PRIVACY POLICY

Information statement released by Sarong S.p.A. pursuant to the provisions of Art. 13 of European
Regulation 2016/679

Whereas
1) As a result of your visits to this site, completion of forms, receipt of your requests/questions, preliminary
contacts, surveys and market research, and establishment of business relations, our company will collect
and process your personal data;
2) we specify from now on the following definitions provided by the European Regulation 2016/679, for
clarity:

“Personal data”: “any information relating to an identified or identifiable natural person (‘data subject’); an
identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to
an identifier such as a name, an identification number, location data, an online identifier or to one or more
factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that
natural person.”;
Processing: any operation or combination of operations carried out with or without the aid of automated
processes and applied to personal data or combinations of personal data, such as collection, recording,
organisation, structuring, storage, adaptation or amendment, extraction, consultation, use, communication
by transmission, dissemination or any other form of availability, comparison or interconnection, limitation,
cancellation or destruction.
All that being stated, pursuant to art. 13 European Regulation 2016/679,
we inform you that
the collection and processing of your personal data will be carried out by this company in accordance with
the following:
a) general purposes: the data will be processed to satisfy your requests/questions, for the correct
performance of bureaucratic, accounting, tax, commercial, technical tasks and for company activities that
are compulsory by law and in any case strictly inherent to the existing relationship;
b) advertising purposes – sending of newsletters: your data may also be used, subject to your free, specific
and explicit consent only, to send via e-mail our periodic newsletter, after expressing consent; you are in
any case entitled to oppose, at any time and at no expense, to the processing of your data for this purpose;
c) methods: the data shall be processed using both paper and related means or processing by
electronic/computerised/remote instruments/media, in full compliance with the regulations in force,
according to principles of lawfulness and correctness and in such a way as to safeguard your privacy;
d) optional provision: the provision of data is optional and not compulsory;
e) consequences of refusal: refusal to provide the data or complete opposition to their processing for the
purposes referred to in point a) may, however, make it impossible to meet certain requests; denial to use
the data for the purposes referred to in point b), on the other hand, will have no effect on the recognition
of benefits linked to promotions or on existing relationships;

f) subjects or categories of subjects (recipients) to whom the data may be communicated or disclosed: the
data may be communicated to third parties only to fulfil legal or contractual obligations. In any case, data
shall not be disclosed;
g) persons authorised to process data: the data will be processed only and exclusively by a limited number
of specially authorised company employees in the administrative, marketing, data processing centre and
commercial sectors;
h) automated decision-making processes (e.g. profiling): automated decision-making processes are not
operated in any way;
i) rights of the data subject: you have all the rights granted by the European Regulation 2016/679, such as
the right to request access to and rectification of your personal data, erasure of your personal data,
restriction of processing, the right to object to processing, as well as the right to data portability. You also
have the right to lodge a complaint with the Supervisory Authority;
j) transfers to third countries: any transfer of personal data to a third country outside the European Union
or to an international organisation will take place on the basis of an adequacy decision by the Commission
or, in the case of transfers pursuant to Articles 46, 47 or 49, second paragraph of the European Regulation,
on the basis of appropriate and adequate safeguards;
k) period of data retention: data will be retained for the period strictly necessary to meet the requests of
the data subject or as provided for by current legislation or any contractual clauses;
l) data controller: data controller is Sarong S.p.A., based in Reggiolo (RE), Via C. Colombo n. 18, in the
person of its pro tempore legal representative;
m) data protection officer: the officer responsible for data protection is Mr Juri Torreggiani, with office
located in Reggio Emilia, Via Piccard no. 16/G, tel. +39 0522/30.11.69, fax +39 0522/38.79.96: any request
for clarification or information may be addressed to this manager.
This information statement may be expanded, orally or in writing, with further elements and indications, to
satisfy as fully as possible your requirements in understanding the area of “Privacy” and comply with
regulatory developments.

Date: 25/01/2021
Data controller
Sarong S.p.A.