CONTROLLER

Amilon S.r.l.

Via Natale Battaglia - 12, Milan (MI),

telephone number +39 02 365 596 50,

[email protected]

(" Company ").

 DATA PROTECTION OFFICER (DPO)

[email protected]

PURPOSE OF THE PROCESSING

LEGAL BASIS FOR THE TREATMENT

DATA RETENTION PERIOD

Allow registration and use of the services provided by the Company.

Execution of a contract to which you are a party.

Duration of the contract and, after termination, for the ordinary limitation period of 10 years.

In the case of litigation, for the entire duration of the same, until the terms of the appeal have been exhausted.

Fulfil obligations under applicable national and supranational regulations and legislation.

the need to comply with legal obligations

If necessary, to ascertain, exercise or defend the rights of the Holder in the courts

Legitimate interest

Generic marketing: by way of example, sending by the Company - by automated means of contact (such as direct messaging services) - of promotional and commercial communications relating to services/products offered by the Company itself or by third parties; as well as carrying out market studies and statistical analyses

Consent (optional and revocable at any time)

Until consent is revoked

Profiled marketing: analysis of your preferences, habits, behaviours and interests derived from the data you provide directly in combination with the data related to your navigation on our website as an authenticated user (and in particular from online clicks on certain articles/sections) collected through cookies, in order to create profiles that allow the Company to offer you promotional messages and/or online content that are more in line with your interests. [1] , through automated contact methods (such as direct messaging services) and/or online advertising banners.

Consent (optional and revocable at any time)

Until consent is revoked

Communication of data in aggregate form to third parties for profiled marketing purposes. Your profile (created as indicated above, but without the contact data, such as name, surname, email and telephone) will be given to our third party partners belonging to the mercelogic categories indicated at the following link who will use it in a similar way to offer you promotional messages and/or online content more in line with your interests.

Consent (optional and revocable at any time)

Until consent is revoked

Once the above mentioned storage terms have expired, the Data will be destroyed, deleted or made anonymous, compatibly with the technical deletion and backup procedures.

COMPULSORINESS OF THE CONFERMENT OF DATA

The provision of the data highlighted with an asterisk (*) in the registration form is mandatory for the conclusion and continuation of the contract; the refusal to provide this data does not allow, therefore, the registration and use of services etc..

DATA RECIPIENTS

The data may be processed by external parties operating as data controllers such as, by way of example, supervisory and control authorities and bodies and, in general, public or private parties entitled to request the data, as well as, with prior consent, third party partners belonging to the above categories.

The data may also be processed, on behalf of the Company, by external parties designated as data processors , to whom appropriate operating instructions are given. These subjects are essentially included in the following categories:

(a) companies offering e-mail services;

(b) companies offering profiling, data management and AdServing services;

(c) companies offering website maintenance services;

(d) companies offering administrative and customer care services;

(e) companies offering support in carrying out market studies.

SUBJECTS AUTHORIZED TO THE TREATMENT

The data may be processed by the employees of the company departments responsible for the pursuit of the purposes indicated above, who have been expressly authorised to do so and who have received adequate operating instructions.

RIGHTS OF THE DATA SUBJECT - COMPLAINT TO THE SUPERVISORY AUTHORITY

By contacting the Company via e-mail at the privacy [email protected], the interested parties may ask the owner to access the data concerning them, their cancellation, the correction of inaccurate data, the integration of incomplete data, the limitation of processing in the cases provided for in art. 18 GDPR [2] as well as opposition to the processing, on grounds related to its particular situation, in cases of legitimate interest of the controller.

Furthermore, where the processing is based on consent or contract and is carried out by automated means, data subjects have the right to receive the data in a structured, commonly used and machine-readable format and, if technically feasible, to transmit them to another data controller without hindrance.

Data subjects have the right to revoke the consent given at any time for general marketing and/or profiled marketing and/or communication to third parties for profiled marketing purposes, as well as to object to the processing of data for marketing purposes,including profiling related to direct marketing.

The persons concerned shall have the right to lodge a complaint with the competent supervisory authority in the Member State where they habitually reside or work or in the State where the alleged infringement has occurred.