Personal Data Processing

The Data Controller of personal data is Maison 40 Srls, VAT number 02612100699, in the person of Lrpt, with registered office in Via Chieti (CH), Via Ugo Frasca Modulo 2 Lett L M. The Data Controller can be contacted via PEC maison40@pec.it or email: sottotettogroup@gmail.com or info@maison40.it

The Data Controller has not appointed a personal data protection officer (RPD or data protection officer, DPO).

• 2 How did we collect your data?

The data we process on the Sottotetto website were provided to us by you, by filling in the forms/forms while browsing our website (such as requesting information) and/or contacting one of our commercial consultants

• 3. What are the legitimate purposes of the processing?

The processing, in accordance with applicable legislation, is based on your express consent, given during the process in which you voluntarily provided us with your personal data through the tools contained within our website.

The data will be processed for the following purposes:

offer you the products, services and promotions of your interest through commercial communications, subject to express consent;

for statistical purposes, in order to improve the offers of our products and services, managing to better understand the needs of our potential customers.

These communications will be carried out through the various channels prepared by Maison 40 Srls, such as: telephone, SMS/MMS or instant messaging applications (in this case, the communication could involve the transfer of data to non-EU countries, which will take place ensuring the appropriate guarantees for their protection). We remind you that, at any time, you can revoke your consent freely and free of charge through the contacts indicated above.

• 4. What type of data are processed?

The data processed by the Data Controller will be those you provided through the different procedures used for their collection. Below are some examples of the types of data that could be processed:

i) name and surname;

ii) address;

iii) identification document (e.g. tax code, identity card, passport, driving license, etc.);

iv) email.

• 5. To whom is your data communicated?

Your data will be communicated to the following categories of recipients, within the scope of the purposes indicated above:

data controllers identified from time to time;

third parties, including international ones, who provide any services in favor of Maison 40 Srls;

companies and professionals that the Owner uses in order to protect his rights (for example, accountants, lawyers, tax consultants, auditors, consultants, etc.).

• 6. How long will your data be kept?

Your personal data will be kept for the entire duration necessary to achieve the above purposes (in accordance with the internal policy of Maison 40 Srls) and, subsequently:

within the applicable prescription limits. If acts interrupt the prescription occur, the retention period will be extended accordingly;

within the limits established by regulatory provisions on data retention (e.g. tax returns), to correctly fulfill any legal obligations;

within the period necessary to protect the rights of the Owner in the event of any legal disputes.

• 7. What are your rights?

The regulations regarding the protection of personal data guarantee a series of rights for the entire duration of the processing.

The rights that you can exercise, as an interested party, are:

Right of access: to know which data are processed and all information relating to the processing.

Right of rectification: to be able to request the modification of data because it is inaccurate or obsolete.

Right to portability: to obtain a copy of the data being processed, in a structured format, commonly used and readable by an automatic device,

in order to facilitate any transfer of data to another data controller, other than Maison 40 Srls.

Right to limit processing: to be able to limit the processing of your data, provided that one of the hypotheses provided for by the applicable legislation applies.

Right to cancellation: request data cancellation with express communication to the following email address: sottotettogroup@gmail.com

Right to object: request the cessation of data processing (e.g. cessation of commercial communications).

Right to lodge a complaint with the supervisory authority: to promote any reports, complaints or appeals to the Guarantor for the Protection of Personal Data.

The exercise of these rights can be achieved through postal or electronic means or any additional communication tools chosen by the interested party, using the contacts indicated above and attaching the necessary documents to the request (e.g. a copy of the document identity) to identify the legitimate interested party.

This information may be subject to changes in line with the new GDPR regulation.