Customer privacy statement

Subject: Information on the processing of personal data, pursuant to article 13 of the EU Reg. 2016/679.

The EU Regulation of 27 April 2016, no. 679 provides for the right to the protection of personal data concerning private
individuals. In compliance with this legislation, our company, which intends to process your personal data, would like to
inform you in advance, pursuant to article 13 of EU Reg. 2016/679, that this processing will be based on the principles of
lawfulness, correctness and transparency, purpose limitation, minimization of data, accuracy, limitation of conservation,
integrity and confidentiality and accountability, as well as the protection of your privacy and your rights.
Therefore, we provide you with the following information on the processing of your personal data that we intend to carry
out:

The process has the purpose of the inclusion of customer archives for regulating pre-contractual management
(estimates), contract sale/purchase of products and services, internal needs of an operational or managerial nature,
accounting, fiscal tax, civil law and related obligations, as well as commercial communications in the product sector of
reference of the company, referring to products/services similar to those already requested by the customer.

The processing will be carried out by specially appointed persons in the following manners: electronic and paper

The provision of your data is mandatory in order for you to register your invoices and for other formalities relating to
contractual relations. We invite you to omit any data that is not relevant in relation to the specific purposes for which they
are given. Failure to provide your data could result in the failure or partial execution of the contract and the
continuation of the relationship.

The persons appointed to whom your personal data (personal, accounting and fiscal data) can be communicated are
the following:

• persons appointed who are part of the administrative and commercial areas of our company;
• external parties who may carry out tax compliance, accounting obligations and information systems management on behalf of our company;
• istituti di credito per la gestione di pagamenti e incassi derivanti dall’esecuzione dei contratti;
• credit institutions for the management of payments and collections deriving from the execution of contracts;
• other subjects required by law.

The paper data collected will be duly stored for a maximum period that can be quantified in 10 years, pursuant to article 2220 c.c.

The electronic data collected will be duly stored, pursuant to article 13. c.2, lett. a), second part, of EU Reg.
2016/679, for a variable term, according to the criteria of balancing legitimate business interests (related to tax
audits, any special correspondence, such as disputes, arrears, legal aspects, periodic purchase, statistical
purposes, productive, and quality).

The possibility of the distribution of the data itself is not expected (distribution = communication to indeterminate
subjects)

The Data Controller is G.V. STAMPERIE S.P.A. with legal and operational headquarters in VIA EUROPA, 9 – 25040
MONTICELLI BRUSATI (BS).

Pursuant to article 13, par. 2, lett. b), c), d) of the EU Reg. 2016/679, by contacting the Data Controller, you may exercise
the following rights regarding the processing of personal data:

• right of access (Article 15);
• right of rectification (Article 16);
• right of cancellation (Article 17);
• right of limitation (Article 18);
• right to data portability (Article 20);
• right to opposition (Article 21);
• the right to file a complaint with a supervisory authority (Article 77);
• right to withdraw consent, in the cases provided for by article 6, par. 1, lett. a) or from article 9, par. 2, lett. a).