Information on personal data processing for Newsletter and Contact

In this document, we inform you with regard to the characteristics of the processing of your personal data carried out by Fabrick S.p.A. (hereinafter referred to as the "Company") to respond to your requests, send you the Fabrick newsletter, and contact you to offer our products and services. In particular, information is provided concerning the following:

1. Who is the Data Controller?
2. How can I contact the Data Protection Officer?
3. What data is or can be processed and what are the data sources?
4. For what purposes are the data processed and on what legal basis?
5. To whom can the data be disclosed?
6. Why might the Company share your data with Axerve S.p.A.?
7. Can data be transferred outside the European Economic Area?
8. How long are the data retained?
9. What are your rights?

1) Who is the Data Controller?

The Data Controller of your personal data is Fabrick S.p.A. (hereinafter referred to as the "Owner"), with registered office in Italy, Biella (BI) - 13900, Piazza Gaudenzio Sella, 1.

2) How can I contact the Data Protection Officer?

The Data Protection Officer (hereinafter also referred to as "DPO - Data Protection Officer") can be contacted at the following addresses:

• Fabrick S.p.A. postal address: Piazza Gaudenzio Sella, 1, 13900, Biella, Italy - DPO;
• E-mail address: privacy@fabrick.com

3) What data is or can be processed and what are the data sources?

The personal data that can be processed falls into the following categories:

• identification and socio-demographic data (such as name, surname, data regarding employment/profession, company);
• contact details (such as telephone number, e-mail address).
• contract data (such as: client identification number, company name, VAT number).

The aforementioned data is directly provided by you to the Company or through third-party companies or social networks (e.g., by filling out specific online forms for data entry or through direct contact with the Company, in person, by telephone, or via e-mail).

4) For what purposes are the data processed and on what legal basis?

The above-mentioned personal data will be processed for the pursuit of one or more of the purposes listed below and in accordance with the corresponding legal bases.

• Providing feedback to your requests for assistance made through the Company's platforms or by email, as well as providing feedback to other requests made by filling in the appropriate forms on the website. The processing is carried out pursuant to Article 6(1)(b) of the Regulation, and therefore in performance of a contract or pre-contractual measures taken at your request. The provision of data is necessary and consent to processing is not required; failure to communicate one or more pieces of data will prevent a response to your request.
• Contacting you by e-mail or telephone to offer you the Company's products and services. The processing is carried out in accordance with Article 6(1)(a) of the Regulation, in the presence of your specific consent. The provision of data is, therefore, optional and you may revoke your given consent at any time following the modalities indicated in the paragraph "What are your rights?" or by means of a specific option present at the bottom of the e-mails, without prejudice to the lawfulness of the processing carried out before the revocation.
• Sending you, free of charge, informative, promotional and commercial communications via newsletter to the email address you have provided. The processing is carried out pursuant to Art. 6(1)(a) of the Regulation, in the presence of your specific consent. The provision of data is, therefore, optional and you may revoke any consent given at any time following the modalities indicated in the paragraph "What are your rights?" or by means of a specific option at the bottom of each email, without prejudice to the lawfulness of the processing carried out before revocation.

Within the scope of the specific purposes mentioned above, the processing is carried out using manual, computerised, and telematic tools. The Company implements appropriate organizational and technical measures to ensure the security and confidentiality of your personal data.

5) To whom can the data be disclosed?

Your personal data will be processed, via suitable methods and procedures, by employees and collaborators of the Company, and will not be disclosed. For the same purposes stated in paragraph 4, your personal data may also be processed by the Company's service providers (such as marketing e-mail delivery platforms, companies supporting the Company in promoting its products or services, companies providing CRM software). If the conditions are met, these entities will be appointed as Data Processors in accordance with Art. 28 of the Regulation.

6) Why might the Company share your data with Axerve S.p.A.?

The Company promotes the services of Axerve S.p.A., with its registered office at Piazza Gaudenzio Sella, No. 1, Biella (BI) - 13900, e-mail privacy@axerve.com (hereinafter referred to as "Axerve"). If you have shown interest in Axerve's products or services by completing the appropriate forms on the Company's website, should you have submitted customer service requests for Axerve's products, your personal data will be disclosed to Axerve, which will process them as an independent data controller in order to respond to your requests. The processing is carried out, in accordance with Article 6(1)(b) of the Regulation, in execution of a contract or of pre-contractual measures taken at your request. Axerve may disclose your personal data to its suppliers (e.g. CRM software providers, companies providing support in customer care), who are specifically appointed as Data Processors in accordance with Article 28 of the Regulation. Should you show an interest in Axerve's products and services, Axerve will process and store your data for 12 months; in the case of service requests, your data will be stored for the duration of the existing contractual relationship, subject to statutory retention periods. You may exercise the rights granted to you by the Regulation, as described in the "What are your rights?" section, or contact Axerve's DPO at:

• Postal address of Axerve S.p.A.: Piazza Gaudenzio Sella, No. 1, Biella – 13900, Italy;
• E-mail address: privacy@axerve.com.

For more information, you can visit the website https://www.axerve.com/en/privacy-and-cookie.

7) Can data be transferred outside the European Economic Area?

For the purposes outlined in paragraph 4, your personal data will be transferred outside the European Economic Area, specifically to the United States, through the Company's service providers. The transfer takes place in compliance with applicable regulations, based on agreements that adhere to the European Commission's Standard Contractual Clauses for the transfer of personal data.

8) How long are the data retained?

The treatment will have a duration necessary for the pursuit of the purposes for which your data were provided. In particular:

• the data processed for the forwarding of the newsletter will be processed and stored for the entire period in which the service is active or until your possible withdrawal of consent;
• the data processed to contact you by e-mail or telephone and offer the Company's products and services will be processed and stored for 12 months.

9) What are your rights?

We inform you that you will be able to know which personal data are processed by the Company and, where the conditions apply, exercise the rights relating to their use that are recognized by the Regulations (right of access, rectification, cancellation, limitation of processing, portability, to revoke the consent for processing and obtain a copy of the adequate safeguards adopted in which the data are processed in countries outside the European Economic Area, as well as obtain an indication of the place where such data are stored or transferred, as well as oppose for legitimate reasons to a particular treatment), by contacting:

• Fabrick S.p.A. postal address: Piazza Gaudenzio Sella n. 1, 13900, Biella, Italy - DPO;
• E-mail address: privacy@fabrick.com

We also inform you that, if you believe the processing of data concerning you violates the Regulations, you can lodge a complaint with the supervisory authority for personal data protection (hereinafter, the "Data Protection Authority"), in accordance with the methods indicated on the Data Protection Authority's website.
The Company provides you with information relating to the action taken regarding your request without undue delay and, at the latest, within one month of receipt of the same.