12.1 The Supplier protects the privacy of their customers and ensures that the data processing complies with the provisions of the privacy legislation of Legislative Decree June 30th, 2003, No. 196 [1].

12.2 The personal and fiscal data collected directly and/or through third parties by the Supplier as a data controller, are collected and processed in printed, informatics or telematics form, in relation to treatment methods with the purpose of registering the order and provide the procedures for the execution of this contract and the necessary communications, in addition to the fulfillment of any legal obligations, as well as to enable effective management of business relationships to the extent necessary to perform the best service required (Article 24, paragraph 1, let. b, Legislative Decree No. 196/2003) [2].

12.3 The Supplier is obliged to treat the data and information provided by the Purchaser as confidential and not to disclose them to unauthorized persons or to use them for purposes other than those for which they were collected or to transmit them to third parties. Such data can be disclosed only at the request of court or other body authorized by law.

12.4 Personal data will be disclosed after signing a confidentiality agreement, only to third parties who carry out activities necessary for the execution of the contract and disclosed only for that purpose.

12.5 The Purchaser has the rights under Article 7 of Legislative Decree No. 196/03, namely:

the right to:

a) update, correct or, when interested, integrate the data;
b) cancel, keep anonymous or block the data processed unlawfully, including the data which need not be kept for the purposes for which the data were collected or subsequently processed;
c) obtain certification that they were notified of the operations in letters a) and b), also regarding their content and to whom the data were communicated or disclosed, except when such requirement proves impossible or clearly disproportionate to the protected right. The party has the right to object, in whole or in part:
i) for legitimate reasons regarding the processing of their personal data, although pertinent for collection purposes;
ii) for the processing of their personal data for purposes of sending advertising materials or direct selling or for carrying out market research or commercial communication.

12.6 The disclosure of personal data by the Purchaser is a necessary condition for the proper and timely execution of this contract. Failing that, the request by the Purchaser can not be fulfilled.

12.7 In any case, the collected data will be kept for a period of time not exceeding that which is necessary for the purposes for which they were collected and subsequently processed. Their removal will take place in a safely manner.

12.8 The Supplier is the owner of the collection and processing of personal data, to whose corporate headquarters the Purchaser may direct every request.