We wish to inform you about the requirements of article 13 of Law Decree n.196/2003, which provides for the protection of personal data for people and subjects. In accordance to this law, data will be:

used in a lawful and proper manner;

- collected and recorded for lawful, clearly stated and well-defined goals;

- corrected and updated, if necessary, following information received from you;

- pertinent, complete and not extending beyond the requirements of the data protection act;

thus, protecting your privacy and your rights.

In accordance with article 13 of the above-mentioned law, we wish to inform you of the following.

The personal data held by us is collected directly from the customer following an offer and/or during a contractual agreement or an offer to supply goods. Data may also be collected by third parties, for example, obtained by external companies for purposes of market research or advertising, or from other customers or suppliers.

The information thus received is then manually processed or processed via computers in order to:

fulfil legal requirements for civil, fiscal, accountancy regulations, certification of quality of service, the management of administrative operations related to agreement and contractual obligations, as well as to satisfy norms requested by legally authorized parties and by bodies acting as controllers and inspectors for such operations.

supply information of future initiatives and to announce new services.

We inform you that the personal data collected from you or acquired during the contractual agreement will be passed on to subjects, listed below, whose activities are directly connected and are fundamental for the operational functioning of the company:

a) to financial administrators, pension and social security authorities, if necessary, to police authorities;

b) to transporters and other bodies charged with supplying the goods;

c) to companies or bodies for fraud and credit recovery control;

d) to banks and credit institutions within the financial management of the company;

e) to insurance companies;

f) to subjects charged with auditing accounts and administrative, fiscal and contractual consultants.

The personal data supplied by you may also be passed on to the company Casa Editrice Mani di Fata S.r.l. and to other companies within our group for management coordination, also abroad, within Eu and non-EU areas.

Your data will, nevertheless, not be freely divulged.

We would like to stress that the handling of data for the objectives outlined in a) is compulsory and essential for the implementation of the mandate endowed upon us whereas it is optional in relation to the objectives outlined in b), and, therefore, there will be no consequences in case of your refusal, with the exception of our inability to inform you of any new developments on offer.

We assure you that data processing whether using electronic or other means will nevertheless be carried out in a manner as to guarantee security and privacy. It may involve one or more of the following:

collection, recording, organisation, preservation, processing, modification, sorting, comparison, use, interconnection, blockage, communication, cancellation, destruction.<br>

The owner of the data processing title is the company CANETTA S.r.l. based in Milan in Via Vettabbia, 7, which will use the information for the objectives mentioned above and towards whom you will be able to exercise your rights outlined in article 7 of Law Decree n. 196/2003, integral text attached.

Any further information can be obtained directly from our company.

We also wish to inform you that, unless otherwise outlined in writing, we consider this to be a letter of acceptance within the limits stated above.

CANETTA S.r.l.

Art. 7 (Right of access to personal and other rights)

1. The interested party has the right to request confirmation of the existence of personal data, even if not yet recorded and its communication in an intelligible format.

2. The interested party has the right to obtain details of:

a) the provenance of personal data;

b) of the purpose and modality of the data processing;

c) of the logic used in case of electronic processing;

d) of the details of the holders, of the responsible parties and of the representatives as outlined in article 5 comma 2;

e) of the subjects and categories of subjects to whom the personal data can be divulged or may learn about it as legal representatives within the State.

3. The interested party has the right to obtain:

a) an update, a modification and, if necessary, an integration of data;

b) the cancellation, anonymous transformation or the blockage of the data processed in violation of the law, also when the preservation of the data collected and processed is unnecessary;

c) the confirmation of the operating procedures mentioned in a) and b) above have been highlighted, also with regard to content to those subjects to whom the data has been communicated or divulged, except when this is impossible or when this would require disproportionate efforts in relation to the rights concerned.

4. the interested party retains the right to object, wholly or in part:

a) for legitimate reasons regarding the processing of the data which concerns him or her, even when pertinent to the purpose of data collection;

b) to the processing of data which concerns him or her to be ultimately used in advertising material or in direct sales or for the completion of market research or for commercial information.