Retail Customer Experience

LEGISLATIVE DECREE 196/2003 "Personal Data Protection Code" INFORMATION ON THE HANDLING OF PERSONAL DATA The Legislative Decree of 30th June 2003, no. 196 introduced, with effect from 1st January 2004, the new Code concerning the protection of personal data (the "Code"). The Code states, in particular, that the person concerned (hereinafter referred to as "the person concerned") must be informed in advance of the use of the data of interest and that the processing of personal data is permitted only with the express consent of the person concerned, except in the cases provided for by law, governed by Article 24, in particular in points b), required to satisfy the obligations arising from a contract of which the party to fulfill, prior to the conclusion of the contract; and (e) relates to data pertaining to the pursuit of economic activities. For this purpose, and for the purposes of Article 13 of the above-mentioned regulations, TT Tecnosistemi S.p.a., located in Via Rimini, 5 - Prato, hereinafter the "Controller", provides the following disclosure. Purpose of Collection and Mode of Processing of the Data . Personal information provided by you as the person concerned (the natural person subject of the personal data collected) will be processed in accordance with applicable laws, by means of manual, computer and telematic tools, using the logics strictly related to the purposes stated, and may involve all operations provided for in Article 4, paragraph 1, letter a) of Legislative Decree No. 196/2003. In any case, all data is processed in accordance with the law and the confidentiality requirements imposed by the same. Personal data is handled as part of the normal activity of TT Tecnosistemi S.p.a. (Information Technology) and all related management and operational activities (e.g., billing, credit protection, other administrative, managerial and organisational services). In relation to the aforementioned purposes, no sensitive data relevant to the person concerned will be handled. The transfer of personal data to TT Tecnosistemi S.p.a. for the aforementioned purposes is not mandatory but it is necessary as without your data, we may not be able to provide you with all or part of the services mentioned. In addition, solely for the above purposes and always limited to the strictness of the specific relationship between you and our Company, the data may be communicated to the subjects or categories of subjects listed below:

• Public entities, for inspection and control activities expressly delegated to them by the Law or that they are institutionally responsible for;
• Companies that perform auditing activities for accounting and payroll management on our behalf. Information on any changes that may occur in the future will be available at our offices.

We kindly ask you to promptly inform us of any changes in your personal data so that we can comply with Article 11 (c) of the aforesaid law, which requires that the collected data be accurate and, therefore, updated. In TT Tecnosistemi S.p.a., data is handled by employees within their respective functions and in accordance with the instructions received, always and only for the specific purposes stated in this Disclosure. The same applies to the aforementioned third parties to whom the data is communicated. For some activities, we use trusted parties to carry out, on our behalf, tasks of a technical or organisational nature. The same is true for the third parties mentioned above, to whom the data i communicated. Rights of the person concerned. You have the right to know, at any time, what data on you is held by the Controller (that is to say, at our Company or by the aforementioned subjects to whom we communicate the data), as well as inquire about how the data is used. You also have the right to update, supplement, rectify or delete the data, to ask for it to be blocked, and to prohibit the processing of your data. To exercise your rights, as well as for more detailed information on the subjects or categories of persons to whom the data is communicated or who is acquainted with it as persons responsible, you may contact Paolo Aloia, (+39 0574/44741; tecnosistemi@tecnosistemi.com). At any time, you can exercise your rights via the Data Controller in accordance with Article 7 of Legislative Decree no.196/2003 Data Holder and Controller: TT Tecnosistemi S.p.a., as legally represented by Mr. Riccardo Bruschi, who is also responsible for the processing of personal data. The constantly-updated list of staff members who process the data, as designated by our Company, is available at our operating offices in Prato.