Information according to Art. 13 / Art. 14 GDPR regarding natural persons under the EU General Data Protection Regulation The Regulation on the "protection of individuals with regard to the processing of personal data, as well as the free circulation of such data" (hereinafter the "Regulation") contains a series of rules aimed at ensuring that the processing of personal data is carried out in compliance of the fundamental rights and freedoms of people. The present informative note (hereinafter the "Informative") adopts the indications of the Regulations. This information describes how to manage this website in relation to the processing of personal data of users who consult it. This is an information that is also provided pursuant to art. 13 and 14 of Regulation (EU) 2016/679 regarding the protection of personal data to those who use the Company's web services, accessible electronically from the address http://www.euroformsrl.it corresponding to the initial page of the official website of the Company. The information is provided only for the website http://www.euroformsrl.it and not for any other websites that may be consulted by the user through links. Controller of the treatment Data controller is EUROFORM S.r.l., with registered office in via Monza, 118, I-20060 Gessate. Categories and sources of personal data Browsing data The computer systems and software procedures used to operate this website acquire, during their normal operation and only for the duration of the connection, some personal data whose transmission is implicit in the use of Internet communication protocols. These data are not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the website, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user's computer environment. These data might be used for the sole purpose of obtaining anonymous statistical information on the use of the website and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the website. The Euroform website does not use any kind of cookies. Data voluntarily provided by the user We acquire and process the personal data that you provide us, for example by sending a request to the email address in the contacts section of our website. Purpose and legal basis of the processing The data are processed exclusively for the purposes for which they are collected. The Data Controller uses the given data: 1. To provide the services made available through the website; 2. To improve the service and offer assistance to customers, respond to requests sent to us through the contacts section; 3. To comply with national and community regulations; 4. To comply with and apply legal requirements, our Terms of Use, contractual obligations and our policies. The provision of data for the purposes referred to in paragraphs 1 to 4 is not mandatory by law but the refusal to provide such Personal Data implies the impossibility for the user to access and make full use of the functionality of the service. The legal basis of the processing for the aforementioned purposes is found in contractual or pre-contractual requirements and for the fulfillment of legal obligations to which the Data Controller is subject and therefore consent is not required. Categories of personal data recipients For the pursuit of the aforementioned purposes, the Processing is carried out by the designated employees of responsible body as authorized to the processing or by persons appointed as Data Processors. The updated list of data processors and authorized parties is kept at the Company's headquarters and can be requested by sending an email to privacy@euroformsrl.it. Data transfer Your Personal Data are processed by the Company within the territory of the European Union and are not disclosed. Methods of processing and duration of personal data storage The processing of Your Personal Data is carried out using paper, computerized and electronic tools in compliance with the principle of necessity and proportionality, avoiding the processing of personal data if the operations can be carried out through the use of anonymous data or by other means and in order to guarantee the security and confidentiality of the data themselves. Your Personal Data, object of the processing for the aforementioned purposes, will be kept for the time strictly necessary to achieve the purposes for which they were collected, in compliance with the prescription terms or in the different times established by the relevant legal and regulatory provisions or necessary for the needs of justice or public interest, all applying any measure, where possible, to anonymisation of the data. Changes to the Privacy Policy This Privacy Policy can be updated at any time by EUROFORM S.r.l.. EUROFORM S.r.l. will give communication to users and visitors of the website about any changes made to. Data security We adopted specific security measures to prevent the loss, illicit or incorrect use of personal data, and unauthorized access to them, but please do not forget that it is essential for the security of your data that your device is equipped with tools such as antivirus constantly updated and that the provider of the connection to the Internet guarantees the secure transmission of data through firewalls, anti-spam filters and similar safeguards. Rights of the data subject As data subject you can exercise, at any time, towards the Data Controller the rights provided by the Regulations listed below, by sending a request in writing to the email address privacy@euroformsrl.it or by post to EUROFORM S.r.l., via Monza, 118, I-20060 Gessate. The rights that the user can exercise are as follows: the right of access, which allows you to obtain from the Controller confirmation that it is or is not undergoing treatment of your personal data and, in this case, to obtain access to such data; the right of rectification, which allows you to obtain from the Controller the correction and/or integration of his personal data that are incorrect and/or incomplete; the right to erasure, which allows you, in specific cases provided for by art. 17 of the Regulations, to obtain from the Data Controller the erasure of your personal data; the right to restriction of processing, which allows you, in the specific cases provided for by art. 18 of the Regulation, to restrict the processing of personal data by the Controller; the right to data portability, which allows you, in certain cases and with respect only to the data supplied by you, to request the receipt of your personal data in a structured format, commonly used and readable by automatic device. You may also request that your Personal Data be transmitted, if technically feasible, from the Company directly to another person in charge of the processing indicated by you; the right to object, which allows you to object the processing of personal data to the occurrence of particular conditions; the right to lodge a complaint to the Supervisory authority for the protection of personal data, which allows you, if you believe that the processing of your Personal Data by the Controller takes place in violation of the Rules and/or applicable legislation, to lodge a complaint with the Authority for the Protection of competent personal data. published on November 26th, 2018

Information according to Art. 13 / Art. 14 GDPR regarding natural persons under the EU General Data Protection Regulation The Regulation on the "protection of individuals with regard to the processing of personal data, as well as the free circulation of such data" (hereinafter the "Regulation") contains a series of rules aimed at ensuring that the processing of personal data is carried out in compliance of the fundamental rights and freedoms of people. The present informative note (hereinafter the "Informative") adopts the indications of the Regulations. This information describes how to manage this website in relation to the processing of personal data of users who consult it. This is an information that is also provided pursuant to art. 13 and 14 of Regulation (EU) 2016/679 regarding the protection of personal data to those who use the Company's web services, accessible electronically from the address http://www.euroformsrl.it corresponding to the initial page of the official website of the Company. The information is provided only for the website http://www.euroformsrl.it and not for any other websites that may be consulted by the user through links. Controller of the treatment Data controller is EUROFORM S.r.l., with registered office in via Monza,118, I-20060 Gessate. Categories and sources of personal data Browsing data The computer systems and software procedures used to operate this website acquire, during their normal operation and only for the duration of the connection, some personal data whose transmission is implicit in the use of Internet communication protocols. These data are not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the website, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user's computer environment. These data might be used for the sole purpose of obtaining anonymous statistical information on the use of the website and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the website. The Euroform website does not use any kind of cookies. Data voluntarily provided by the user We acquire and process the personal data that you provide us, for example by sending a request to the email address in the contacts section of our website. Purpose and legal basis of the processing The data are processed exclusively for the purposes for which they are collected. The Data Controller uses the given data: 1. To provide the services made available through the website; 2. To improve the service and offer assistance to customers, respond to requests sent to us through the contacts section; 3. To comply with national and community regulations; 4. To comply with and apply legal requirements, our Terms of Use, contractual obligations and our policies. The provision of data for the purposes referred to in paragraphs 1 to 4 is not mandatory by law but the refusal to provide such Personal Data implies the impossibility for the user to access and make full use of the functionality of the service. The legal basis of the processing for the aforementioned purposes is found in contractual or pre-contractual requirements and for the fulfillment of legal obligations to which the Data Controller is subject and therefore consent is not required. Categories of personal data recipients For the pursuit of the aforementioned purposes, the Processing is carried out by the designated employees of responsible body as authorized to the processing or by persons appointed as Data Processors. The updated list of data processors and authorized parties is kept at the Company's headquarters and can be requested by sending an email to privacy@euroformsrl.it. Data transfer Your Personal Data are processed by the Company within the territory of the European Union and are not disclosed. Methods of processing and duration of personal data storage The processing of Your Personal Data is carried out using paper, computerized and electronic tools in compliance with the principle of necessity and proportionality, avoiding the processing of personal data if the operations can be carried out through the use of anonymous data or by other means and in order to guarantee the security and confidentiality of the data themselves. Your Personal Data, object of the processing for the aforementioned purposes, will be kept for the time strictly necessary to achieve the purposes for which they were collected, in compliance with the prescription terms or in the different times established by the relevant legal and regulatory provisions or necessary for the needs of justice or public interest, all applying any measure, where possible, to anonymisation of the data. Changes to the Privacy Policy This Privacy Policy can be updated at any time by EUROFORM S.r.l.. EUROFORM S.r.l. will give communication to users and visitors of the website about any changes made to. Data security We adopted specific security measures to prevent the loss, illicit or incorrect use of personal data, and unauthorized access to them, but please do not forget that it is essential for the security of your data that your device is equipped with tools such as antivirus constantly updated and that the provider of the connection to the Internet guarantees the secure transmission of data through firewalls, anti-spam filters and similar safeguards. Rights of the data subject As data subject you can exercise, at any time, towards the Data Controller the rights provided by the Regulations listed below, by sending a request in writing to the email address privacy@euroformsrl.it or by post to EUROFORM S.r.l., via Monza, 118, I-20060 Gessate. The rights that the user can exercise are as follows: the right of access, which allows you to obtain from the Controller confirmation that it is or is not undergoing treatment of your personal data and, in this case, to obtain access to such data; the right of rectification, which allows you to obtain from the Controller the correction and/or integration of his personal data that are incorrect and/or incomplete; the right to erasure, which allows you, in specific cases provided for by art. 17 of the Regulations, to obtain from the Data Controller the erasure of your personal data; the right to restriction of processing, which allows you, in the specific cases provided for by art. 18 of the Regulation, to restrict the processing of personal data by the Controller; the right to data portability, which allows you, in certain cases and with respect only to the data supplied by you, to request the receipt of your personal data in a structured format, commonly used and readable by automatic device. You may also request that your Personal Data be transmitted, if technically feasible, from the Company directly to another person in charge of the processing indicated by you; the right to object, which allows you to object the processing of personal data to the occurrence of particular conditions; the right to lodge a complaint to the Supervisory authority for the protection of personal data, which allows you, if you believe that the processing of your Personal Data by the Controller takes place in violation of the Rules and/or applicable legislation, to lodge a complaint with the Authority for the Protection of competent personal data. published on November 26th, 2018