Fratelli Magro Srl

Information on the processing of personal data pursuant to articles 13-14 of EU Regulation 2016/679

Data Subjects: Website visitors.

Fratelli Magro Srl, as the Data Controller of your personal data, in accordance with the provisions of EU Regulation 2016/679, hereinafter 'GDPR,' hereby informs you that the aforementioned regulation provides for the protection of data subjects concerning the processing of personal data, and such processing will be based on the principles of fairness, lawfulness, transparency, and the protection of your privacy and rights.

Your personal data will be processed in accordance with the legislative provisions of the above-mentioned regulation and the confidentiality obligations provided therein.

Purposes and legal basis of processing: In particular, your data will be used for the following purposes related to the execution of contractual or pre-contractual obligations:

• Technical and functional access to the website; no data is retained after the browser is closed.

Processing methods: Your personal data may be processed in the following ways:

• Temporary processing in anonymous form.

Each processing operation will be carried out in compliance with the methods set out in Articles 6 and 32 of the GDPR and by adopting the appropriate security measures as required.

Disclosure: Your personal data will not be disclosed in any way.

Your personal data may also be transferred, limited to the purposes mentioned above, to the following countries:

• EU countries.

Retention period: We inform you that, in accordance with the principles of lawfulness, purpose limitation, and data minimization, as stated in Article 5 of the GDPR, the retention period of your personal data is:

• Set for a period not exceeding the time required to provide the services offered.

Controller: The Data Controller, pursuant to the Law, is Fratelli Magro Srl (Via Valle Maggiore 13, 23030 Villa di Tirano (SO); Email: info@fratellimagro.it; Phone: 0342.795147; VAT: 00953700143), represented by its legal representative pro tempore.

You have the right to obtain from the Data Controller the erasure (right to be forgotten), restriction, updating, rectification, portability, and objection to the processing of your personal data, as well as the exercise of all the rights provided for in Articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR.

EU Regulation 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 - Data Subject Rights

1. The data subject has the right to obtain confirmation as to whether or not personal data concerning them exist, even if not yet recorded, and their communication in an intelligible form, as well as the right to lodge a complaint with the supervisory authority.

2. The data subject has the right to obtain information about:

   1. The origin of personal data;

   2. The purposes and methods of processing:

   3. The logic applied in case of processing carried out with the aid of electronic tools;

   4. The identification details of the data controller, data processors, and the designated representative pursuant to Article 5, paragraph 2;

   5. The subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it as designated representatives in the territory of the State, data processors, or persons in charge.

3. The data subject has the right to obtain:

   1. Updating, rectification, or, when interested, integration of data;

   2. Deletion, transformation into anonymous form, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;

   3. Certification that the operations as per letters a) and b) have been notified, as also related to their contents, to those to whom the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared to the right being protected;

   4. Data portability.

4. The data subject has the right to object, in whole or in part:

   1. For legitimate reasons, to the processing of personal data concerning them, even if relevant to the purpose of the collection;
   2. To the processing of personal data concerning them for the purpose of sending advertising materials or direct selling or for the performance of market research or commercial communication.