Consorzio Vera Pelle Italiana Conciata al Vegetale declares its commitment to collect and handle all data gathered by its website www.pellealvegetale.it and voluntarily supplied by Users according to a Privacy Policy compliant with Article 13 and 14 of the Regulation (EU) 2016/679 (General Data protection Regulation).
The Privacy Policy specifies:

• Identity of data handling controller
• Objectives and modalities of data handling
• Compulsory or voluntary data providing
• Data sharing and communication to third parties
• Personal data protection measures
• Data subject’s rights

OWNERSHIP AND RESPONSIBILITIES REGARDING HANDLING OF PERSONAL DATA Consorzio Vera Pelle Italiana Conciata al Vegetale – Via Primo Maggio, 82/84, 56028 Ponte a Egola – San Miniato (PI) Italy – VAT Id no. 01303760506 has ownership and responsibility of data handling. DATA HANDLING MODALITIES Personal data are processed with automated instruments. OBJECTIVES OF DATA HANDLING Compulsory and voluntary data provided will be used exclusively for the purposes indicated below:

• processing services requested by visitors
• answering specific requests of visitors about activities and services offered by Consorzio Vera Pelle Italiana Conciata al Vegetale
• informing users through newsletters
• verifying customers’ satisfaction and quality of services offered
• handling of personal data following a subscription to specific services

SHARING, COMMUNICATION AND DISSEMINATION OF DATA Data provided by Users are not shared with, communicated or disclosed to third parties. PROCESSING ARRANGEMENTS Specific security procedures are kept to prevent the risk of data destruction or loss, whether by accident or not, of unauthorized access to data or of processing operations that are either unlawful or inconsistent with the purposes for which the data have been collected. DATA PROVIDING The voluntary forwarding of personal data (name, email address, etc.) on this site implies the subsequent acquisition of the data provided by the sender, which is essential to the procession of the required service. Data providing is optional, but in their absence services may not be processed. RIGHT TO ACCESS PERSONAL DATA AND OTHER RIGHTS Italian Privacy Law – Decree 196/2003. Article 7, paragraph 1 : The person concerned has the right to obtain the confirmation of the existence, or lack thereof, of his personal data, even if it is not yet registered. The person concerned has the right to have this information communicated in an intelligible form. The person concerned has the right to obtain information about:

1. the origin of the personal data;
2. how these data are used;
3. the functioning of the electronic system which manages the data;
4. the identity of the holder, the person in charge and the assigned representative as per article 5, paragraph 2;
5. the recipients or categories of recipients to whom the personal data can be communicated or those who can have access.

The person concerned has the right to obtain:

1. the updating, rectifying, and, as applicable, the integration of the data;
2. the cancellation, transformation into an anonymous form, or the blocking of data used in violation of the law. This also includes any data that has been transmitted but that was unnecessary for the functioning of the system;
3. the declaration that the acts covered in a) and b), as well as their content, are communicated to the parties to whom the personal data are passed, except in cases where this proves to be impossible or would require the use of means clearly disproportionate to the protected right.

The person concerned has the right to object, in whole or in part:

1. for legitimate reasons to the use of the personal data which concern them, even though they are pertinent to the reasons for the collection of the data;
2. to the use of personal details which concern them with the aim of sending publicity or direct sales material either for the use of market research or commercial communication.