PRIVACY POLICY INFORMATION FOR THE

PROCESSING OF PERSONAL DATA

DATA CONTROLLER

Artex S.p.a. con sede in Via Monte Asolon, 90 - 36022 San Zeno di Cassola (VI) – Tel. 0424/570572 – Fax: 0424/570812 - Numero R.E.A. VI 110777 - Partita IVA 00228550240 – Web: www.artex.it – E-mail: info@artex.it

 FINALITY AND MODALITIES

Pursuant to Article 13 of GDPR 679-2016 defined as the "General Data Protection Regulation" we inform you that the processing of personal data for the provision of services and services, it is aimed solely at executing contractual obligations and fulfilling your specific requests, as well as to comply with regulatory obligations, in particular accounting and tax obligations, as well as to provide you with commercial information about our services, will take place through the manager identified by the Data Controller with the use of procedures also computerized, in the ways and within the limits necessary to pursue the aforementioned purposes. The data provided will be processed in compliance with the aforementioned rule, responding to the obligations of confidentiality and lawfulness to which we have been inspired and for the time strictly necessary; the data will not be disseminated. Your data, for strictly professional reasons and in order to best carry out our service, may be communicated to:

• Our authorized persons to carry out treatments.
• Any certified platforms for sending newsletters or communications regarding services and services.
• Credit and/or financial institutions and transaction management platforms.
• Our external collaborators identified and designated by us.
• Consultants for accounting or tax needs.

Consent is not required when processing:

(a) it is necessary to fulfil an obligation laid down by law, regulation or Community legislation;

(b) it is necessary to carry out obligations arising from a contract to which the person concerned is a party or to comply, before the conclusion of the contract, with specific requests from the data subject;

1. c) concerns data from public registers, lists, acts or documents that anyone can know, without prejudice to the limits and modalities that laws, regulations or Community legislation establish for the knowability and publicity of data.

 APPOINTMENT OF THE DATA PROTECTION OFFICER

The Data Protection Officer has not designated the Data Protection Officer (RPD) if you use the English acronym "Data Protection Officer", a guarantee figure introduced by Art. 37 of the European Regulation), as the type of data and the method of processing doesn’t make it necessary.

COOKIES

For the use of so-so-good session cookies, please refer to the specific information.

 RIGHTS OF DATA SUBJECTS

Interested parties have the right to obtain from the Guarantor, in the cases provided for, access to personal data and the rectification or deletion of the same or the limitation of the processing that concerns them or to oppose the processing (Art. 15 and ss. of the Regulation).

 RIGHT OF COMPLAINT

Interested parties who believe that the processing of personal data referred to them carried out through this site takes place in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as required by art. 77 of the Rules of Procedure itself, or to bring the matter before the appropriate courts (Article 79 of the Rules of Procedure).

Below are in full the articles relating to the rights of the data subject:

Art.15 Right of access of the data subject

1.The data subject has the right to obtain confirmation from the data controller whether or not personal data concerning him or her is being processed and in this case to obtain access to personal data and the following information: a) the purposes of the processing; (b) the categories of personal data in question; (c) the recipients or categories of recipients to whom personal data have been or will be disclosed, in particular if they are recipients of third countries or international organisations; (d) where possible, the expected retention period of personal data or, if this is not possible, the criteria used to determine that period; (c) the existence of the right of the data subject to ask the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to object to their processing; (f) the right to lodge a complaint with a supervisory authority; (g) where the data are not collected from the data subject, all available information on their origin; (h) the existence of an automated decision-making process, including the profiling referred to in Article 22(1) and (4), and, at least in such cases, significant information on the logic used and the expected importance and consequences of such processing for the data subject. 2.Where personal data is transferred to a third country or an international organisation, the data subject shall have the right to be informed of the existence of adequate guarantees within the meaning of Article 46 relating to the transfer. 3.Il data controller provides a copy of the personal data being processed. In the case of further copies requested by the data subject, the data controller may charge a reasonable charge based on administrative costs. If the person concerned submits the request by electronic means, and unless otherwise indicated by the person concerned, the information shall be provided in a common electronic format. 4.Il right to obtain a copy referred to in paragraph 3 shall not harm the rights and freedoms of others.

Art.16 Correction and cancellation Right of rectification

The data subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning him without unjustified delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration.

Art.17 Right to be cancelled ('right to be forgotten')

1.The data subject has the right to obtain from the data controller the deletion of personal data concerning him without unjustified delay and the data controller has the obligation to delete personal data without undue delay, if there is one of the following reasons: a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; 4.5.2016 L 119/43 Official Journal of the European Union EN b) the person concerned withdraws the consent on which the processing is based in accordance with Article 6(1)(a) or Article 9(2)(a), and if there is no other legal basis for processing; (c) the person concerned objects to processing within the meaning of Article 21(1), and there is no prevailing legitimate reason for processing, or opposes processing within the meaning of Article 21(2); d) personal data has been illegally processed; (c) personal data must be deleted in order to fulfil a legal obligation under Union or Member State law to which the data controller is subject; (f) personal data have been collected in relation to the provision of information society services referred to in Article 8(1). 2.Il data controller, if you have made personal data public and is obliged, pursuant to paragraph 1, to delete it, taking into account the available technology and the costs of implementation, take reasonable measures, including technical measures, to inform the data controllers that they are processing the personal data of the data subject's request to delete any link, copy or reproduction of your personal data. 3.Paragraphs 1 and 2 shall not apply to the extent that processing is necessary: (b) for the performance of a legal obligation requiring the processing provided for by Union or Member State law to which the data controller is subject or for the performance of a task carried out in the public interest or in the exercise of public authority by the data controller; (c) for reasons of public interest in the field of public health in accordance with Articles 9 (2) (h) and (i) and 9 (3); (d) for the purposes of closure in the public interest, scientific or historical research or for statistical purposes in accordance with Article 89 (1), in so far as the right referred to in paragraph 1 is likely to render impossible or seriously affect the attainment of the objectives of such processing; or (c) for the establishment, exercise or defence of a right in court.

Art.18 Right of limitation of processing

1.The data subject has the right to obtain from the data controller the limitation of the processing when one of the following hypotheses occurs: a) the data subject disputes the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data; b) the processing is unlawful and the data subject opposes the deletion of personal data and instead requests that its use be limited; (c) although the data controller no longer needs it for the purposes of processing, personal data are necessary for the data subject for the establishment, exercise or defence of a right in court; (d) the person concerned has objected to the processing in accordance with Article 21(1), pending verification of the possible prevalence of the legitimate reasons of the data controller over those of the data subject. 2.Se processing is limited in accordance with paragraph 1, such personal data shall be processed, except for storage, only with the consent of the person concerned or for the establishment, exercise or defence of a right in court or to protect the rights of another natural or legal person or for reasons of significant public interest of the Union or of a Member State. 4.5.2016 L 119/44 Official Journal of the European Union EN 3.The person concerned who has obtained the limitation of processing pursuant to paragraph 1 shall be informed by the data controller before the limitation is lifted.

Art.19 Obligation to notify in case of rectification or deletion of personal data or limitation of processing

The data controller shall inform each of the addressees to whom personal data have been transmitted of any adjustments or cancellations or limitations of processing made in accordance with Articles 16, 17(1) and 18, unless this proves impossible or involves a disproportionate effort. The data controller shall notify the person concerned of such recipients if the data subject so requests.

Art.20 Right to data portability

1.The data subject has the right to receive in a structured format, common use and readable by automatic device the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without hindrance by the data controller to whom he has provided them if: , paragraph 1 (a), or Article 9(2)(a) or a contract within the meaning of Article 6 (1) (b); and b) the processing is carried out by automated means. 2.In exercising his rights with regard to data portability in accordance with paragraph 1, the data subject shall have the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible. 3.The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. This right shall not apply to the treatment necessary for the performance of a task in the public interest or connected with the exercise of public authority by the data controller. 4.Il right referred to in paragraph 1 shall not be a violation of the rights and freedoms of others.

Right of objection and automated decision-making relating to natural persons

Art.21 Right of objection

1.The data subject shall have the right to object at any time, for reasons connected with his particular situation, to the processing of personal data concerning him within the meaning of Article 6(1)(c) or (f), including profiling on the basis of those provisions. The data controller shall refrain from further processing personal data unless he proves the existence of binding legitimate reasons for processing which take precedence over the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of a right in court. 2.If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him carried out for these purposes, including profiling to the extent that it is connected to such direct marketing. 3.If the data subject objects to processing for direct marketing purposes, personal data is no longer subject to processing for these purposes. 4.5.2016 L 119/45 Official Journal of the European Union EN 4.Il law referred to in paragraphs 1 and 2 shall be explicitly brought to the attention of the person concerned and shall be presented clearly and separately from any other information at the latest at the time of first communication with the person concerned. 5.In the context of the use of information society services and without prejudice to Directive 2002/58/EC, the person concerned may exercise his right of objection by automated means using technical specifications. 6.Where personal data are processed for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1), the data subject shall, for reasons connected with his particular situation, have the right to object to the processing of personal data concerning him, unless the processing is necessary for the performance of a task in the public interest.