INFORMATION PURSUANT TO ART. 13 OF LEGISLATIVE DECREE N. 196/2003 and EU Regulation no. 679/2016 Winven Italia srl (with headquarters in Milan, Via V. Monti 9, VAT number 12988440967 (hereinafter, Owner), as data controller, informs, pursuant to art. 13 of Legislative Decree 196/03 and art. 13 of EU Regulation no. 679/2016 (hereinafter, "GDPR") that the data will be processed in the following ways and purposes. 1. Object of the processing The data being processed are personal, identifying and non-sensitive data (in particular: name, surname, tax code, VAT number, email, telephone number - hereinafter, "personal data" or also "data"), provided directly by the subject interested and collected during the acquisition of the elements necessary for the execution of the obligations deriving from purchase orders for products and/or services. 2. Purpose of the processing Your data is processed for the following purposes: 1. Administrative management and fulfillment of contractual obligations; 2. Keeping of mandatory tax and accounting records, as well as purposes necessary to fulfill an obligation established by law, by a regulation or by community legislation or legislation relating to public security; 3. Statistical processing of turnover volumes and related market analysis; 4. In case of subscription to the newsletter: sending of information on future promotions, initiatives and announcements of new services from the Owner similar to those you have already used, subject to the possibility of cancellation. 3. Methods of processing The processing is carried out using electronic and paper tools and the data controller constantly takes measures to guarantee the security of your data. The Owner will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no longer than 10 years from the termination of the contractual relationship. 4. Access to data Your data may be made accessible for the purposes indicated above to third parties and/or companies, such as collaborators, consultants or freelancers who carry out work on behalf of the Owner. 5. Data communication Without the need for your express consent (ex art. 24 letter a), b), d) Privacy Code and art. 6 lett. b) and c) GDPR, the Owner may communicate your data for the purposes referred to in the art. 2 to Judicial Authorities, to insurance companies for the provision of insurance services, as well as to all those subjects to whom communication is mandatory by law. These subjects will process the data in their capacity as independent data controllers. Your data will not be disclosed. 6. Data Transfer The management and storage of personal data will take place on servers located within the European Union of the Owner and/or third-party companies appointed and duly appointed as Data Processors. The servers are currently located in Italy. In any case, it is understood that the Owner, if necessary, will have the right to move the location of the servers to Italy and/or the European Union and/or non-EU countries. In this case, the Owner hereby ensures that the transfer of non-EU data will take place in compliance with the applicable legal provisions. 7. Rights of the data subject In your capacity as a data subject, you have the rights referred to in the art. 7 Privacy Code and art. 15 GDPR and precisely the rights to: 1. obtain confirmation of the existence or otherwise of personal data concerning him, even if not yet registered, and their communication in an intelligible form. 2. obtain indication of: a)the origin of the personal data; b) the purposes and methods of processing; c) of the logic applied in case of processing carried out with the aid of electronic instruments; d) the identification details of the Owner, of those responsible pursuant to art. 5, paragraph 2, Privacy Code and art. 3, paragraph 1, GDPR; e) of the subjects and/or third-party companies to whom the personal data may be communicated or who may become aware of it. 3. obtain: a)updating, rectification or, when interested, integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this requirement is proves impossible or involves the use of means that are manifestly disproportionate to the protected right. 4. object, in whole or in part: a) for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning him for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communication. 8. Method of exercising rights You can exercise your rights at any time by sending a registered letter with return receipt. to Winven Italia srl, with headquarters in 20123 Milan (MI), Via V. Monti 9. 9. Owner and Manager The data controller is Winven Italia Srl. The updated list of managers is kept at the headquarters of the data controller. Starting from the signing of this information document, consent to the processing of the data provided will be deemed to have been given, unless express expression of dissent is to be sent in writing.