PROCESSING OF PERSONAL DATA

PRIVACY – INFORMATION ON THE PROCESSING OF PERSONAL DATA

This information (the '"Information") is provided pursuant to article 13 of Decree 196/2003 – Privacy Code, to those who interact with the web services of Buroservice snc, which are accessible telematically from the address www.buroservice.com (hereinafter also referred to as the "Site").

This information is provided only for this Site and not for any other websites that can be consulted by the user through links from this Site.

1. Purposes of processing data pursuant to art. 13 of Decree 196/2003 – Privacy Code

1. The personal data of the User made available to Buroservice Snc on a voluntary basis will be collected and used to:

a) contact the User who has asked to be contacted by inputting their data into this section of the Site, for the presentation of products or services by Buroservice Snc and those who collaborate in the commercial activities of Buroservice Snc and/or its parent, subsidiary or associated companies, including by sending information and promotional communications, also of a commercial nature, advertising material and/or offers of goods and services, by post, internet, telephone, e-mail, MMS, SMS from Italy or from abroad (including countries that do not belong to the European Community),

b) sending newsletters requested by the User,

c) preparing statistics and market research.

2. Types of data processed

Surfing data

The IT systems and software procedures used to make the Site function normally acquire certain personal data, the transmission of which is implicit in the use of communication protocols in Internet.

This is information that is not gathered for it to be associated with the individuals concerned, but which, because of its nature, could make it possible to identify the users if processed and associated with data held by third parties.

This type of data includes the IP addresses or dominion names of the computers used by users who connect with the Site, the uniform resource identifiers (URI) of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the reply given by the server (OK, error, etc.) and other parameters relating to the user’s operating system and IT environment.

This data is used for the sole purpose of gathering anonymous statistical information on how the Site is used and to check that it functions correctly. It is cancelled immediately after processing. This data could be used to ascertain liability in the event of hypothetical computer crimes against the Site.

Data provided voluntarily by the user

Explicitly sending voluntary e-mail to the addresses shown on this Site means that the sender’s address will be automatically acquired by the system, as it is needed to reply to the requests made, along with any other personal data included in the communication.

Specific summary information will subsequently be reported or visualised on the pages of the Site that have been set up for particular services on request.

3. Information on the use of cookies

The User should be aware that the Site uses “cookies”, which involve the browser leaving data on the User’s hard disc so as to trace the pages that the User visits on the Site. It follows that any time the User returns to the Site, it will be possible to identify the person immediately and to suggest page views based on the preferences expressed during a previous visit.

These files make it possible to personalise a website, to facilitate surfing by the user and to present the more requested information better on the basis of the number of times that the various pages of the site get visited. Cookies make use of anonymous information, so they do not allow personal information to be processed. Cookies can also be used to memorise the User’s log-in data, making it possible to identify the User automatically (so it is no longer necessary to insert username and password).

Most browsers currently in use accept cookies automatically, but the User still has the right to configure their own browser so as to exclude cookies, visualise them prior to acceptance or cancel them. So it will always be possible to deactivate cookies by changing the way that the browser is set up, but deactivating could slow down or prevent access to certain parts of the Site. In any case, apart from the surfing data mentioned above, no other personal data will be collected, except obviously for any information that is volunteered.

The User’s personal data will be processed b y means of suitable electronic and/or paper-based tools, with an approach that is closely linked to the purposes explained previously and, in any case, in such a way as to guarantee the security and confidentiality of the data in question.

4. Provision of data and the potential consequences of a refusal

Personal data is provided on a voluntary basis; however, any refusal and/or provision of information that is incorrect and/or incomplete will make it impossible to contact the User so that Buroservice Snc can offer its products or services or to send newsletters or information and promotional communications, also of a commercial nature, or for the User to take part in the preparation of statistics and market research.

5. Data communication

The User’s personal data gathered by Buroservice Snc will be communicated to persons who collaborate in the commercial activities of Buroservice Snc and to its parent, subsidiary and associated companies, for the purposes indicated in point 1.

Within Buroservice Snc, the User’s personal data may come to the notice of the corporate bodies of Buroservice Snc, its staff, with particular reference to the employees who look after the services that are marketed on-line, customer care, marketing, IT maintenance and, above all, the person in charge and those delegated to process personal data.

The User’s personal data may also be communicated to other qualified persons who provide Buroservice Snc with services needed for the purposes mentioned above in article 1 of this statement, including the individuals and companies involved in managing and maintaining our websites and the IT systems used. In pursuing the activities mentioned in article 1, Buroservice Snc will be able to use the following categories of persons who may become aware of the User’s personal data: qualified entities, such as banks, insurance companies, suppliers and subcontractors that provide Buroservice Snc with services needed to send out newsletters, information and promotional communications, also of a commercial nature, and to prepare statistics and market research, and for the organisation and running of events and exhibitions, also of a promotional nature; also those relating to legal, fiscal, social security, accounting and organisational aspects; anyone else to whom the data expressly has to be communicated by law.

The User’s personal data may be transferred abroad, in accordance with current regulations, including to countries where Buroservice Snc pursues its business interests, not necessarily in the European Union.

6. Distribution of data

The User’s personal data will not be distributed or communicated to persons other than those listed in this statement.

7. User’s rights

In relation to the types of data processing mentioned in article 1, the User will be able to exercise the rights laid down in article 7 of Decree 186 of 30 June 2003, which for convenience we transcribe below.

“Art. 7 – Right of access to personal data and other rights

1. The person concerned has the right to obtain confirmation of the existence or otherwise of personal data on him, even if not yet registered, and their communication in intelligible form.

2. The person concerned has the right to be told: a) the origin of the personal data; b) the purpose for which such data is being processed and how; c) the logic applied in the case of processing with the help of IT; d) details of the titleholder, those responsible and the designated representative pursuant to article 5.2; e) the persons or categories of persons to whom personal data may be communicated or who could get to know of the data in their role of designated representative in the territory of the State, those responsible or delegated.

3. The person concerned has the right to obtain: a) the update, amendment or, if he so desires, integration of the data; b) the cancellation, transformation into an anonymous form or blockage of any data processed in a way that violates the law, including data whose conservation is not necessary in relation to the purposes for which the data was gathered or subsequently processed; c) certification that the operations mentioned in points a) and b) have been brought to the knowledge, also as regards their content, of those to whom the data has been communicated or distributed, except for the case in which this requirement turns out to be impossible or involves using resources that are clearly out of proportion with the right being protected.

4. The person concerned has the right to oppose, in all or in part: a) for legitimate reasons the processing of personal data that concern him, even if pertinent to the purpose for which it was gathered; b) the processing of personal data that concern him for the purpose of sending advertising or direct selling material or to carry out market research or commercial communication.”

8. Information for promotional activities

Taking part in marketing activities takes place on a voluntary basis pursuant to art. 7.4.b) and art. 130 of the Privacy Code, particularly as regards electronic communications via e-mail, telefax, MMS or SMS.

9. The titleholders and the person responsible for processing personal data

The titleholder is Buroservice Snc, with registered offices in Via dei Tigli 2, Arese (MI), Italy; fiscal code and VAT no. 08492040152.