ATTACHMENT A Information note on the processing of personal data Dear User, pursuant to Italian law dealing with the protection of people and other entities with respect to the processing of personal data, your personal data processing will be based on the principles of correctness, lawfulness, transparency and protection of your privacy and rights. 1.Purpose of data processing Processing mainly concerns data provided in pending subscription to the web site www.trade4industry.com aimed at: (a)correctly performing activities that will be strictly functional to the management of trade4industry®'s network and related services, which, by way of example, the management (i) of subscription to app4industry®'s network, (ii) of the issue of the pertaining application, (iii) of activities to enable fruition and acknowledgment of sales services and other benefits connected to trade4industry®'s network (management of connected activities by subscribers are to be included) and (iv) of the possible contentious or of the safeguard of SC-EDIT's rights. (b) fulfilling possible legal and/or regulatory obligations (e.g. financial and accounting duties), System data Overview Reports and internal supervision. (c) carrying out (i) marketing, newsletter, email, dispatch activities or any other communication activity with promotional, informational and/or advertising content in relation to trade4industry®'s products or services, including free gift items, (ii) market research activity (getting in touch with user by means of correspondence, phone, email) and (iii) highlighting activities related to all initiatives dedicated to trade4industry®'s users, including possible initiatives reserved to users on the day of their birthday. (d) carrying out provider profiling activities, such as user's habits/tendencies or consume choices analysis. (e) filing information in user's terminal equipment (cookie). (f) analyzing data pertaining to web traffic; (c) identifying user's location (geolocation) 2.Modality of data processing Data will be processed according to Italian law dealing with applicative operations indicated. Such procedures can be carried out without the aid of electronic or computerized tools. 3.Data communication and disclosure. International data transfer. To guarantee the whole completion of the service, data access will be mainly fulfilled by agents in trade4industry®'s marketing department. Data will be furthermore available, exclusively for the development of delegated activities, to trade4industry®'s providers supplying related services, such as companies providing information technology services; hosting services societies or companies contributing to customer profile management, conducting market researches, organizing events, commercial and promotional initiatives, as well as companies carrying out commercial services on behalf of Trade4industry®. Data will be also available, according to above-quoted activities, to following subjects or subject categories: enterprises, companies, corporations, consortiums, financial institutions, organizations working inabroad with commercial, market research, marketing and management of informative, insurance, financial brokering, factoring and debt collection finalities. Third parties cessionaries of company, branch of company or contracts of ownership of trade4industry® have to be included. User's data won't be otherwise spread or shared with third party, including possible business partners with which Trade4industry® concluded agreement in favour of application or website's users. Data that are the subject of processing may be transferred from the State's territory to countries outside the European Union and third Countries besides European Union pursuant to purposes of poin1 and within limits and modalities prescribed. 4.Data Subject's rights 1. A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form. 2. A data subject shall have the right to be informed a) of the source of the personal data; b) of the purposes and methods of the processing; c) of the logic applied to the processing, if the latter is carried out with the help of electronic means; d) of the identification data concerning data controller, data processors and the representative designate; e) of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative in the State's territory, data processors or persons in charge of the processing. 3. A data subject shall have the right to obtain a) updating, rectification or, where interested therein, integration of the data; b) erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed; c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected. 4. A data subject shall have the right to object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection; b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys. 5. Data controller and data processor Data controller that is “any natural or legal person, public administration, body, association or other entity that is competent, also jointly with another data controller, to determine purposes and methods of the processing of personal data and the relevant means, including security matters” is SC-EDIT. Data processor, that is “any natural or legal person, public administration, body, association or other agency that processes personal data on the controller's behalf” is SC-EDIT. 6.Termination of contract In case of termination of contract between trade4industry and the User, subject's data will be stored for no longer than a trimester, for exclusively administrative purposes.