GDPR - Personal data protection
This is how your personal data will be treated and protected.

Information regarding the protection of personal data (pursuant to Legislative Decree 30.06.2003 n. 196 "Code regarding the protection of personal data").

I acknowledge that I have read the information on the processing of my data pursuant to art. 13 of Legislative Decree 196/2003 ("Privacy Code") in the text below INFORMATION PURSUANT TO ART. 13 OF LEGISLATIVE DECREE 30 JUNE 2003 N. 196 ("PRIVACY CODE")

RECITALS
This information is drawn up pursuant to art. 13 of the Privacy Code, for Nonsolocavallo da Studio Origgi srl, in relation to the personal data provided by users/customers when accessing and/or registering on the website www.nonsolocavallo.it ("Site") or carrying out of a purchase on the Site itself. Studio Origgi srl is the owner of the Site on which it operates as a provider of the registration and sales service. For the identification and implementation of the technical and organizational methods that govern the processing of personal data, Studio Origgi srl assumes the role of "Data Controller", pursuant to art. 4, paragraph 1, letter. f) of the Legislative Decree. 196/2003 ("Privacy Code")¹ of the personal data provided by users on the Site for the purposes illustrated in point 2 below.

1. Data controller
The owner of the processing of personal data is

Studio Origgi srl
with headquarters in Via Della Valle 46/a, 20841 Carate Brianza (MB)
VAT number/tax code 08102670968
REA: MB-1887970
Tel. 0362 990913
Email staff@studiooriggi.it

The complete list of Studio Origgi srl data controllers is available at the company headquarters and is provided upon request of the interested party. The rights of the interested party referred to in the art. 7 of Legislative Decree 30.06.2003 n. 196 can be exercised at any time and with the utmost simplicity with a request addressed to the data controller by registered letter to the address above.

2. Purpose of the treatment
Personal data will be processed for commercial, sales, promotional, management and statistical purposes, through processing carried out with and without the aid of electronic tools. In particular, the "Site" will process the personal data provided by users for the following purposes:
(a) to allow registration on the Site and the possibility of using the services reserved for registered users, including the possibility of tracking the shipment
(b) to allow the conclusion of the purchase contract and the correct execution of the operations connected to it, including post-sales assistance activities. Furthermore, users, even if not registered, will be able to send requests for information or clarifications on the products on sale on the Site and, to process such a request, the "Site" will require the provision of some personal data (e.g. name, surname and email address);
(c) for administrative-accounting purposes as well as to fulfill legal obligations;
(d) subject to the express consent of the user, for the sending of informative and promotional communications (including the "newsletter"), discount coupons and special offers, by Nonsolocavallo, in relation to products and services offered by itself or by third parties , by email and/or postal service (so-called "marketing" purposes).

3. Provision of data and consequences in case of failure to consent to processing
The provision of personal data is optional. However, since this processing is necessary to allow registration on the Site and the provision of services, including the online purchase service, any refusal to provide the data in question will make it impossible to register on the Site and/or conclude the transaction. online purchase contract.
The provision of data such as surname, name and email address (mandatory fields marked with *) is necessary for registration on the site and for access to your personal area. By registering on the site, the User will be able to complete the purchase process more quickly as they will no longer have to write their personal data each time, they will be able to check the progress of their order, their wish list and their Premium Card data. (if you have one), you will also be able to change your email address and password to access the site and verify the correctness of your data by modifying and/or deleting them independently. Some data (such as name, surname, address and mobile phone) are mandatory for the purposes of processing the order and refusal to provide them prevents you from receiving the ordered goods; other data (for example the landline telephone number) are optional and allow Nonsolocavallo to improve customer service and contact him for service communications related to his order.
The data relating to the date of birth allows the "Site" to recognize the birthday of customers in possession of the Premium Card and to recognize any minor users, who are explicitly asked to have the order executed by a parent or guardian. takes over. With reference to the "marketing" purpose of point 2 above, consent to the processing of personal data is optional and can be expressed by selecting a specific box, for each distinct purpose, present at the bottom of the registration form on the Site Failure to consent will not have any consequences on the possibility of registering on the Site and/or making purchases on the same and will imply the consequences described below:
- failure to consent to the processing of personal data for the purposes referred to in point 2, letter. (d) ("marketing") above, will make it impossible to receive informative and promotional communications (including the "newsletter"), discount coupons and special offers, from Nonolocavallo, in relation to products and services of the "Site" or third parties, by email and/or postal service.
The user may, in any case, revoke any consent given for the purposes described in letter (d) ("marketing") of point 2, by contacting Nonsolocavallo at the address reported in point 1 above or by removing themselves from the newsletter from the available link at the bottom of any email with promotional content sent by Nonolocavallo.

It is also specified that:

Sensitive data: To register on the Site and make a purchase, the provision of sensitive data is never required.

Credit card data: to make a payment on the Site by credit card, the user must enter the confidential credit card data (card number, holder, expiry date, security codes). Such data will be acquired by the payment service provider who will act as an independent data controller, without passing through the Nonsolocavallo - Studio Origgi srl server which, therefore, will not process such data in any way. The data will be acquired in encrypted format and according to the security requirements established by the PCI certification. The payment service uses the SSL (Secure Sockets Layer) protocol.

Navigation data: the User, accessing the Home Page of the nonsolocavallo.it website for the first time or other pages of the website itself, sees the brief information banner relating to the use of cookies, i.e. files used by browsers to record information during navigation; By continuing to browse the site, the User gives his consent to the use of cookies. The User can find all the details about the policy followed by Studio Origgi srl regarding cookies in the specific Cookie Policy on this website, through which he can deny consent to cookies.
It is possible to access the Site and view the products offered for sale without requiring the provision of any personal data. However, the computer systems and software used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified interested parties, but, also by its very nature, could, through processing or association, allow the identification of the user. This category includes the IP addresses or domain names of the computers used by users who access the Site, the addresses in URL notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, etc. This data is used to obtain anonymous statistical information on the use of the Site (such as, in particular, the number of accesses) and to check its correct functioning. This process does not involve the processing of directly identifying information. The navigation data will be acquired, in the manner indicated above, only by Nonsolocavallo.

4. Data processing methods
The data processing will mainly be carried out with the aid of electronic or automated tools, according to methods and with suitable means to guarantee the security and confidentiality of the data themselves, in compliance with the provisions of the Privacy Code. Technical, IT, organisational, logistical and procedural security measures will be adopted, so that the minimum level of data protection required by law is guaranteed, allowing access only to the people in charge of processing by the Data Controller or those responsible for the same. designated.

5. Scope of data communication
Persons specifically appointed as employees or other collaborators may become aware of the personal data to carry out the processing necessary to process the order or connected to the sending of advertising material; Third party suppliers of services strictly functional to the execution of the contractual relationship may also become aware of it, specifically the personal data provided by the user, for the purposes described in point 2 above, may be brought to the attention of or communicated to the following subjects:
• to third-party companies for carrying out administration, accounting, IT and logistical support activities;
• to companies or consultants in charge of the installation, maintenance, updating and, in general, management of Nonsolocavallo hardware and software;
• to companies appointed by Nonolocavallo to send online communications;
• to the parties responsible for repairing the products purchased in compliance with the legal guarantee of conformity;
• to all those public and/or private entities, natural and/or legal persons (legal, administrative and tax consultancy firms), if the communication is necessary or functional for the correct fulfillment of the contractual obligations undertaken in relation to the services provided through the Site , as well as the obligations deriving from the law
• to shippers and persons responsible for the delivery and/or collection of the purchased products;
• to all those subjects (including Public Authorities) who have access to the data pursuant to regulatory or administrative provisions;
• to subjects, other than those listed above, appointed as responsible or in charge of processing personal data by the Seller, for the execution of activities related to the conclusion of the purchase contract.
The updated list of data controllers and persons in charge of processing can be consulted at the headquarters of the Data Controllers.

6. Data retention
Personal data will be stored only for the time necessary to guarantee the correct provision of the services offered.
In the event of closure of the Site account on the user's initiative, the data contained therein will be retained for administrative purposes for a period not exceeding one quarter, without prejudice to any specific legal obligations on the conservation of accounting documentation or for reporting purposes. public security.
In any case, it is understood that personal data will be stored and processed for the purposes referred to in letter (d) "marketing" referred to in point 2 above, for the period of time permitted by law and by the provisions of the Guarantor for Protection of Personal Data. At the end of this period Nonolocavallo may ask the user to renew their consent to the processing of their data for these purposes or to make them anonymous and keep them solely for statistical purposes.

7. Right to access personal data
Pursuant to art. 7 of the Privacy Code (ex art. 7 of Legislative Decree 30.06.2003 n. 196), the interested party has the right to:
a) obtain without delay confirmation of the existence of personal data concerning him and the communication in an intelligible form of the same data and their origin, the purposes and methods of the processing, as well as the logic on which the processing is based;
b) obtain without delay the identification details of the owner and manager;
c) obtain without delay the cancellation, transformation into anonymous form or blocking of the data processed;
d) obtain without delay the updating and rectification or, if interested, the integration of the data;
e) obtain without delay the certification that the operations referred to in points c) and d) have been brought to the attention of those to whom they were communicated unless this proves impossible or involves the use of means manifestly disproportionate to the protected right;
f) object in whole or in part for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
g) object in whole or in part to the processing of personal data concerning him for the purposes of sending advertising and direct sales material or for carrying out market research or commercial communication.
The above rights may be exercised upon request to the Data Controller, at the contact details given in point 1 of this information notice.

1 *"owner", the natural person, the legal person, the public administration and any other body, association or organization which is responsible, even jointly with another owner, for decisions regarding the purposes, methods of processing of personal data and the tools used, including the security profile.

Carate Brianza
20/05/2018