Privacy Policy for Consent to the Processing of Personal Data (pursuant to Article 13 of EU Regulation No. 2016/679 and Legislative Decree No. 101/2018)

In accordance with Article 13 of Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101 of August 10, 2018, and Article 13 of EU Regulation No. 2016/679 (hereinafter "GDPR 2016/679") on the protection of individuals concerning the processing of personal data, we would like to inform you that the personal data you provide will be processed in accordance with the aforementioned regulations and the confidentiality obligations of Corallo srls, the data controller.

The website www.dolceriacorallo.it is owned by Corallo Srls, with registered office in C.da Raddusa Vanella 98, 97015 Modica (RG), VAT number 01642360885, registered in the Companies Register of RG – R.E.A. no. RG135534 (hereinafter also referred to as the "Company"). For any clarification and complaints, you can contact Corallo srls by sending an email to info@dolceriacorallo.it or calling (+39) 0932 771779.

PURPOSES OF DATA PROCESSING

Consenting to the processing of data is mandatory, as the lack of consent would make it impossible to carry out what is required by the regulations. This clause respects the principle of data minimization under Article 5, paragraph 1, letter C) of the GDPR (General Data Protection Regulation) and, in general, all the principles contained in Article 5, as the requested data is adequate, relevant, and limited to what is necessary for the purposes for which they are processed (Article 13, paragraph 1, letter C), GDPR). The personal data provided may be processed for administrative purposes and to fulfill legal obligations or respond to requests from the judicial authority. The legal basis for processing is the fulfillment of one or more legal obligations (Article 13, paragraph 1, letter C), GDPR).

PRIVACY POLICY FOR VISITORS AND E-COMMERCE ACTIVITIES

The Privacy Policy aims to describe in detail the management methods of the website www.dolceriacorallo.it(hereinafter "site") regarding the processing of users' personal data. The information is provided in relation to the regulations on the processing of personal data and to those who use the web services. Regarding the types of personal data processed and the purposes of the processing, we inform visitors/users that all personal data collected through browsing this site are processed solely for the purpose of user identification. The activity is managed based on strict ethical principles, and we are committed to preserving and protecting the privacy of our customers, so storage only occurs for the use of the website and its exercises. Below are some information on the types and purposes of cookies used on the Site:

• Technical Cookies: necessary to allow site navigation and the use of certain products and services. They are used, for example, to recognize the user who has logged into their email and keep the session open even when visiting other pages on the site, or to ensure some security measures of the site and monitor its correct operation.
• "Google Analytics" Cookies: Google Analytics is a web analytics service provided by Google Ireland Limited ("Google"). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compiling reports, and sharing them with other Google services.
• Preference Storage Cookies: useful to facilitate the correct use of the site by the user and to create a browsing experience in line with the expectations expressed; used, for example, to keep track of the chosen language.
• Advertising Cookies: aimed at delivering advertising spaces. They could be used to calculate the value of the advertising offer, identify individual advertising messages, and know which ones have been selected and when. Other advertising cookies, such as Behavioral Cookies, are used to deduce your "profile" as a browser and subsequently propose advertising messages conforming to your behavior online (including externally) and presumably in line with your interests. This "profile" is anonymous, and the information collected through these cookies does not allow identification.
• Social Network Cookies: allow you to share the contents of the site you are visiting with other users or to express your opinion about it; typically used to activate the "Like" or "Follow" functions of Social Networks. These functions allow Social Networks to identify their users and collect information even while browsing other sites. We recommend checking the privacy policy of each Social Network you use to learn about the purposes and methods of processing personal data carried out by them.
• System Logs: For needs related to operation and maintenance, this Application and any third-party services it uses may collect system logs, i.e., files that record interactions and may also contain Personal Data, such as the User's IP address.

PURPOSE OF DATA PROCESSING

The data provided by you will be used solely for the purpose related to the navigation of the site and the purchasing procedure. In case of interruption of a sales transaction, we will notify you by email to check the status of the payment or the possible cancellation of the transaction. With explicit consent, we will contact you for purely advertising and/or promotional purposes via email, SMS, telephone. According to Article 7 of the GDPR, the processing of personal data is only permitted with the explicit consent of the data subject, which must be freely, informed, and express. The data subject is free to provide their personal data as requested from time to time, and their failure or inaccuracy could make it impossible to provide the requested services. Consent can be revoked at any time by sending a request to the following email address: info@dolceriacorallo.it.

PROCESSING AND STORAGE METHODS

The processing will be carried out automatically, in compliance with the provisions of Article 32 of the GDPR 2016/679, as amended by Legislative Decree No. 101 of August 10, 2018, on security measures, by specifically authorized subjects and in compliance with what is provided for by Articles 29 GDPR 2016/679. We inform you that, in compliance with the principles of lawfulness, purpose limitation, and data minimization, according to Article 5 of the GDPR 2016/679, subject to your free and explicit consent expressed at the bottom of this information, your personal data will be kept for the period of time necessary to achieve the purposes for which they are collected and processed and until the expiration of the project/assignment mentioned above. The company undertakes to destroy, after this period, all documents for which the consent to data processing is not renewed.

DATA SUBJECT'S RIGHTS

At any time, you may exercise, in accordance with Article 7 of Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101 of August 10, 2018, and Articles 15 to 22 of EU Regulation No. 2016/679, the right to:

• ask for confirmation of the existence or not of your personal data;
• obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated, and, when possible, the retention period;
• obtain the correction and deletion of data;
• obtain the limitation of the processing;
• obtain data portability, i.e., receive them from a data controller, in a structured, commonly used, and machine-readable format, and transmit them to another data controller without hindrance;
• object to processing at any time, including processing for direct marketing purposes;
• object to an automated decision-making process relating to individuals, including profiling;
• ask the data controller for access to personal data and their rectification or deletion or the limitation of the processing concerning them or to object to their processing, in addition to the right to data portability;
• revoke consent at any time without affecting the lawfulness of the processing based on the consent given before revocation;
• lodge a complaint with a supervisory authority (e.g., the Privacy Guarantor).

Modica, 05/08/2021