INFORMATION AND CONSENT FOR THE PROCESSING OF DATA AND INDIVIDUAL IN ACCORDANCE WITH AND FOR THE PURPOSES OF ART. 13 LEGISLATIVE DECREE. 30 JUNE 2003 NO. 196 AND ARTICLES 18 AND 14 OF EU REGULATION 2016/679 OF 27 APRIL 2016

In compliance with the provisions of art. 13 of Legislative Decree no. 196 of 30 June 2003, as well as articles 13 and 14 of EU Regulation 2016/679 of 27 April 2016, we inform you that Gamma3 Conifica Company has updated its privacy policy.

As the above-mentioned regulations require informing the data subjects about which data are processed and their processing, which in any case must take place correctly, lawfully, and transparently, protecting your privacy and your rights, we hereby provide you with the following information:

DATA CONTROLLER The data controller of your personal data is the Gamma3 Conifica Company with registered office in Cantù (CO) Italy, Via Lario no. 31, tel. 031.716206, Fax. 031.7090709, email info@gamma3conifica.com

Types of Data collected Among the Personal Data collected by this Application, independently or through third parties, there are: Cookies, Usage Data, Surname, Name, Telephone Number, Company Name, Address, Province, Email, and ZIP code.

Other Personal Data collected may be indicated in other sections of this privacy policy or through informative texts displayed at the same time as the collection of the Data themselves.

Personal Data may be entered voluntarily by the User or collected automatically during the use of this Application. The use of Cookies – or other tracking tools – by this Application or by the owners of third-party services used by this Application, unless otherwise specified, is intended to identify the User and record their preferences strictly related to the provision of the service requested by the User. Failure to provide certain Personal Data by the User may prevent this Application from providing its services.

The User is responsible for the Personal Data of third parties published or shared through this Application and guarantees that they have the right to communicate or disseminate them, releasing the Data Controller from any liability to third parties.

METHODS AND PLACE OF PROCESSING THE COLLECTED DATA Processing methods: The Data Controller processes the Personal Data of Users by adopting the appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. Processing is carried out using IT and/or telematic tools, with organizational methods and logics strictly related to the purposes indicated. In addition to the Data Controller, in some cases, certain categories of persons involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data, appointed if necessary, as Data Processors by the Data Controller. The updated list of Data Processors can always be requested from the Data Controller.

Location: The Data is processed at the Data Controller’s operational headquarters and in any other place where the parties involved in the processing are located. For further information, please contact the Data Controller.

Duration: The Data is processed for the time necessary to provide the service requested by the User, or required by the purposes described in this document, and the User can always request the interruption of the Processing or the deletion of the Data.

Purposes of the processing of the collected Data Your data is processed for the following purposes:

A – For the performance of pre-contractual and contractual relations with you and for the consequent fulfillment of administrative, legal, and tax obligations, as well as to allow effective management of financial and commercial relationships and to exercise or assert our rights. Your data may also be processed for internal purposes such as statistical indicators, customer satisfaction, and the effectiveness of the management of commercial relationships with customers and suppliers.

B – For the sending of commercial and promotional information, direct sales, market research on products, services, and events (collectively defined as “marketing activities”). The data will be processed for the entire duration of the contractual relationship and also subsequently, for the fulfillment of legal obligations and for the purposes mentioned above, and in any case no later than 10 years from the termination of the relationship for the purposes referred to in letter A and for no more than 2 years for the purposes referred to in letter B.

Details on the processing of Personal Data Personal Data is collected for the following purposes and using the following services:

Contact the User By filling in the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other kind of request as indicated by the form’s header. Personal data collected: ZIP code, Surname, Email, Address, Name, Telephone number, Province, Company name, and Various types of Data as specified by the privacy policy of the service.

Interaction with social networks and external platforms: These services allow interaction with social networks, or with other external platforms, directly from the pages of this Application. Interactions and information acquired by this Application are in any case subject to the User’s privacy settings for each social network. If an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, it may collect traffic data relating to the pages where it is installed. Facebook “Like” button and social widgets (Facebook) The Facebook “Like” button and social widgets are services for interacting with the Facebook social network, provided by Facebook Inc. Personal Data collected: Cookies and Usage Data. Location of processing: USA – Privacy Policy Twitter “Tweet” button and social widgets (Twitter) The Twitter “Tweet” button and social widgets are services for interacting with the Twitter social network, provided by Twitter Inc. Personal Data collected: Cookies and Usage Data. Location of processing: USA – Privacy Policy AddThis (AddThis Inc.) AddThis is a service provided by Clearspring Technologies Inc. which displays a widget that allows interaction with social networks and external platforms and the sharing of the contents of this Application. Depending on the configuration, this service can display widgets belonging to third parties, such as the managers of the social networks on which to share interactions. In this case, even the third parties that provide the widget will be aware of the interactions carried out and the Usage Data relating to the pages where this service is installed. Personal Data collected: Cookies and Usage Data.

Your rights: You can exercise your rights as provided for in articles 7 et seq. of the Privacy Code and articles 15 et seq. of the EU Regulation, by contacting the Data Controller, and in particular: You have the right to obtain information and indications about: • the existence of an ongoing processing of personal data concerning you; • the origin and categories of personal data; • the purposes and methods of processing; • the period of retention of personal data provided; • the existence of an automated decision-making process (including profiling) and the logic applied in the event of processing carried out with the aid of electronic tools; • the subjects or categories of subjects to whom the personal data may be communicated; • the subjects or categories of subjects who may become aware of the personal data as designated representative in the territory of the State, as data processors or persons in charge; • the identifying details of the data controller, or of the data processors, the designated representatives and the persons in charge, where designated; • where personal data is transferred to a third country or to an international organization, information on the existence of adequate safeguards pursuant to art. 46 of the EU Regulation. You have the right to: • obtain the updating, rectification, or, when interested, integration of data; • obtain the erasure, anonymization, or blocking of data processed unlawfully, including data for which storage is not necessary in relation to the purposes for which the data was collected or subsequently processed; • request data portability, in accordance with art. 20 of the EU Regulation; • request a copy of the personal data being processed; • revoke consent to the processing of your data, without prejudice to what is provided for in art. 5 letter A of this information and without prejudice to the lawfulness of the processing based on the consent given before the revocation; • lodge a complaint with the Guarantor Authority for the protection of personal data, to obtain protection for your rights. You have the right to object, in whole or in part: • for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of collection; • to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.

WHEN YOU NO LONGER WISH TO RECEIVE OUR NEWSLETTERS REGARDING OUR WEBSITE, YOU CAN UNSUBSCRIBE BY CLICKING THE LINK AT THE BOTTOM OF EACH NEWSLETTER RECEIVED.

Further information on processing Legal defense The User’s Personal Data may be used by the Data Controller for defense in court or in the stages leading to possible legal action, against improper use of this Application or the related services by the User. The User declares to be aware that the Data Controller may be required to disclose the Data at the request of public authorities.

Specific information Upon request of the User, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information regarding specific services, or the collection and processing of Personal Data.

System logs and maintenance For operation and maintenance purposes, this Application and any third-party services it uses may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User’s IP address.

Information not contained in this policy More information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact information.

Exercise of User’s rights The subjects to whom the Personal Data refer have the right at any time to obtain confirmation of the existence or otherwise of the same from the Data Controller, to know its content and origin, to verify its accuracy or request its integration, cancellation, updating, rectification, anonymization, or blocking of Personal Data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, to their processing. Requests should be addressed to the Data Controller VIA MAIL by writing to: info@gamma3conifica.com

Changes to this privacy policy The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page. Therefore, please consult this page often, taking as reference the last modified date indicated at the bottom. In the event of non-acceptance of the changes made to this privacy policy, the User is required to cease using this Application and may request the Data Controller to remove their Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to Personal Data collected up to that point.

Any reason for dissatisfaction can be reported to the Guarantor Authority for the protection of personal data, Piazza di Monte Citorio, 121 – 00186 Rome, tel .: 06.696771, email: garante@gpdp.it.

The document was updated on 16/07/2023 to comply with legal provisions.