Information on the processing of personal data Privacy Policy of Avicel

(last update 02/07/2018)

This website collects Personal Data of its Users pursuant to Article 13 of EU Regulation 2016/679 (hereinafter referred to as "GDPR").

Avicel s.r.l.

Via Monte Rosa, 27 - Limbiate (MB)

VAT NUMBER 00962380960

info@avicel.it

The data controller informs you that your personal data will be processed in compliance with the aforementioned legislation, in order to guarantee the rights, fundamental freedoms and dignity of natural persons, with particular reference to confidentiality and personal identity.

The data may be disclosed to third parties appointed as data processors pursuant to Article 28 of the GDPR and in particular to banks, companies active in the insurance field, service providers strictly necessary for the performance of business activities, or to consultants of the company, where this is necessary for tax, administrative, contractual or for needs protected by current legislation.

Your personal data, or the personal data of third parties in its ownership, may also be communicated to external companies, identified from time to time, to which the Owner entrusts the performance of obligations arising from the assignment received to which will be transmitted only the data necessary for the activities requested of them.

All employees, consultants and any other "natural person" who carry out their activities on the basis of instructions received from the Data Controller, pursuant to art. 29 of the GDPR, are referred to as "Data Processors" (hereinafter also "Persons in Charge").

The Data Controller shall give appropriate operating instructions to the Data Processors or Managers, if any, appointed, with particular reference to the adoption and observance of security measures, in order to guarantee the confidentiality and security of the data. With reference to the aspects of protection of personal data, the user is invited, in accordance with art. 33 of the GDPR, to inform the Data Controller of any

circumstances or events from which a potential "data breach" may derive in order to allow an immediate evaluation and the adoption of any actions aimed at countering such event through the addresses indicated above.

The Data Controller is also required to communicate the data to Public Authorities upon their specific request.

The types of Personal Data collected by this website, either independently or through third parties are: Personal References, Cookies and Usage Statistics Data.

Other Personal Data collected may be indicated in other sections of this privacy policy or by means of information texts displayed at the same time as the Data is collected.

Personal Data may be entered voluntarily by the User through the appropriate contact form, for the sole purpose of identification, for the management of personal data and communications expressly requested by the User.

Cookies created by the site and the services it uses do not store your personal data that allow you to trace and/or know your identity directly and do not represent a risk to your privacy or to the integrity of the computer systems you use to access the Internet communication network or the Site.

Any use of cookies, or other tracking tools, by this site or the owners of third-party services used by this site, unless otherwise specified, is intended to identify the User and record their preferences for purposes strictly related to the provision of the service requested by the User.

Failure by the User to provide certain Personal Data could prevent the proper functioning of the site and the inability to provide its services.

The User assumes responsibility for the Personal Data published or shared through this site and guarantees the right to communicate or disseminate them, releasing the Owner from any liability to third parties.

To view more information about the cookies on the site and their purpose visit this address: Cookie policy

In relation to specific services offered by Google Inc., a specific integration has been prepared and can be viewed at this address: Privacy Policy Google Analytics

Your data are collected and recorded in a lawful and correct manner for the purposes indicated above in the

compliance with the principles and requirements set out in Article 5(1) of the GDPR.

The Owner shall process the Personal Data of Users taking appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of the Personal Data.

The processing is carried out by computer and/or telematic means, with organisational methods and with logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, the Data may be accessed by categories of employees involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external parties (such as third party technical service providers, couriers, hosting providers, information technology companies, communication agencies) also appointed, if necessary, Data Processors by the Data Controller. The updated list of Managers may always be requested from the Data Controller.

The Data is processed at the Data Controller's premises, by means of web servers located at OVH (France) and in any other place where the parties involved in the processing are located. For further information, please contact the Data Controller.

The personal data processed by the data controller will be processed for the entire duration of the assignment and also subsequently to assert or protect their rights or for administrative purposes and / or to implement obligations arising from the regulatory framework and applicable legislation pro tempore and in compliance with specific legal obligations on data retention.

User Data are collected solely to allow the Owner to provide its services.

The types of Personal Data used for each purpose are indicated in the specific sections of this document.

We inform you, therefore, that the processing of personal data is based on the provisions of art. 6 paragraph 1 letter. b) of the GDPR.

The newsletter is sent by e-mail to those who explicitly request it, filling out the form to subscribe to the newsletter and authorizing us to process their personal data. The provision of data is optional. Refusal to provide data makes it impossible to obtain the newsletter service.

No person under the age of 18, without the prior consent of his or her parents or legal guardian, may send information to this website, nor may he or she make purchases or carry out legal acts on this website without such consent, unless this is permitted by the regulations in force.

The User's Personal Data may be used for defence by the Owner in court or in the stages leading up to its possible establishment, against abuse in the use of the same or related services by the User.

The User declares to be aware that the Owner may be required to disclose the Data at the request of public authorities.

At your request, in addition to the information contained in this privacy policy, this website may provide you with additional and contextual information regarding specific services, or the collection and processing of Personal Data.

For operation and maintenance purposes, this Application and any third-party services used by it may collect System Logs, i.e. files that record interactions and may also contain Personal Data, such as the User's IP address.

Further information regarding the processing of Personal Data may be requested at any time from the Data Controller using the contact information.

In accordance with, within the limits and conditions provided for by the regulations on the protection of personal data concerning the exercise of the rights of data subjects, as provided for in art. 15-22 of EU Regulation 2016/679, with regard to the processing operations covered by this legislation, the subjects to whom the Personal Data refers have the right at any time to obtain confirmation of the existence or otherwise of the same from the Data Controller, to know the content and origin, to verify its accuracy or request its integration, deletion, updating, rectification, transformation into anonymous form or blocking of Personal Data processed unlawfully, and to oppose in any case, for legitimate reasons, to their automated processing, including profiling, for legitimate reasons, and in any case to oppose their processing. Requests should be addressed to the Data Controller through the contacts made available on the site itself.

This website does not support "Do Not Track" requests.

To find out if any third party services used support them, the User is invited to consult the respective privacy policy.

The Data Controller reserves the right to make changes to this privacy policy at any time by advertising it to Users on this page. Therefore, please consult this page often, taking as reference the date of the last change indicated at the bottom. In the event of non-acceptance of the changes made to this privacy policy, the User is required to cease using this website with the right to request the Data Controller to remove their Personal Data. Unless otherwise specified, the above privacy policy will continue to apply to Personal Data collected up to that time.

The Data Controller is responsible for this privacy policy.

According to art. 17 of the GDPR, the user has the right to request the cancellation (right to forget) of their stored data, the transformation into anonymous form or blocking of data processed unlawfully, and to oppose in any case, for legitimate reasons, to their treatment. Cancellation requests must be made by sending a specific request to Avicel S.r.l. via monte rosa 27, 20812 - Limbiate (MB), or by sending an e-mail to: privacy@avicel.it