellation of the same, as well as the limitation or opposition to their treatment and data portability. To exercise these rights, reference should be made to the contact details previously mentioned.

9. Withdrawal of consent

The interested party has the right to revoke the consent expressed pursuant to art. 6, paragraph 1, letter a) and of the art. 9, paragraph 2, letter a).

10. Right to complain to the Supervisory Authority

The interested party has the right to lodge a complaint with the Supervisory Authority, which can be reached at the following addresses: Guarantor for the protection of personal data – Piazza di Monte Citorio n. 121 00186 ROME Fax: (+39) 06.69677.3785 Telephone switchboard: (+39) 06.696771 E-mail: garante@gpdp.it Certified mail: protocol@pec.gpdp.it . The references and methods for exercising the right to complain are shown on the website of the Privacy Guarantor http://www.garanteprivacy.it.

11. Communication of personal data

The communication and subsequent processing of personal data is a necessary condition for the completion of the existing contract with our. society. Failure to communicate will result in the non-applicability of the contract.

12. Automated Decision Making

The personal data collected will not be subjected to automated decision-making processes, including profiling.