2021 AT THE HEAD

Kask S.p.a., in compliance to Art. 13 of the European Data Protection Regulation RE 679/16 also called General Data Protection Regulation (hereinafter "GDPR") and other applicable legal provisions concerning the protection of personal data and data security, informs you that the data collected which the concern may be the subject of treatment in compliance with the aforementioned regulations.

Nature and purpose of the processing
A1) pre-contractual and preliminary information regarding the stipulation of the contract;
A2) contractual execution and its administrative management;
A3) market analysis and statistics, sending advertising, promotional or information material on the group's activities, including newsletters, checking customer satisfaction;
As part of the commercial relationship, not all the information given or collected is mandatory, but also the optional ones (A3) are indispensable and useful for maintaining and developing the relationship over time.

Treatment modalities
The data will be processed lawfully and correctly and in any case in compliance with the aforementioned law, through the use of instruments that guarantee security and confidentiality and can also be performed through automated tools to store, manage and transmit data themselves.
The treatment will be performed mainly by the internal organization of the company under the direction and control of the Data Controller and, for purposes previously indicated, also by third parties.
The data will be stored in a form that allows the identification of the data subject for a period of time not exceeding that necessary for the purposes for which the data is collected and processed.

Consequences of refusal to answer
Except in the case of legal or contract obligations (A1 - A2 of the purposes), the lack of consent may determine, for the company, the impossibility to start the processing / communication operations of its data for the purposes indicated in the purpose A3.

Categories of subjects to whom the data can be communicated or who can learn about them
Without prejudice to the communications made in fulfillment of a legal obligation, regulation or legislation, the communication (even by simple consultation or making available) of the data concerning you can intervene with the following subjects:

• natural or legal persons who provide specific services;
• data processing, after-sales assistance, logistic services, customer satisfaction surveys, consultancy, organization of fairs and conferences;
• intermediaries or commercial partners;
• banks and credit institutions, financial intermediation companies, natural or legal persons responsible for credit recovery, certification of financial statements and quality systems.

To the extent that the communication concerns data other than those in the public domain, the same must presuppose the collection of your consent. We assure you that, in any case, the cited subjects will only transfer the data that is necessary and relevant to the purposes of the processing for which they are responsible.
We also report that they may become aware of the data concerning you, the managers of company databases as well as those in charge of the company functions related to them.

Rights of the data subject
In application of RE 679/16, Articles 15, 16, 17, 18 and 20, we inform you that at any time you can request access to your personal data, their rectification, their cancellation or limitation to their treatment by contacting KASK Spa. You can also contact the supervisory authority if it considers it appropriate to lodge a complaint.

Data Controller Information
Data Controller for the processing of personal data, pursuant to the aforementioned law, is KASK S.p.A., via Firenze, 5 - 24060 - Chiuduno (BG) - Italy. Also reachable at the email address: privacy@kask.com