Polti SpA a socio unico, via Ferloni, 83 - 22070 Bulgarograsso Como CF and VAT number 01457440137 (hereinafter referred to as Polti), is the parent company of the following:

•POLTI ESPANA SA - Paseo del Ferrocarril 381- 08850 Gavà - ES

•POLTI FRANCE SAS - 11/13 Rue des Aulnes - 69760 Limonest - FR

•POLTI UK LTD. - The Junction - Merchants Quay - M50 3SG Manchester - GB

•POLTI DEUTSCHLAND GMBH - Hafeninsel 11, - 63067 Offenbach am Main - DE

•POLTI USA INC. - 5301 Beethoven Street, Suite 170 - Los Angeles, CA 90066 - US

•POLTIPLAST SRL - Via Monte Rosa n. 13 - 22070 Bulgarograsso (CO) – IT

Polti, as data controller, in the performance of its business collects and processes personal data provided by the data subject. In order to guarantee the protection and exercise of the rights provided by law on personal data protection, the data subject is informed of the following:

Purpose of the processing

The data provided by the interested parties will be processed exclusively for purposes related to the selection and qualification of suppliers and the management of the contractual supply relationship.

In addition to the personnel responsible for managing your contract, the data may be processed by the following parties:

•Postal and Logistics Companies

•IT service providers

•Public entities

•Credit institutions

•Consulting company

•Law Firms

•Financial intermediation company

•Other suppliers.

In the context of the activities covered by the contract and pursuant to art. 49 par. B of EU regulation 2016/679, Polti may transmit the personal data of the interested parties to countries outside the European Community for purposes related to the activities envisaged in the supply contract.

How to exercise the rights of the interested party

The interested party is informed of the processing, in accordance with the provisions of Article 13 paragraph 2 of EU Regulation 2016/679, on the methods by which he/she can exercise his/her rights.

The interested party is informed that Polti, pursuant to art. 12 paragraph 3 of EU regulation 2016/679, has

1•up to 1 month from the moment the request is forwarded by the interested party to respond regarding the exercise of the rights listed below,

1•This deadline may be extended by two months depending on the number of requests.

Data retention period

Interested parties are informed that the personal data provided will be stored in Polti systems for the time necessary to fulfill the purposes indicated. Any data that may be generated as a result of further contractual relationships (e.g. tax and accounting documentation) will be stored in accordance with the terms of the law.

Rights of the interested party

Polti, pursuant to articles 15-22 of EU regulation 2016/679, undertakes to guarantee the full exercise of the rights of the interested party, unless this does not prejudice a legitimate right or the rights of other data subjects. The interested party to the processing who wishes to exercise these rights is informed that he/she may do so by writing to the address: privacy@polti-me.com . Polti has appointed before the guarantor authority the DPO who can be contacted at the address dpo@polti-me.com.

The interested party is informed that, pursuant to art. 13, paragraph 2, subparagraph D of EU regulation 2016/679, if he/she detects serious breaches or complains about the failure to comply with one of the rights set out in this information notice by Polti, he/she may file a formal complaint with the national privacy guarantor.