Your personal data shall be transmitted to us only following your consent to their processing. Pursuant to Art. 13 of Legislative Decree. 196/2003 (Personal Data Protection Legislation), our company, as data controller, informs you that the data – collected directly and exclusively from the data subjects via the form filled out – shall be processed in accordance with applicable legislation. All liability, both of a civil and criminal nature, resulting from providing false, mendacious information, or information that is not in good faith or that otherwise does not reflect the truth shall be the sole responsibility of the person who provided it, and no responsibility can therefore be attributed to Area4 Sas.

*1. Purpose of processing.*

The purposes of data processing are strictly related to and connected with the execution and performance of obligations pursuant to the law, regulations and EU legislation, as well as provisions issued by competent authorities and by supervisory and control bodies. Providing your data is free and optional. Should you fail to provide the data strictly required for the creation of your user profile to access the restricted area and our company blog, and for the purposes strictly related to its use, it shall be impossible for the data controller to enable your access. The data collected may, with your consent, also be processed to assign you a user-name and password that will allow you to have a profiled access to the REAG’s system. If you do not provide your consent for these purposes, the data controller shall not be able to assign any authentication credentials to you.

*2. Processing methods.*

Data processing shall be carried out in such a way as to ensure data confidentiality and security and may be carried out using manual, computerized and telematic means suitable for storing, handling and transmitting such data. The processing logics shall be strictly connected to the specified purposes.

*3. Data disclosure.*

As app manager via this website, our company may be legally bound to disclose user data to legitimate authorities as well as supervisory and control bodies, for purposes strictly related to obligations under the law, regulations and EU legislation. Within the scope of its business activities, according to its organization and the services provided, our company uses, in addition to its own employees (individuals who may become aware of the data for the purposes referred to in point 1 of this notice), external entities, companies or individuals appointed by the data controller, or data managers, to process the data received through the website for performing its institutional purposes and for other purposes as referred to in point 1 herein, and to monitor (including by statistical method) accesses to this site. As regards the disclosure of your data to third parties for these purposes, you shall have the right to deny your consent by clicking on “I do not consent”. We inform you, however, that in the event that you do not consent to the communication of your personal data to the aforementioned entities, companies or external parties, and to the related processing of the communicated data, it shall be impossible for the data controller to fulfil the related obligations and consequently assign you the authentication credentials for access to the application.

*4. Rights of the data subjects.*

The data subjects may exercise their rights under Art. 7 of Legislative Decree 196/03 :

1. The data subject shall have the right to obtain confirmation of the existence or non-existence of personal data concerning him/her, even if not yet recorded, and its communication in an intelligible form.
2. The data subject shall have the right to obtain indication: a) of the origin of personal data; b) of the purposes and methods of processing; c) of the logic applied in the event of processing carried out with the aid of electronic means; d) of the identification details of the data controller, data managers and designated representative in Italy, where applicable; e) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of such data in their capacity as designated representative in Italy, as data managers or data processors.
3. The data subject shall have the right to obtain: a) the updating, correction or, when required, addition of personal data; b) the cancellation, transformation into anonymous form or blocking of any data processed in violation of the law, there including data that are not subject to required storage in relation to the purposes for which such data were collected or subsequently processed; c) certification that the operations referred to in letters (a) and (b) above have been notified, also as regards their content, to those to whom the data have been communicated or disseminated, except where this proves impossible or involves the use of means manifestly disproportionate to the protected right.
4. The data subject shall have the right to object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning him/her, even if such data is within the scope of collection purposes; b) to the processing of personal data concerning him/her for the purpose of sending advertising or direct sales material, or for carrying out market research or sending commercial communications.

The above rights may be exercised directly or by conferring, in writing, proxy or power of attorney to individuals or associations. In connection with the above, you may directly, at any time, exercise your rights by writing to our company. We would also like to inform you that for technical reasons, the time required for deleting your personal data shall involve a term of not more than 5 working days.