snowspace

Sir/Madam,

pursuant to Italian Legislative Decree No. 196/2003 (Personal Data Protection Code), which has replaced Italian Law No. 675/1996, the personal details you provide shall be processed according to principles of correctness, transparency and legality and with a view to protecting your privacy and rights. The aim of this Privacy Policy is to describe the registration process to receive the SNOWSPACE® newsletter. This information is also provided pursuant to Section 13 of Italian Legislative Decree No. 196/03 – Personal Data Protection Code – to everyone who, through the TECNICA SPA portal or website, supplies the information required to subscribe to the newsletter. This information is provided purely for the abovementioned service and not for other websites which may be consulted by the user via the relevant links.

SNOWSPACE will collect and process the following kind of data in compliance with the provisions of Italian Legislative Decree No. 196/2003.

Types of data processed and the purposes of the processing 1. Registration data When users register, they will be asked to provide personal information, also through IT tools and procedures and this information may be processed by TECNICA SPA for the following purposes: a) to allow users access to on-line services and, in particular, to enable TECNICA SPA to fulfil any requests made to receive information b) subject to user consent, to allow TECNICA SPA to provide an efficient information service c) subject to user consent, to carry out customer satisfaction surveys in connection with the service in order to analyse the results.

2. Navigation data The IT systems and software procedures for running the pages on the website linked to the SNOWSPACE newsletter acquire, in the ordinary course of operations, some personal data whose forwarding is implied in the use of the communication protocols of the Internet. This information is not collected for the purpose of being associated with identified interested parties; however on account of its nature, it may lead to the user being identified by processing and reference to data held by third parties. This information includes IP addresses or domain names of the computers used to connect to the website, URI (Uniform Resource Identifier) addresses of resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code that indicates the response status given by the server (ok, error etc.) and other parameters concerning the user’s operating system and IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the website and to verify that it functions properly. They are deleted immediately after processing. The data may be used to verify responsibility in the case of hypothetical IT crimes which could damage the site: except for this specific case, the data are kept for the time specified under the applicable Law, namely for such time as is strictly necessary to provide the user with the service requested and to guarantee the transmission of the information.

3. Cookies No user personal data is acquired by the site using cookies. No use is made of cookies for transmission of information of a personal nature nor are so-called persistent cookies or any other kind of user tracking systems used. The use of session cookies (which are not permanently memorised on the user’s computer and disappear when the browser is switched off) is strictly limited to the transmission of the session identifiers (random numbers generated by the server) needed to provide secure and efficient exploration of the site. The session cookies used in this site avoid recourse to other IT techniques which may be potentially invasive of the privacy of users’ navigation and do not allow users’ personal identification to be acquired. Cookies may be disabled at any time through the browser settings which can also be set to delete them after each session. If cookies are deemed useful in cases other than the ones mentioned above, their purpose will be made clear.

Processing methods Data is processed using electronic, automated, IT or telematic means for the purposes outlined above. Security measures are in place to guarantee the security and confidentiality of the data.

Provision of data The provision of Registration Data as per point 1) letter a) of this informative note is compulsory and failure to provide, even in part, the data indicated by an asterisk next to the fields in the Registration area of the site will result in TECNICA SPA being unable to fulfil the request. The provision of Registration Data for the purposes detailed in point 1, letters b) and c) is optional and there shall therefore be no consequences should the user decide not to provide them. TECNICA SPA , however, will be unable to inform the user of the latest news and will not be able to check his/her level of customer satisfaction.

Security

TECNICA SPA guarantees the highest level of security when processing user data and has security measures in place such as firewalls and data encryption. It also controls physical access to both the buildings and the files and only staff specially designated to the processing of the personal information is authorised to access them.

Communicating data With the exception of information forwarded to fulfil legal obligations, all the collected and processed data may be disclosed to the following persons for the purposes stated above: a) third parties appointed by TECNICA SPA to carry out activities directly linked to or instrumental in providing the services offered through the TECNICA SPA website.

Under no circumstances will personal data be disclosed. The data controller is TECNICA SPA and is legally represented by REPRESENTATIVE PROTEMPORE at VIA FANTE D'ITALIA, 56 31040 GIAVERA DEL MONTELLO (TV)

(The right to access personal data and other rights) The parties to whom the personal data refer are entitled at any time to contact the joint data controllers or the people in charge of the processing without formal obligations or use the form for the protection of personal data provided by the Data Protection Commissioner (downloaded free of charge on www.garanteprivacy.it) to enforce their rights as per section 7 of the Personal Data Protection Code, which is reproduced in full below for your convenience: Section 7 of Italian Legislative Decree No. 196 dated 30 June 2003

1. You are entitled to request confirmation whether any personal data is held that relates to you, even if the data have not yet been registered, and to be notified of their contents in an intelligible form.

2. You are entitled to obtain details of: a) the origin of the personal data; b) the purposes and methods of the processing; c) the logic applied when processing data with electronic tools; d) the identity of the data controller, the people in charge and the appointed representative as per section 5, paragraph 2; e) the people or categories of people who your personal data may be disclosed or made available to in their capacity as the appointed representative in Italy, people in charge or their representatives.

3. You are entitled to: a) update, correct or, where interested, complete the data; b) delete them, demand they be made anonymous or that data held in violation of law be blocked, including data which need not necessarily be kept for the purpose for which they have been collected or later treated; c) request certification that the parties whom the data have been disclosed or made available to, have been informed of the actions and contents of points a) and b), unless this requirement proves impossible or involves a disproportionate use of resources compared to the right that is to be protected.

4. You are entitled to object, in whole or in part: a) to the processing of your data on legitimate grounds, even though they are relevant to the purpose for which they have been collected; b) to the processing of your personal data when collected to send advertising material or for direct selling, market research or sales purposes.