INFORMATION NOTICE CONCERNING THE PROCESSING OF PERSONAL DATA OF ONLINE USERS, PURSUANT TO REGULATION (EU) 2016/679 (‘GDPR’) DATA CONTROLLER: L’Innominato S.p.A., Via Giorgio e Guido Paglia 1/D, 24122 Bergamo (Italy), Tax ID and VAT No. 03328460161, email address: privacy.linnominato@percassi.com  DATA PROTECTION OFFICER (“DPO”): You may reach the DPO at the following e-mail address: dpo.innominato@percassi.com.    PERSONAL DATA PROCESSED  Browsing data, including, but not limited to, IP address, location, names and domain of your computer, etc., and data obtained through the use of widgets/social buttons.    WHAT ARE COOKIES?  Cookies are data created by a server and stored in text files on the hard disk of the computer or any other device (smartphone, tablet) used to access the Internet, which make it possible to collect information about the user’s website browsing. Cookies may be permanently stored on your computer for varying durations (persistent cookies), or they may disappear when you close your browser or have a limited lifetime (session cookies). Cookies may be installed by the website you are visiting (first-party cookies) or by other websites (third-party cookies).      HOW WE USE COOKIES 

1. Technical cookies: 

1. Session/navigation: The use of session cookies is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server), which are required for a safe and efficient navigation of the site and its applications. The session cookies used on this website make it possible to avoid the use of other IT techniques that could potentially compromise the confidentiality of users’ browsing, and they do not allow personal data identifying the user to be collected. They do not require your consent. 

1. Persistent cookies: Persistent cookies remain on the device even after leaving the website, until the user deletes them or until their expiry date is reached. This website creates this type of cookie and stores them on the device so that they can be read when the user visits the website again. This means, for example, that your set preferences (e.g. wish list, shopping cart, etc.) can still be found on subsequent visits to the website. They do not require your consent. 

1. Analytical cookies: Cookies installed to collect aggregate information, mainly of a statistical nature (time spent on a web page, number of website visitors…). 

1. First-party analytical cookies: Similar to technical cookies, in that they are installed directly by the website you are visiting to improve its usability. They do not require your consent. 

1. Third-party analytical cookies: Analytical cookies created and installed by third parties to analyse users’ browsing behaviour, in order to produce statistics on visits or to improve the content offered, display similar products and potentially place targeted advertising on web pages. The system used is Google Analytics 4, a web analytics service provided by Google LLC (“Google”). Google Analytics 4, like other systems, uses cookies to enable the website to analyse how users interact with it. The information generated by the cookies about users’ interactions with the website (including IP addresses) will be transmitted to and stored on Google’s servers in the United States. Google will use this information for the purpose of tracking and evaluating use of the website, compiling reports on website activities and providing other services relating to Internet usage. Google may also transfer this information to third parties where required to do so by law or where such third parties process this information on Google’s behalf. Google will not associate the user’s IP address with any other data held by Google. Users may reject the use of cookies by selecting the appropriate settings on their browser, but this may prevent them from using all the website’s functions. By accepting cookies, you consent to the processing of data by Google in the manner and for the purposes set out above. In any case, the IP address will be anonymised. 

1. Profiling cookies: These cookies track the user’s web browsing behaviour, and create profiles based on their taste, habits, choices, etc. They can be used to send advertising messages to the user’s terminal, according to the preferences already expressed by the user while browsing online. These cookies require your consent. 

1. First-party profiling cookies: Not present. 

1. Third-party profiling cookies: Used and installed by third parties to track users’ browsing behaviour and create profiles on their tastes, habits, choices… These cookies are managed by third-party companies, such as Google, etc.. The website may also feature social buttons/widgets, i.e. special “buttons” with social media icons on them (e.g. Facebook and Twitter) that allow social platforms to detect the IP address of anyone visiting the Company’s website. These “buttons” allow users who are browsing the site to reach the social media pages and interact directly by clicking on them. By clicking on social buttons/widgets, the social media website acquires data on the user’s visit to the Company’s site, and simultaneously issues its own profiling cookies. 

  HOW COOKIES ARE INSTALLED  The analytical and technical cookies described above will be installed when accessing this website. Cookies that require your consent may be accepted together by clicking on the “Accept all” button in the banner containing the short information notice, which appears whenever you visit the website. Alternatively, you can reject all of them, by clicking on “Reject all”, or accept only some of them, by clicking on the “Learn more and customise” button in the same banner.    HOW TO CHANGE YOUR COOKIE SETTINGS  You can, at any time, set up your browser to accept all cookies or only some of them, or to reject them, preventing websites from using them. In addition, you can normally set your browser preferences so that you are notified whenever a cookie is stored on your computer. Finally, at the end of each browsing session, you can delete the cookies from the hard disk of your device. If you want to delete the cookies installed in the cookies folder of the browser you are using, please note that each browser has different procedures for managing the settings. By following the links below, you can obtain specific instructions for some of the main browsers: Microsoft Windows Explorer Google Chrome Mozilla Firefox Apple Safari 

Cookie	Name	Purpose	First/third party	Legal basis	Duration
Google Analytics	_ga  _gid  _gat_UA-x  _ga_X	Analytical	First party	Contract Execution	2 years  24 hours  3 months  2 years
Google’s Privacy Policy and Cookie Policy are available at the following links: Privacy Technologies You can download a browser add-on to permanently opt out of Google Analytics cookies at the following link
website	PHPSESSID	Technical	First party	Contract Execution	Session
Iubenda	_iub_cs-xxx	Technical	Third party	Contract Execution	12 months
Iubenda’s Privacy Policy and Cookie Policy are available at the following link.

PIXEL TAGS  Pixel tags (also called “clear gifs” or “web beacons”) are usually transparent graphic images that can be embedded in a website or an e-mail. The Company does not use any pixel tags in its website.    DATA RECIPIENTS  Data may be processed by external parties acting as autonomous data controllers, such as, by way of example, but not limited to, authorities and supervisory and control bodies, any party offering electronic payment services on their own circuits, social media present or referred to on this website, and parties offering services necessary for the website’s operation. Data may also be processed on behalf of the Company by authorised parties, and by external parties designated as data processors who are given appropriate operating instructions. These entities essentially belong to the following categories: 

• Companies that offer email services 

• Companies that offer services instrumental to the pursuit of the purposes indicated in this policy (IT suppliers, the company that manages and maintains the website) 

• Companies that offer support in carrying out market studies 

• Individuals, professional firms or companies offering professional services in accounting, tax, and legal matters, as well as banks, payment service providers, anti-fraud service providers, etc. 

SUBJECTS AUTHORISED TO PROCESS  The data may be processed by the employees of the company departments responsible for pursuing the afore-mentioned purposes who have been expressly authorised to do so and have received adequate operating instructions.    TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION  Your personal data may be transferred outside the European Union to the parties indicated in the section “Data Recipients”, if required for the purposes stated in this information notice. The Company guarantees that any transfers of your personal data shall be carried out in accordance with the requirements of the Data Protection Regulation in force. Such transfers may be based on an adequacy decision or on the Standard Contractual Clauses approved by the European Commission. For further information, please write to: privacy.linnominato@percassi.com    RIGHTS OF THE DATA SUBJECT – COMPLAINTS TO THE SUPERVISORY AUTHORITY  By contacting the Privacy Office by post at the address L’Innominato S.p.A. Via Giorgio e Guido Paglia 1/D, 24122 Bergamo, Italy, marked for the attention of the Privacy Contact Person or by email to the address privacy.linnominato@percassi.com, data subjects may ask the data controller for access to data concerning them, the erasure thereof, the rectification of inaccurate data, the completion of incomplete data, and the restriction or opposition to processing to pursue a legitimate interest of the owner, and to exercise any other right pursuant to and in the cases provided for by the GDPR. By choosing to exercise your right to erasure, you are aware that the Data Controller may adopt the procedures deemed fit for ascertaining your identity. Furthermore, where the processing is based on consent or contract and is carried out by automated means, data subjects have the right to receive the data in a structured, commonly used and machine-readable format and, if technically feasible, to have them sent to another data controller without hindrance (right to data portability). Technical cookies (including first-party analytical cookies) do not require your prior consent to be used. However, should you decide to block, disable or delete them, it may become impossible to navigate the browser, some services or functions on this website may become unavailable, or other malfunctions may occur, and you might be required to edit or enter certain information or preferences manually, any time you visit this website. Data subjects shall have the right to lodge a complaint with the competent supervisory authority in the Member State where they habitually reside or work or in the country where the alleged infringement occurred.    CHANGES TO THIS POLICY  The Company reserves the right to amend this Cookie Policy, in whole or in part, or to update its contents, i.e. following any amendments in applicable law. Therefore, the Company prompts you to consult this Cookie Policy on a regular basis, for the most recent and up-to-date version thereof.