Information on article 13 of the personal data protection Law (Legislative Decree 196/2003) and request for your consent to handle your data. Dear Customer, the privacy protection policy of La Porta del Cuore concerns collection, use and divulging of any personal data acquired by La Porta del Cuore during any interaction between customer and La Porta del Cuore. itself, like when a person visits our website, buys La Porta del Cuore services or calls us for sales or assistance. All procedures are based on the principles of correctness, legitimacy and clarity and to safeguard the confidentiality and rights of the owners of the data itself. 1. For this purpose, we are hereby providing you with the information foreseen by article 13 of Legislative Decree 196/2003 and we kindly request that you consent to your personal data being handled as specified below for the following purposes: a. to manage your request for information; to be able to provide you with all answers needed b. to file data in order to keep your reference to guarantee adequate efficiency if there is any subsequent contact re the request itself 2. Conferring your data is facultative; however, non, partial or inexact conferring could mean that we are not able to supply you the services requested. 3. As customers or possible customers, data being handled is generally of a common nature, basically personal identification data. if you should provide any data of a sensitive nature thus needing special protection in fields that do not foresee a specific indication, pursuant to article 4 letter d) of Legislative Decree 196/2003, we hereby inform you that said data will be handled in compliance with Privacy Law indications. 4. Data will be handled manually (e.g. on paper) and/or using computer and telematic tools, applying data organisation and processing logics, also for traffic, linked to the above indicated purpose and guaranteeing the safety and confidentiality of said data and communications pursuant to the laws in force on the subject. 5. We would like to specify that our organisation takes the necessary organisational, physical and logical measures to guarantee data safety, with special reference to what is foreseen by enclosure B to Presidential Decree 196/2003 – Technical regulations re minimum safety precautions. 6.Your personal data could be handled by third parties, with registered offices in Italy and/or abroad, to which our company assigns certain activities, either fully or partially, to supply the above mentioned services. Said third parties and any assignees will be given specific operating instructions with special reference to adoption of minimum safety measures to guarantee data safety and confidentiality. The above mentioned third parties mainly include the following categories: Credit collection Companies, Companies processing traffic data for invoicing purposes, Companies charged with printing and sending invoices to customers, Consultancy Companies, Credit transfer Companies, Agents and Procurers, Franchisees, Technological Service suppliers, Content Providers. 7. You can access the data concerning you at any time and exercise the other rights foreseen by art. 7 of Legislative Decree 196/2003. In the same way you can request to know the origin of said data, have it corrected, updated or integrated if inexact or incomplete, or request cancellation or blocking of data handled in violation to the law; or oppose it being used for legitimate reasons to be motivated in your request. 8. To exercise said rights, please contact the data treatment owner: La Porta del Cuore

9. Your personal data will also be handled for the following purposes if you consent and until you revoke said consent: a. to process surveys and statistical and market research in an anonymous manner; b. to send advertising, information and commercial material by post, email and/or phone channels; c. to carry out direct or indirect sales and placement activities; d. to carry out customer satisfaction surveys on quality of service supplied (also through third parties). You can revoke the consent given for said purposes at any time by contacting the treatment owner indicated in point 8 above. Consent for point 9 is not obligatory; if you should not consent, your data will only be handled for the purposes given in point 1 above.