PRIVACY NOTICE

PURSUANT TO ART. 13 OF REGULATION (EU) 2016/679

Dear Data Subject,

with this document we’d like to inform you that the processing of your personal data is carried out in accordance with the regulations on the protection of personal data (EU Regulation 2016/679, hereinafter the "Regulation", Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 and subsequent amendments and additions), therefore, it will be based on principles of accuracy, lawfulness, transparency and protection of your privacy and your rights.

Pursuant to art. 13 of the Regulation, therefore we inform you of the following.

1-DATA CONTROLLER

The Data Controller is Baoli EMEA S.p.A., with registered office in Viale de Gasperi, 7 - 20045 Lainate (MI), available for any matter relating to the processing, as well as for the exercise of the rights referred to in articles 15 to 22 of the Regulation, to the address indicated above and/or to the following e-mail addresses: gdpr@baoli-emea.com and baoliemea@pec.baoli-emea.com

2-TYPE AND SOURCE OF DATA COLLECTED

Your participation in the Event will allow Baoli EMEA S.p.A. to process personal data referable to you, such as images and/or audiovisual footage that portray you.

All such data (the "Data") are collected directly from the Data Subject.

3-PURPOSE OF THE PROCESSING

The processing of Data is aimed at:

1.take photographs and/or make audiovisual footage of you;

2.the possible publication and/or reproduction of images and footage, on the following communication channels: company intranet, website, company magazines and social channels, which can be connected to the Data Controller.

4–LEGAL BASIS AND METHODS OF DATA PROCESSING

The processing of your personal data, aimed at the pursuit of the purposes referred to in point 3 above, is carried out in the presence of the consent of the Data Subject. On this point, it’s specified that participation in the Event, will be considered as your expression of consent to the creation of photos and audiovisual footage and to the subsequent uploading of the same, on the corporate digital platforms indicated in the previous point.

Data processing:

a) takes place with methods and procedures strictly necessary for the fulfillment of the purposes set out in point 3;

b) is carried out by means of the operations or set of operations indicated in Article 4.2 of the Regulation, which consist of: collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

c) is carried out both with the aid of electronic or automated tools and manually and by means of paper archives.

In any case, the Data are processed by the Company in compliance with the principles of correctness, lawfulness, transparency and protection of the privacy and rights of the interested parties, as well as in accordance with the provisions of the Regulation and through the adoption of adequate security measures pursuant to Article 32 of the Regulation.

5-PROVISION OF DATA

The provision of data is optional; however, participation in the Event is considered as an expression of consent by the interested party.

6-RECIPIENTS AND DISSEMINATION OF DATA

The processing of Data is carried out by the Data Controller and/or by employees instructed and trained by the Data Controller and/or by third parties expressly appointed, where necessary, data processors by the Data Controller and/or third parties, who undertake to comply with the current provisions regarding the processing of personal data.

Therefore, we inform you that the Data, in addition to being processed by the company, may be transmitted, for the only purposes referred to in point 3 above, to KION Group, company/professionals responsible for collecting, printing, processing and publishing photographs and videos made, as well as the management of the Company's social channels and company newspapers/magazines and with which it has contractual relationships.

These subjects, where necessary, will be appointed by the Data Controller, data processors.

7-TRANSFER OF DATA TO THIRD COUNTRIES

As part of the pursuit of the purposes referred to in point 3 above, the Data will not be transferred to third countries located outside the European Economic Area. If this happens, Baoli EMEA S.p.A. will carry out such transfers after assessing the level of protection recognized in the state of destination and only if there is an adequacy decision of the European Commission, or by using the so-called standard contractual clauses, approved by the European Commission, giving specific information to the interested parties.

8-RETENTION PERIOD

Your Data will be stored for a period of time not exceeding the achievement of the purposes for which they are processed, in full compliance with the principle of limitation of storage provided by the Regulation.

9-RIGHTS OF THE INTERESTED PARTY

You, and in general every data subject, has the right to obtain from the Data Controller confirmation that personal data concerning you is being processed or not, to obtain access to the same and to all the information referred to in art. 15, par. 1, lett. a) and -h) and par. 2 of the Regulation and to request a copy of them.

Pursuant to articles 16 to 22 of the Regulation, you, and each data subject, also have the right to ask the Data Controller to rectify, update or erasure the Data. You will also have the right to request, in the cases referred to in art. 18 of the Regulation, the limitation of the data processing, as well as to oppose it for the reasons and purposes referred to in art. 21 of the Regulation. Art. 77 of the Regulation also gives you and any interested party the right to lodge a complaint with the competent supervisory authority.

You will also have the right to revoke, at any time, the consent given. This revocation will prevent the continuation of the processing carried out on the legal basis of consent, without prejudice to the lawfulness of processing carried out on this legal basis up to that moment.

Finally, if the processing is based on consent, you will have the right to receive in a structured, commonly used and machine-readable format the Personal Data provided and, where this is technically feasible, the safe transmission of the Data to another data controller.

Baoli EMEA S.p.A.