Privacy Policy pursuant to Legislative Decree 196/03 and EU Regulation No. 679/2016

Pursuant to Art. 13 of Legislative Decree 196/03 and following the entry into force of EU Regulation No. 679/2016 in accordance with the provisions of Art. 13 of the aforementioned European Regulation, we wish to inform you of the following:

Purposes of processing

Your personal data, freely provided and acquired by us in connection with the activity carried out by:

Iole Cina Marra

VIA ALESSANDRO MANZONI 210 SC C INT 5

VAT Number: 10135281219

Tax Code: MRRLCN86E47F839T

will be processed lawfully and fairly for the following purposes:

RETAIL OF ADULT PACKAGES

The data processed are up-to-date, relevant, complete, and not excessive in relation to the purposes listed above for which they are collected and subsequently processed.

Methods of processing

The data will be processed, while ensuring the necessary security and confidentiality, through the following methods: collection of data from the data subject, collection and recording for specified, explicit, and legitimate purposes, used in further processing operations compatible with such purposes, processing carried out with the assistance of electronic and automated tools (collection of data electronically, directly from the data subject).

Legal basis of processing

The legal basis for the processing of your personal data is based on registration on the website www.almaboutique.it.

Legitimate interests pursued by the Data Controller:

The legitimate interests pursued by the Data Controller in the processing of data are given by the need to comply with and honor the contractual obligations entered into between the parties. Pursuant to Art. 6, the lawfulness of the processing is based on the manifestly expressed consent of the data subject, documented in writing. Mandatory or optional nature of the provision of data and consequences of a refusal to respond: the provision of data by you is mandatory so that the data controller can provide the requested services. In case of refusal, it will therefore be impossible to complete the registration process and the System Controller will not be able to fulfill the contractual obligations.

Communication of data to third parties

Your personal data will be processed by the Data Controller, by the Data Processors appointed by him, and by strictly authorized data processors. Your personal data are not subject to disclosure.

Retention periods

Your personal data will be retained for 10 years from the termination of the service provision/product supply relationship in the computer archives owned by Iole Cina Marra.

Intention of the Data Controller

The Data Controller will not transfer your personal data to a third country or an international organization.

Data Controller and Data Processor

The Data Controller is Iole Cina Marra. Data Controller contact details, email: info@almaboutique.it

The data subject may at any time exercise the rights reserved to him, enshrined in Art. 7, the full text of which is set out below: Art. 7 Legislative Decree 196/2003 and Art. 15 EU Regulation 679/2016 - Right of access to personal data and other rights – “The data subject has the right to obtain confirmation as to whether or not personal data concerning him are being processed, even if not yet recorded, and their

communication in an intelligible form. The data subject has the right to obtain information: on the origin of the personal data; on the purposes and methods of processing; on the logic applied in the event of processing carried out with the assistance of electronic tools; on the identification details of the data controller, the data processor, and the representative designated pursuant to Art. 5 paragraph 2; on the persons or categories of persons to whom the personal data may be communicated or who may become aware of them in their capacity as a designated representative in the territory of the State, processors, or data processors. The data subject has the right to obtain: updating, rectification, or, where there is a legitimate interest, completion of the data; erasure, anonymization, or blocking of data processed in violation of the law, including data for which retention is not necessary in relation to the purposes for which the data were collected or subsequently processed; confirmation that the operations referred to in points a. and b. have been brought to the attention of those to whom the data were communicated or disclosed, also as regards their content, except where such compliance is found to be impossible or involves the use of manifestly disproportionate means compared to the right protected. The data subject has the right to object, in whole or in part: for legitimate reasons to the processing of personal data concerning him, even if relevant to the purpose of collection; to the processing of personal data concerning him for the purposes of sending advertising material or for direct marketing or for market research or commercial communication.” In particular, the data subject may at any time ask the Data Controller for access to personal data and for their rectification or erasure, or for the limitation of the processing of data concerning him, or object to their processing, in addition to the right to data portability. The data subject has the right to withdraw consent at any time without affecting the lawfulness of processing based on consent given before withdrawal and has the right to lodge a complaint with a supervisory authority. The exercise of rights may be exercised by writing to the email address info@almaboutique.it.