Information pursuant to and for the purposes of art. 6, EU Regulation n. 679/16, to the articles. 13-14, Reg EU 2016/679 (hereinafter, GDPR). The EU Regulation for the protection of personal data n. 679/16 is aimed at ensuring that the processing of your personal data is carried out in compliance with the rights of fundamental liberties and the dignity of persons, with particular reference to privacy and personal identity. Therefore, it is our duty to inform you about our data privacy and privacy policy. We inform you, pursuant to and for the purposes of Articles. 13-14 GDPR, that your data will be processed in the manner and for the following purposes. The company undertakes to respect and protect the personal data voluntarily and explicitly provided by you in compliance with the provisions of law to ensure the security, accuracy, updating and relevance of the data with respect to the purposes of consultation of the site. The personal data provided by you are used for cognitive purposes for the applications installed on the site itself, and are communicated to third parties only if this is strictly necessary and functional to that purpose. The data are processed by appointed responsible personnel (and sub-contracted managers) to the processing of data, only if the processing is necessary. 1. Object of treatment The Data Controller processes personal data, identifiers (name, surname, company name, address, telephone number, e-mail) – hereinafter “personal data” – which you have communicated during the consultation of the company website, following filling out the form on the website to make a request for contact regarding the products offered “. 2. Purpose of the processing Your personal data are processed: A) without your express consent (pursuant to article 6, paragraph 1 of the GDPR) for the following service purposes: – collect data for the formulation of commercial offers; – fulfill the contractual and tax obligations deriving from relations with you that may have been signed; – fulfill the obligations established by law, EC regulation, community legislation or an order of the Authority; – exercise the rights of the owner, for example the right to defense in court; B) only subject to your specific and distinct consent (pursuant to article 7 of the GDPR), for the following marketing purposes: – sending you via e-mail, mail and / or telephone contacts, commercial communications and / or advertising material on products or services offered from the Owner and detection of the degree of satisfaction on the quality of services. Please note that if you are already a customer, we may send you commercial communications relating to products of the owner similar to those you have already used, except your dissent. 3. Processing methods Pursuant to art. 5 GDPR the processing of your data will be based on the principles of correctness, lawfulness, transparency and can also be done through automated methods designed to store, manage and transmit (through the operations referred to in Article 4 No. 2) GDPR and will take place using appropriate tools to ensure security and confidentiality through the use of appropriate procedures that avoid the risk of loss, unauthorized access, illicit use and dissemination. Your personal data are subjected to both paper and digital processing. The Data Controller will process the personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for the purposes of supply and obligations imposed by law. 4. Data communication Data may be made available to the other employees and collaborators of the Data Controller in their capacity as data controllers, as well as to be visualized by the external person who oversees our computer system and that our structure has provided to appoint external manager, your data may also be disclosed to companies and / or professional firms that provide – in outsourcing – assistance, advice or collaboration to the data controller, in accounting, administrative, tax, legal, tax. We inform you that all our suppliers are appointed as external sub-managers and subject to a validation and control process in terms of privacy and quality of the services requested. Without the need for express consent pursuant to art. 6, c.1 GDPR, the Data Controller may communicate your data for the purposes referred to in art. 2.A) to judicial authorities, as well as to those subjects to whom the communication is obligatory by law for the accomplishment of said purposes. Your data will not be disclosed in any other way. 5. Retention times Your personal data will be kept for the time necessary for the fulfillment of relationships between the parties and in any case not for more than 10 years from the date of termination.

The provision of data for the purposes referred to in point 2.B) is optional. It can therefore decide not to give any data or to subsequently deny the possibility to process data already provided: in this case, it will not be able to receive commercial communications and advertising material concerning the products offered by the Data Controller. However, you will continue to be entitled to the information referred to in point 2.A). 8. Rights of the interested party You have the right to ask the Owner for access to data concerning you, their correction or deletion, the integration of incomplete data, the limitation of processing; to receive data in a structured format, commonly used and readable by automatic device; to revoke any consent given regarding the processing of your data at any time and object in whole or in part to the use of data; to propose a complaint to the Authority, as well as to exercise the other rights recognized to you pursuant to art. 15-22 EU Regulation n.679 / 16. 9. How to exercise rights You may exercise your rights at any time by sending an e-mail to the company’s e-mail address. The interested party has the right to lodge a complaint with a control authority. If you are no longer interested in corporate communications and would like to cancel your position, you can do so by sending an e-mail to the company address. 10. Data controller, responsible Backstage s.r.l. – Via Bissone 11/13 – 27010 Santa Cristina and Bissone (PV) – C F / P VAT 11362560150 – Tel. 038270788 – PEC backstagesrl@legalmail.it, as Data Controller, in the person of its legal representative. The Data Controller uses the internal controllers and external sub-managers appointed to achieve the purposes specified in point 2. The updated list of the persons responsible for the treatment of the Joint Data Controllers and recipients is kept at the registered office of the Data Controller. 11. Changes This information may be subject to change. If substantial changes are made to the use of customer data by the company, this will notify the user by publishing them with the maximum evidence on their web pages. 12. Data acquired during navigation The computer systems and software procedures of our site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users who connect to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, any file size obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and the user’s computer environment. The data could be used to ascertain responsibility in case of hypothetical computer crimes to the detriment of the site: except for this eventuality, data on web contacts persist for a time not exceeding that necessary for the purposes for which they are collected and subsequently treated. On the site there is a SCRIPT Google Analytics that traces the behavior of users on the site and a contact form that does not record any data in the DB but sends only the information via email to the recipients of the form. Cookies are “preferred” (they memorize the user’s preferred language and at the next access they take into account the choice) and therefore persistent and technical session. The site does not collect any data within it, the data that are collected through it are then conveyed by Google Analytics and the company. Google Analytics Cookies (_utma, _utmz, _gat, _ga, _gid) Google Analytics is a web analytics tool that allows the site owner to understand how visitors interact with it. The Google Analytics tool uses proprietary cookies to monitor visitor interactions with respect to the site that benefits from its features. These cookies are used to store information, such as the time when the current visit occurred, any previous visits to the site by the same visitor and the site that reported the web page to the visitor. The Google Analytics tool collects information anonymously and records website trends without identifying them