For the purposes envisaged by EU Regulation no. 2016/679 on the protection of individuals with regard to the processing of personal data, I hereby inform you that the personal data provided and acquired by you will be processed in compliance with the regulations envisaged by the aforementioned Regulation in respect of the rights and obligations arising therefrom and that:

a) PURPOSE OF THE PROCESSING - The purpose of the processing is the correct and complete execution of the obligations undertaken between the parties. Your data will also be processed in order to: fulfil the obligations provided for in tax and accounting matters; comply with the obligations imposed and provided for by the regulations in force.

Personal data may be processed by means of both hard copy and computerised archives (including portable devices) and processed in the manner strictly necessary to fulfil the above-mentioned purposes, as well as for the dissemination, of data relating to judgments and other jurisdictional measures, for the purposes of legal information, or documentation, study and research, to assert or defend a right, even by a third party, in legal proceedings as well as in administrative proceedings or arbitration, mediation and conciliation procedures in cases provided for by laws, European Union legislation, regulations or collective agreements, provided that the right to be asserted or defended is of equal rank to that of the data subject and the data are processed exclusively for that purpose and for the period strictly necessary for its pursuance; for the exercise of the right of access to data and administrative documents, within the limits of what is provided for by the relevant laws and regulations; to search for and identify elements in favour of the data subject to be used for the sole purpose of exercising the right to evidence, for the processing of personal data carried out for the purpose of carrying out defensive investigations' (Garante's resolution no. 60 of 6 November 2008, G. U. 24 November 2008, no. 275) which constitute essential conditions for the lawfulness and fairness of the processing of personal data carried out also by lawyers, within the scope of the performance of their professional duties pursuant to Art. 12(3) of the Code;

b) METHODS OF PERSONAL DATA PROCESSING - The processing is carried out through operations, performed with or without the aid of electronic instruments and consists of the collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use interconnection, profiling, commercial promotion, blocking, communication, cancellation and destruction of data. The processing is carried out by the data controller and by persons expressly authorised by the data controller.

c) PROVISION OF DATA AND REFUSAL - The provision of common, sensitive and judicial personal data is necessary for the purposes of carrying out the activities referred to in point a) and refusal on the part of the data subject to provide personal data will make it impossible to carry out the activities referred to in point a). Processing is optional for the processing referred to in point B.

d) DATA COMMUNICATION - Personal data may come to the knowledge of the persons in charge of processing and may be communicated for the purposes set forth in point a) to external collaborators, local police authorities and judicial authorities, and in general to all subjects whose communication is necessary for the proper performance of professional activities.

e) TRANSFER OF DATA ABROAD - Personal data may be transferred to countries of the European Union or to countries outside the European Union or to an international organisation, within the scope of the purposes set forth in points a) and b). The data subject will be informed whether or not an adequacy decision of the EU Commission exists. The data will be disclosed to sites outside the EU space with verification of compliance with the conditions of the Privacy Shield concluded between the US and the EU. For the purposes mentioned above, personal data are subject to dissemination.

f) DATA STORAGE - The data are kept for the period necessary for the performance of the activity and in any case not longer than ten years

g) DATA CONTROLLER - The data controller is Mr. LOITE S.r.l.

h) RIGHTS OF THE DATA SUBJECT - The data subject has the right

- to access, rectification, erasure, restriction and opposition to the processing of data

- to obtain without hindrance from the data controller the data in a structured, commonly used and machine-readable format for transmission to another data controller

- to withdraw consent to the processing, without prejudice to the lawfulness of the processing based on the consent obtained before revocation

- to lodge a complaint with the Data Protection Authority

The exercise of the aforementioned rights may be exercised by means of written communication to be sent by PEC to the address or by registered letter A/R to the address LOITE S.r.l., via del Casello 7 - 40067 Pianoro (BO).

Legal basis of the processing: your personal data are processed lawfully, where the processing: is necessary for the execution of a mandate, of a contract to which you are a party or for the execution of pre-contractual measures adopted upon request; is necessary to fulfil a legal obligation; is based on express consent.

G.D.P.R. - LOITE S.r.l.