PRIVACY NOTICE IN ACCORDANCE WITH ARTICLES 13 AND 14 OF THE GDPR FOR DATA COLLECTED DIRECTLY AND INDIRECTLY FROM THE DATA SUBJECT

Dear Customer/User,

The European Regulation on the protection of personal data (GDPR) under Articles 13 and 14, paragraphs 1, mandates the obligation to inform the data subject, in cases of direct and indirect data collection, about the fundamental elements of processing, specified in Article 1, subparagraphs a/f. Our company fully complies by informing you that:

1-A) The data controller is C.M.T. UTENSILI S.P.A., located at VIA DELLA MECCANICA S.N., CHIUSA DI GINESTRETO, PESARO 61122 (PU), ITALY, with a branch in 46470 Catarroja - VALENCIA (SPAIN), Calle 25/31 Poligono Industrial, Tel. 0034 96 1274500 – EMAIL privacy@cmtorangetools.com

1-B) Data processing methods Data processing may be carried out using both electronic and manual tools, adhering to all necessary precautions to ensure the security and confidentiality of the information.

1-C) Data is collected for the following purposes: • Fulfillment of obligations arising from a contract to which you are a party, or to comply, before the contract, with your specific requests; • Compliance with legal obligations, regulations, and community legislation; • Customer management (administration of clients; contract management, orders, shipments, and invoicing; credit reliability and solvency checks); • Dispute management (contractual non-fulfillments; warnings; settlements; debt recovery; arbitration; litigation); • Sending of advertising material; • Promotional activities (B2B) The legal basis for these activities is: • Your explicit consent for one or more specific purposes; • Contractual or pre-contractual necessity; • Legal obligation to which the company is subject;• CV management • Private Area access

1-D) The recipients or possible categories of recipients are: • Banks and credit institutions; • Debt recovery companies; • Law firms; • Insurance companies; • IT equipment maintenance/repair companies; • Professional firms and/or companies and/or associations of companies and entrepreneurs that provide us with specific accounting and/or tax services, professional training, etc.; • Agents and/or representatives of C.M.T. UTENSILI spa.

2-A) The retention period for personal data related to clients, contained in paper and/or electronic databases, for the purposes mentioned in point 1-D), is as follows: • For pre-contractual treatments on request of the data subject aimed at drafting the contract or the commercial offer, it is necessary for the processing and in any case is that required by current legislation (3 years); • For contractual fulfillments, the data retention period is necessary for the processing and in any case is that required by current legislation (10 years); • For data potentially processed in disputes, the data retention period is necessary for processing and in any case that required by current legislation (10 years); • For legal obligations, the retention period is 10 years; • For marketing, promotional purposes, sending of advertising material, the data retention period is necessary for processing and in any case that provided by current legislation (2 years); • For users of telematic services, the data retention period is 12 months.

2-B) You are informed of your right to request access to your personal data, correction, deletion of the same, restriction of processing, to object to their processing, and to data portability.  ( art.15-21-22 GDPR)

2-C) Since our processing also has a legal basis on the consent you have provided (art. 9, § 2, lett. a) you are recognized the right to withdraw your consent at any time without affecting the lawfulness of the processing based on consent given before the revocation.

2-D) You have the right to lodge a complaint with a supervisory authority.

2-E) The communication of your data: • is a necessary requirement for the conclusion of the contract, therefore your possible refusal to provide the data will result in the inability to fulfill the contract; • could be used for sending advertising material and/or conducting promotional and marketing activities, therefore your possible refusal to provide the data will result in the inability to send such material and/or conduct promotional activities.