Information on the processing of personal data

The company "Rodo Firenze S.p.a.", in the person of its legal representative pro - tempore, with its registered office in Italy, Contrada Santa Caterina 12, Mogliano Marche, MC, R.E.A. Macerata 112155, C. F. 04095580488 and P.IVA 01060350434, as the data controller pursuant to Article 13 of Regulation (EU) 2016/679, in relation to the information that concerns you and that you need to process for the purposes of the establishment and management of the contractual relationship with you in progress, informs you of the following

1. Data controller and contact information

The data controller, i.e., the company that determines the purposes and means of the processing of your personal data, is: "Rodo Firenze S.p.a.", in the person of its legal representative pro - tempore, with registered office

in Italy, Contrada Santa Caterina 12, Mogliano Marche, MC, R.E.A. Macerata 112155, C. F. 04095580488 and P.IVA 01060350434. Contact details: tel.0733/559711; e - mail rodo@rodo.it; pec rodofirenzesrl@legalmail.it.

2. Object of processing

The data concerning you, which qualify as personal data under Art. 4 of the

Regulation (EU) 2016/679, consist of non-particular data, including first name, last name, company name, address, VAT number, contact details, bank and payment references.

3. Purpose of processing.

Your personal data are processed:

A. Without your express consent pursuant to Article 6(1)(b), (c) and (f) of Regulation (EU) 2016/679 for the following purposes:

- Conclude the contract to which it is a party;

- To fulfill pre-contractual, contractual and tax obligations arising from the relationship with you;

- Fulfilling legal obligations under the law, a regulation, EU legislation or an order from the authority;

- Exercise the rights of the owner, e.g., the right of defense in court.

B. Only with your specific and separate consent pursuant to Articles 6(a) and 7 of Regulation (EU) 2016/679 for the following marketing purposes:

- Send them via e - mail, mail and/or sms and/or phone contacts newsletter,

commercial communications (e.g., new store openings) and/or

Advertising material on products or services offered by the owner and detection

Of the degree of satisfaction with the quality of services;

- Send them via e - mail, mail and/or sms and/or phone contact communications

commercial and/or promotional of "Rodo" brand products or subjects

third parties;

- Send you the press review related to our company and/or news related to our company;

- Exercise profiling activities through the data you released.

If you access the site through the use of one of your social profiles (e.g., Facebook, Instagram, etc.), the collection of your personal data will be carried out by the data controller at a third party, i.e., at the operator of the social used. For further information regarding data collection and further processing, please refer to the Privacy Policy and Cookie Policy of the social used.

The Data Controller, subject to your express, free and unequivocal consent in accordance with Article 6(a), Regulation (EU) 2016/679, may request, in addition to the above data, additional personal data, such as but not limited to, data relating to tastes, preferences, habits, needs and consumption choices, for the marketing purposes described above.

It should be noted that if you are already a customer, the company may send you commercial communications relating to services and products of the data controller similar to those you have already used, unless you disagree (Article 17 Regulation (EU) 2016/679).

Browsing the data controller's site involves the use of cookies. For specifics please see the Cookie Policy: https://rodo.it/pages/cookie-policy.

4. Nature of data provision and consequences of refusal to respond

With reference to the purposes under 3.A), the provision of data is mandatory. Refusal to provide it will prevent the performance of the contracted service. With reference to the purposes referred to in point 3.B), the provision of data is, on the other hand, optional. It is, moreover, possible to revoke, at any time, the consent already given. Revocation of consent does not affect the lawfulness of the processing based on the consent before revocation.

5. Method of treatment

Your personal data may be subjected to both paper and automated electronic data, subject to confidentiality requirements and the most appropriate security measures.

In addition, it is guaranteed that, as stipulated in Article 5 of Regulation (EU) 2016/679, personal data referring to you will be processed:

- In a lawful, fair and transparent way;

- Collected for the determined, explicit, and legitimate purposes;

- Treated in a manner consistent with the determined purposes;

- Adequate, relevant, and limited to what is necessary in relation to the purposes for which

Will be processed; accurate and, if necessary, updated;

- Kept in a form that allows identification of data subjects for a period of time not exceeding the achievement of the purposes for which they are processed;

- Processed in a manner that ensures adequate security of personal data,

including protection from unauthorized or unlawful processing, accidental loss, destruction or damage, by taking appropriate technical and organizational measures.

6. Access to data

Your personal data may be made accessible, for the purposes mentioned in Section 3, to:

- Employees and collaborators of the data controller, in the capacity of

authorized and/or internal data controllers and/or system administrators.

- Individuals, who perform outsourced activities on behalf of the data controller, in their capacity as external data controllers.

The updated list of data processors and data processors is kept at the registered office of the data controller.

7. Disclosure of data

The data controller may communicate your data, for the purposes set out in point 3.A) of this information notice, without the need for express consent, to those subjects to whom such communication must be made in fulfilment of an obligation provided for by law, regulation or Community legislation. These subjects will process the data in their capacity as autonomous data controllers. Your data will not be disseminated.

8. Transfer of data

Personal data are stored on servers located at the company's headquarters within the European Union. However, the data controller, should it become necessary in the future, will have the option to move the servers outside the European Union as well. In this case, the data controller assures as of now that the transfer of data outside the European Union will take place in accordance with the

Applicable legal provisions, subject to the stipulation of the contract clauses

standards provided by the European Commission.

9. Data retention time

The data processed for the purpose referred to in 3.A), will be kept for the time necessary to achieve the purpose itself and, in any case, for the time imposed by civil and tax regulations.

The personal data collected for the purpose referred to in Section 3.B), will be lawfully processed by the Data Controller until you are notified, in one of the ways provided in this notice, of your wish to withdraw your consent to any or all of the purposes for which you have been asked.

10. Rights of the data subject

You are expressly granted the rights set forth in Articles 15, 16, 17, 18, 20 and 21 of Regulation (EU) 2016/679 and in particular:

- The right of access, which is the right to know what personal data will be processed;

- The right to request c orrections of any errors and/or omissions;

- The right to have data deleted;

- The right to restrict data processing;

- The right to data portability, or the right to receive all personal data

processed in a structured, machine-readable format;

- The right to object to the inclusion of all information.

You are also granted the right to file a complaint with the Supervisory Authority.

11. Ways of exercising rights

The rights listed in the preceding paragraph may be exercised at any

moment by sending:

- A registered A/R letter to the company "Rodo Firenze S.p.a.," in the person of the legal representative pro - tempore, Contrada Santa Caterina 12, 62010

- Mogliano (MC);

- Or a PEC (certified electronic mail) e- mail at:

rodofirenzesrl@legalmail.it.

12. Update

This policy may be updated, including in consideration of regulatory changes and/or measures of the Privacy Guarantor.

RESPONSE TO CANDIDATES TO JOB OFFERS

The company "Rodo Firenze S.p.a.", in the person of its legal representative pro - tempore, with registered office in Italy, Contrada Santa Caterina 12, Mogliano Marche, MC, R.E.A. Macerata 112155, C. F. 04095580488 and P.IVA 01060350434, in its capacity as data controller pursuant to Article 13 of Regulation (EU) 2016/679, in relation to the information that
concern you and that you need to process for the purposes of the establishment and management of the contractual relationship with you in progress, informs you of the following

1. Data controller and contact information

The data controller, i.e., the company that determines the purposes and means of the processing of your personal data, is: "Rodo Firenze S.p.a.", in the person of its legal representative pro - tempore, with registered office
in Italy, Contrada Santa Caterina 12, Mogliano Marche, MC, R.E.A. Macerata 112155, C.F. 04095580488 and P.IVA 01060350434. Contact details: tel.0733/559711; e - mail rodo@rodo.it; pec rodofirenzesrl@legalmail.it.

2. Source and purpose of processing

Personal data processed are those voluntarily provided by the candidate when sending a resume, during assessment interviews, and/or direct contacts at trade fairs, exhibitions, etc.

3. Recipients of the data

The processed personal data will not be subject to dissemination but to communication to definitive subjects. In particular, on the basis of the roles and work duties performed, internal and external personnel are entitled to the processing of the same within the limits of their competence and in accordance with the instructions given to them by the Data Controller. The same data may be communicated to subjects entitled to access them in the form of legal provisions, regulations and standards.

4. Method of treatment.

Your personal data may be subjected to both paper and automated electronic processing, in compliance with the requirements of confidentiality and the most appropriate security measures. Furthermore, it is guaranteed that, as provided for in Article 5 of Regulation (EU) 2016/679, personal data referring to you will be processed:
- Lawfully, fairly and transparently;
- Collected for the purposes determined, explicit and legitimate;
- Processed in a manner consistent with the purposes determined;
- Adequate, relevant and limited to what is necessary in relation to the purposes for which
will be processed; accurate and, if necessary, updated;
- Kept in a form which permits identification of data subjects for a period of time not exceeding the achievement of the purposes for which they are processed;
- Processed in such a way as to ensure adequate security of personal data, including protection against unauthorized or unlawful processing, loss, destruction or accidental damage, by taking appropriate technical and organizational measures.

5. Transfer of data

Personal data are stored on servers located at the company's headquarters within the European Union. However, the data controller, should it become necessary in the future, will have the option to move the servers outside the European Union as well. In this case, the data controller assures as of now that the transfer of data outside the European Union will take place in accordance with
applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission.

6. Data retention time

The data controller will process personal data for the purposes indicated and retain the same for future personnel selections.

7. Rights of the data subject

You are expressly granted the rights set out in Articles 15, 16, 17, 18, 20 and 21 of Regulation (EU) 2016/679 and in particular:
- the right of access, i.e., the right to know what personal data will be processed;
- the right to request corrections of any errors and/or omissions;
- the right to obtain the deletion of data;
- the right to restrict data processing;
- the right of data portability, i.e., the right to receive all processed personal data in a structured, machine-readable format;
- the right to object to the inclusion of all information.

You are also granted the right to file a complaint with the Supervisory Authority.

8. Methods of exercising rights
The rights listed in the previous point may be exercised at any time by sending:
- a registered letter A/R to the company "Rodo Firenze S.p.a.", in the person of the legal representative pro - tempore, Contrada Santa Caterina 12, 62010

- Mogliano (MC);
- or a PEC (Certified Electronic Mail) e- mail to:
rodofirenzesrl@legalmail.it.

9. Update
This policy may be updated, including in consideration of regulatory changes and/or measures of the Privacy Guarantor.