The following document has been drawn up in compliance with the provisions of Articles 13-14 of EU Regulation 2016/679.

Polti SpA a socio unico, via Ferloni, 83 - 22070 Bulgarograsso Como CF and VAT number 01457440137 (hereinafter referred to as Polti), is the parent company of the following:

•POLTI ESPANA SA - Paseo del Ferrocarril 381- 08850 Gavà - ES

•POLTI FRANCE SAS - 11/13 Rue des Aulnes - 69760 Limonest - FR

•POLTI UK LTD. - The Junction - Merchants Quay - M50 3SG Manchester - GB

•POLTI DEUTSCHLAND GMBH - Hafeninsel 11, - 63067 Offenbach am Main - DE

•POLTI USA INC. - 5301 Beethoven Street, Suite 170 - Los Angeles, CA 90066 - US

•POLTIPLAST SRL - Via Monte Rosa n. 13 - 22070 Bulgarograsso (CO) – IT

Polti, as data controller, in the performance of its business collects and processes personal data provided by the data subject. In order to guarantee the protection and exercise of the rights provided by law on personal data protection, the data subject is informed of the following:

Purpose of the processing

The data provided by the interested party will be processed to fulfill the provisions of the signed contract which includes the following purposes: :

1• Management of the obligations required in the context of customer service activities

2•Evaluation of the level of customer satisfaction regarding the products offered and the assistance received from Polti:

3•Promotional activities

In addition to the personnel responsible for managing your contract, the data may be processed by the following parties:

1•Postal and Logistics Companies

2•IT service providers

3•Companies providing repair and maintenance services

4•Consulting company

5•Law Firms

How to exercise the rights of the interested party

TThe interested party is informed of the processing, in accordance with the provisions of Article 13 paragraph 2 of EU Regulation 2016/679, on the methods by which he/she can exercise his/her rights.

The interested party is informed that Polti, pursuant to art. 12 paragraph 3 of EU regulation 2016/679, has

a•up to 1 month from the moment the request is forwarded by the interested party to respond regarding the exercise of the rights listed below.

b•Depending on the number of requests, this deadline may be extended by two months.

Data retention period

The interested party is informed that the personal data provided will be stored in Polti systems for the entire duration of the maintenance activity and for the duration of the warranty period of the product being assisted. Any data that may be generated as a result of further contractual relationships (tax documentation, etc.) will be stored in accordance with the terms of the law.

The interested party is informed that with regard to purposes 2 and 3 of this information notice, personal data will be stored in Polti systems until the interested party withdraws the express consent.

Rights of the interested party

Polti, pursuant to articles 15-22 of EU regulation 2016/679, undertakes to guarantee the full exercise of the rights of the interested party, unless this does not prejudice a legitimate right or the rights of other data subjects. The interested party to the processing who wishes to exercise these rights is informed that he/she may do so by writing to the address: privacy@polti-me.com . Polti has appointed before the guarantor authority the DPO who can be contacted at the address dpo@polti-me.com.

The interested party is informed that, pursuant to art. 13, paragraph 2, subparagraph D of EU regulation 2016/679, if he/she detects serious breaches or complains about the failure to comply with one of the rights set out in this information notice by Polti, he/she may file a formal complaint with the national privacy guarantor.

Failure to consent

The interested party is informed that, pursuant to art. 13, paragraph 2, subparagraph E of EU regulation 2016/679, Polti will not be able to carry out research and submit questionnaires aimed at evaluating the level of customer satisfaction ( Purpose 2 ) and will not be able to initiate promotional activities ( Purpose 3 ) if the interested party decides not to provide consent for the purposes expressed.

The interested party is informed that failure to provide consent for purposes 2 and 3 will not affect the processing of data for the purposes of point 1.